Drive your real Chrome over MCP: real logins and cookies, multi-tab automation, deny-all by default.
Inferido de los transportes que declara este listado (stdio). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.
La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.
Leído del código que npm publica realmente, en el momento del análisis. El paquete nunca se ejecutó. Las herramientas registradas dinámicamente en tiempo de ejecución, o escondidas en código empaquetado o minificado, pueden pasarse por alto — así que esto es un mínimo de la superficie de herramientas, no un censo completo.
tabs_listList open browser tabs.List open browser tabs.
No se publicó ningún esquema de entrada para esta herramienta.
tab_selectMake a tab active by tabId.Make a tab active by tabId.
No se publicó ningún esquema de entrada para esta herramienta.
tab_newOpen a NEW tab (optionally at a URL) and focus it. Prefer this over `navigate` when the user says "open"/"go to" a site — `navigate` REPLACES the current tab. Pass active:false to open in the background (used by parallel batches).Open a NEW tab (optionally at a URL) and focus it. Prefer this over `navigate` when the user says "open"/"go to" a site — `navigate` REPLACES the current tab. Pass active:false to open in the background (used by parallel batches).
No se publicó ningún esquema de entrada para esta herramienta.
tab_closeClose a tab by tabId.Close a tab by tabId.
No se publicó ningún esquema de entrada para esta herramienta.
navigateNavigate a tab to a URL, REPLACING its current page. Acts on the active tab unless tabId is given — to open a site without losing the current page, use `tab_new` instead.Navigate a tab to a URL, REPLACING its current page. Acts on the active tab unless tabId is given — to open a site without losing the current page, use `tab_new` instead.
No se publicó ningún esquema de entrada para esta herramienta.
backGo back in history.Go back in history.
No se publicó ningún esquema de entrada para esta herramienta.
forwardGo forward in history.Go forward in history.
No se publicó ningún esquema de entrada para esta herramienta.
reloadReload the active (or given) tab.Reload the active (or given) tab.
No se publicó ningún esquema de entrada para esta herramienta.
clickClick an element. Target by selector, a snapshot ref, or role+name (e.g. role:"button", name:"Sign in") - the locator needs no snapshot first. trusted=true uses real OS-level input.Click an element. Target by selector, a snapshot ref, or role+name (e.g. role:"button", name:"Sign in") - the locator needs no snapshot first. trusted=true uses real OS-level input.
No se publicó ningún esquema de entrada para esta herramienta.
typeType text into an element (target by selector, ref, or role+name). trusted=true sends real keystrokes (works on React/Vue controlled inputs).Type text into an element (target by selector, ref, or role+name). trusted=true sends real keystrokes (works on React/Vue controlled inputs).
No se publicó ningún esquema de entrada para esta herramienta.
select_optionSelect option(s) of a <select> by value or visible label.Select option(s) of a <select> by value or visible label.
No se publicó ningún esquema de entrada para esta herramienta.
pressPress a key (with optional modifiers).Press a key (with optional modifiers).
No se publicó ningún esquema de entrada para esta herramienta.
hoverHover over an element.Hover over an element.
No se publicó ningún esquema de entrada para esta herramienta.
scrollScroll the page or to an element.Scroll the page or to an element.
No se publicó ningún esquema de entrada para esta herramienta.
screenshotCapture a screenshot (page or element). Default is JPEG (quality 70) at CSS-pixel size, which is several times smaller than PNG and reads fine. Pass format:"png" for lossless, quality 1-100 for JPEG, scale 2 for device pixels on a Retina display or 0.5 to shrink.Capture a screenshot (page or element). Default is JPEG (quality 70) at CSS-pixel size, which is several times smaller than PNG and reads fine. Pass format:"png" for lossless, quality 1-100 for JPEG, scale 2 for device pixels on a Retina display or 0.5 to shrink.
No se publicó ningún esquema de entrada para esta herramienta.
get_textGet visible text of the page or an element.Get visible text of the page or an element.
No se publicó ningún esquema de entrada para esta herramienta.
get_htmlGet HTML of the page or an element. Output is capped (see maxBytes) and cut at a tag boundary; narrow it with `selector` rather than raising the cap when you can. Password field values are always blanked.Get HTML of the page or an element. Output is capped (see maxBytes) and cut at a tag boundary; narrow it with `selector` rather than raising the cap when you can. Password field values are always blanked.
No se publicó ningún esquema de entrada para esta herramienta.
snapshotAccessibility snapshot: interactive elements with refs to target by `ref` (more reliable than guessing CSS selectors). Pass diff:true to get only what changed since the last snapshot of this tab - far cheaper in a click/read loop. Password fields appear as secret:true with no value.Accessibility snapshot: interactive elements with refs to target by `ref` (more reliable than guessing CSS selectors). Pass diff:true to get only what changed since the last snapshot of this tab - far cheaper in a click/read loop. Password fields appear as secret:true with no value.
No se publicó ningún esquema de entrada para esta herramienta.
get_cookiesRead cookies visible to the tab's URL (or a given url).Read cookies visible to the tab's URL (or a given url).
No se publicó ningún esquema de entrada para esta herramienta.
storageRead/write localStorage (or sessionStorage). op: get|set|remove|clear.Read/write localStorage (or sessionStorage). op: get|set|remove|clear.
No se publicó ningún esquema de entrada para esta herramienta.
evalprivilegiadaEvaluate JavaScript in the page (disabled in safe-mode).Evaluate JavaScript in the page (disabled in safe-mode).
No se publicó ningún esquema de entrada para esta herramienta.
wait_forWait for a selector or text to appear/disappear.Wait for a selector or text to appear/disappear.
No se publicó ningún esquema de entrada para esta herramienta.
extract_linksExtract anchors from the page or a subtree. dedupe=true collapses links sharing an href (nav/footer noise); limit caps the count.Extract anchors from the page or a subtree. dedupe=true collapses links sharing an href (nav/footer noise); limit caps the count.
No se publicó ningún esquema de entrada para esta herramienta.
read_as_markdownRead the page (or subtree) as readable markdown.Read the page (or subtree) as readable markdown.
No se publicó ningún esquema de entrada para esta herramienta.
fill_formFill multiple fields (keyed by selector) and optionally submit.Fill multiple fields (keyed by selector) and optionally submit.
No se publicó ningún esquema de entrada para esta herramienta.
download_fileDownload a file by URL or from a link element.Download a file by URL or from a link element.
No se publicó ningún esquema de entrada para esta herramienta.
upload_fileprivilegiadaSet local file(s) on a file <input> (target by selector or ref) — uploads without the OS dialog. Requires --enable-uploads. `files` are absolute local paths.Set local file(s) on a file <input> (target by selector or ref) — uploads without the OS dialog. Requires --enable-uploads. `files` are absolute local paths.
No se publicó ningún esquema de entrada para esta herramienta.
frames_listList the tab's frames (the top document plus every iframe the extension can reach), with each frame's id and URL. Use it when a selector that should match does not: the element is probably in one of these frames, and you can then pass frameId (or allFrames:true) to act inside it.List the tab's frames (the top document plus every iframe the extension can reach), with each frame's id and URL. Use it when a selector that should match does not: the element is probably in one of these frames, and you can then pass frameId (or allFrames:true) to act inside it.
No se publicó ningún esquema de entrada para esta herramienta.
console_logsConsole output and uncaught errors recorded on the page (requires --enable-observers). This is how you find out WHY a page misbehaved rather than only what it looks like afterwards. Pass sinceSeq to poll for what is new, clear:true to drain.Console output and uncaught errors recorded on the page (requires --enable-observers). This is how you find out WHY a page misbehaved rather than only what it looks like afterwards. Pass sinceSeq to poll for what is new, clear:true to drain.
No se publicó ningún esquema de entrada para esta herramienta.
network_logRequests the page made - fetch and XMLHttpRequest with method, URL, status and duration (requires --enable-observers). Set includeResources:true to also list scripts/images/styles from Resource Timing (those carry timing and size but no status). Does not include the document request or headers.Requests the page made - fetch and XMLHttpRequest with method, URL, status and duration (requires --enable-observers). Set includeResources:true to also list scripts/images/styles from Resource Timing (those carry timing and size but no status). Does not include the document request or headers.
No se publicó ningún esquema de entrada para esta herramienta.
dialogsNative dialogs (alert/confirm/prompt/beforeunload) the page raised, and how they were answered (requires --enable-observers). With observers on, dialogs are intercepted rather than left to block the renderer - which is what otherwise turns a click that opens a confirm() into a mystery TIMEOUT. Set…Native dialogs (alert/confirm/prompt/beforeunload) the page raised, and how they were answered (requires --enable-observers). With observers on, dialogs are intercepted rather than left to block the renderer - which is what otherwise turns a click that opens a confirm() into a mystery TIMEOUT. Set…
No se publicó ningún esquema de entrada para esta herramienta.
print_pdfRender the page to PDF through Chrome's own print pipeline and save it to the task's results/ dir. Returns the path and size, not the bytes - a PDF is not something to spend context on.Render the page to PDF through Chrome's own print pipeline and save it to the task's results/ dir. Returns the path and size, not the bytes - a PDF is not something to spend context on.
No se publicó ningún esquema de entrada para esta herramienta.
chrome_statusReport backend/session status: paired browser profiles and how each was named, and flags for switched-off capabilities.Report backend/session status: paired browser profiles and how each was named, and flags for switched-off capabilities.
No se publicó ningún esquema de entrada para esta herramienta.
auth_checkIs the tab sitting on a sign-in wall? Reads the page (URL, title, password fields, sign-in controls) and returns { authRequired, confidence, signals }. Use it after a navigate, or whenever a step fails unexpectedly, to tell "the session expired" apart from "the agent got lost". Pass failOnAuthWall:…Is the tab sitting on a sign-in wall? Reads the page (URL, title, password fields, sign-in controls) and returns { authRequired, confidence, signals }. Use it after a navigate, or whenever a step fails unexpectedly, to tell "the session expired" apart from "the agent got lost". Pass failOnAuthWall:…
No se publicó ningún esquema de entrada para esta herramienta.
profile_useSwitch the active browser profile (identity). Subsequent downloads, results, screenshots, and the action log are stored under profiles/<name>/. Resets the active task to "default" unless you then call task_new.Switch the active browser profile (identity). Subsequent downloads, results, screenshots, and the action log are stored under profiles/<name>/. Resets the active task to "default" unless you then call task_new.
No se publicó ningún esquema de entrada para esta herramienta.
profile_renameprivilegiadaRename an automatically named browser profile (e.g. "profile-2" -> "work"). The name sticks across restarts; its saved artifacts move with it.Rename an automatically named browser profile (e.g. "profile-2" -> "work"). The name sticks across restarts; its saved artifacts move with it.
No se publicó ningún esquema de entrada para esta herramienta.
task_newStart a new task (run) under the active profile. Creates profiles/<profile>/tasks/<name>/ with downloads/, results/, screenshots/ and makes it the active task so all captured artifacts land there.Start a new task (run) under the active profile. Creates profiles/<profile>/tasks/<name>/ with downloads/, results/, screenshots/ and makes it the active task so all captured artifacts land there.
No se publicó ningún esquema de entrada para esta herramienta.
tasks_listList every task across all profiles under the data dir, with sizes and download counts.List every task across all profiles under the data dir, with sizes and download counts.
No se publicó ningún esquema de entrada para esta herramienta.
task_statusReport the active profile/task and the folder paths where this run's artifacts are stored.Report the active profile/task and the folder paths where this run's artifacts are stored.
No se publicó ningún esquema de entrada para esta herramienta.
batchRun multiple tool calls in one request — parallel (default) or serial. Each op is { tool, args } and goes through the same policy gate, rate limit, and error handling as a direct call. In parallel mode, tab-scoped ops MUST pass an explicit tabId (the active-tab default is unsafe under concurrency).…Run multiple tool calls in one request — parallel (default) or serial. Each op is { tool, args } and goes through the same policy gate, rate limit, and error handling as a direct call. In parallel mode, tab-scoped ops MUST pass an explicit tabId (the active-tab default is unsafe under concurrency).…
No se publicó ningún esquema de entrada para esta herramienta.
40 de 40 herramientas publicaron una descripción.
Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.
Drive your real Chrome over MCP: real logins and cookies, multi-tab automation, deny-all by default.
Los nombres enlazados abren el índice de Forge con todas las entradas que se observó que exponen esa herramienta. Ver todas las herramientas indexadas.
El rastreo se detuvo en el límite de profundidad 4. Nada por debajo de ese nivel llegó a resolverse.
El rastreo se detuvo en el límite de 60 paquetes. El resto del árbol nunca se resolvió.
Hay 36 paquetes resueltos más que no se dibujan aquí (límite de visualización: 24). Toda dependencia con avisos de seguridad se dibuja aunque se supere el límite. Inventario completo (SBOM CycloneDX)
54 dependencias declaradas nunca llegaron al árbol. Faltan en la resolución de Forge, no en el paquete.
+42 más sin listar. Los recuentos por motivo de arriba las incluyen todas.
No se siguen: peerDependencies. Este árbol cubre solo dependencias en tiempo de ejecución, así que lo que estas arrastren nunca se resolvió.