chrome-devtools-axiBLOCK
The most agent-ergonomic browser automation
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
chrome-devtools-axi
The most agent-ergonomic browser automation
chrome-devtools-axi wraps chrome-devtools-mcp with an AXI-compliant CLI.
- Token-efficient — TOON-encoded output cuts token usage ~40% vs raw JSON
- Combined operations — one command navigates, captures, and suggests next steps
- Contextual suggestions — every response includes actionable next-step hints
Benchmarks
Agent ergonomics is measurable. The axi benchmark runs the same 14 real-world browsing tasks (Wikipedia research, GitHub navigation, multi-site comparison, and more) through 7 browser automation setups - 5 repeats each, with claude-sonnet-4-6 as the agent and an LLM judge scoring task success.
chrome-devtools-axi posts the lowest input
349d3541b7a7OBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add chrome-devtools-axi -- npx -y [email protected]
{
"mcpServers": {
"chrome-devtools-axi": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
list_pages | read |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (4 observation(s))
- Shell
- declared (2 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (17)
eval(jsOrFn: string | ((...args: unknown[]) => unknown)): Promise<unknown>;
.claude/skills
logBridgeMessage(`Listening on http://127.0.0.1:${port}`);e.g. "http://127.0.0.1:9222" or "wss://cluster.example/launch"
.prettierignore
.release-please-manifest.json
const compiled = new Function(
const compiled = new Function(
const pending = new Function(`return (${args.function})`)()();new Function(`return (${args.function})`)()(),filePaths: ["/home/user/.ssh/id_rsa"],
command: "/usr/local/bin/chrome-devtools-axi",
export CHROME_DEVTOOLS_AXI_MCP_SERVER_URL=http://127.0.0.1:9333/mcp
export CHROME_DEVTOOLS_AXI_MCP_SERVER_URL=http://127.0.0.1:9333/mcp
export CHROME_DEVTOOLS_AXI_BROWSER_URL=http://127.0.0.1:9222
@modelcontextprotocol/sdk, @toon-format/toon, axi-sdk-js, @types/node, prettier, tsx, typescript, vitest
Your own externally launched Chrome is unaffected: its saved passwords remain available and untouched because this tool does not read, write, move, or reset the login keychain or its `Chrome Safe Stor
Gates applied: no_behavioural_pass.
349d3541b7a7full audit observations/trust-audit/mcp-server/kunchenguid__chrome-devtools-axi.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 349d3541b7a7 | BLOCK | D | 69 | first audit |
Questions
What is the chrome-devtools-axi MCP server?
The most agent-ergonomic browser automation
What tools does chrome-devtools-axi expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is chrome-devtools-axi safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What credentials does chrome-devtools-axi need?
No credential environment variables were found in its source, so it appears to need none.
How does chrome-devtools-axi run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as chrome-devtools-axi at 0.1.40.
How current is this page?
The grade is for one exact copy of the source (349d3541b7a7), read on 2026-10-12. The repository is watched and re-audited when it changes.