Stealth Chrome for AI agents: bot-protected sites, Turnstile, closed Shadow DOM, clean Markdown.
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
navigateOpen a URL in the stealth browser and return the page snapshot (accessibility outline with [ref=…] on interactive elements). Best for: starting a browsing task, sites behind Cloudflare/bot checks. Not for: fetching many URLs in bulk (use scrape).Open a URL in the stealth browser and return the page snapshot (accessibility outline with [ref=…] on interactive elements). Best for: starting a browsing task, sites behind Cloudflare/bot checks. Not for: fetching many URLs in bulk (use scrape).
No input schema was published for this tool.
snapshotAccessibility snapshot of the current page: roles, names and [ref=…] for interactive elements, including elements inside closed shadow DOM and cross-origin iframes. Refs are valid until the next snapshot. Set interactiveOnly for a short list of what can be clicked/typed.Accessibility snapshot of the current page: roles, names and [ref=…] for interactive elements, including elements inside closed shadow DOM and cross-origin iframes. Refs are valid until the next snapshot. Set interactiveOnly for a short list of what can be clicked/typed.
No input schema was published for this tool.
clickClick an element by ref with human-like mouse movement. Returns the updated snapshot.Click an element by ref with human-like mouse movement. Returns the updated snapshot.
No input schema was published for this tool.
typeType text into an element by ref with human-like keystrokes. Use {{SECRET_NAME}} placeholders for credentials configured on the server — never ask the user for raw secrets. Set submit to press Enter afterwards.Type text into an element by ref with human-like keystrokes. Use {{SECRET_NAME}} placeholders for credentials configured on the server — never ask the user for raw secrets. Set submit to press Enter afterwards.
No input schema was published for this tool.
press_keyPress a keyboard key on the focused element (e.g. Enter, Escape, Tab, ArrowDown).Press a keyboard key on the focused element (e.g. Enter, Escape, Tab, ArrowDown).
No input schema was published for this tool.
go_backGo back in history.Go back in history.
No input schema was published for this tool.
waitWait for a number of seconds (max 30), e.g. for a slow page or a challenge to clear. Returns the snapshot.Wait for a number of seconds (max 30), e.g. for a slow page or a challenge to clear. Returns the snapshot.
No input schema was published for this tool.
markdownRead the current page as clean Markdown (main content only by default; includes closed shadow DOM). Best for: articles, docs, product pages — far fewer tokens than a snapshot. Pass `query` to keep only the relevant sections.Read the current page as clean Markdown (main content only by default; includes closed shadow DOM). Best for: articles, docs, product pages — far fewer tokens than a snapshot. Pass `query` to keep only the relevant sections.
No input schema was published for this tool.
metadataStructured metadata of the current page: title, description, canonical, OpenGraph, Twitter card and JSON-LD (schema.org: products, prices, articles…).Structured metadata of the current page: title, description, canonical, OpenGraph, Twitter card and JSON-LD (schema.org: products, prices, articles…).
No input schema was published for this tool.
screenshotPNG screenshot of the current page (viewport, or full page).PNG screenshot of the current page (viewport, or full page).
No input schema was published for this tool.
solve_turnstileSolve an interactive Cloudflare Turnstile checkbox on the current page with human-like input. Use when the snapshot shows a Cloudflare challenge.Solve an interactive Cloudflare Turnstile checkbox on the current page with human-like input. Use when the snapshot shows a Cloudflare challenge.
No input schema was published for this tool.
scrapeOne-shot fetch of a URL as Markdown (+ metadata), escalating automatically: plain HTTP → stealth browser → browser with Turnstile solving. Best for: reading a page you don't need to interact with. Does not change the current tab.One-shot fetch of a URL as Markdown (+ metadata), escalating automatically: plain HTTP → stealth browser → browser with Turnstile solving. Best for: reading a page you don't need to interact with. Does not change the current tab.
No input schema was published for this tool.
check_egressReport the browser's exit IP, ASN/org, country and whether it looks like a datacenter (the #1 reason sites block). Useful before debugging blocks.Report the browser's exit IP, ASN/org, country and whether it looks like a datacenter (the #1 reason sites block). Useful before debugging blocks.
No input schema was published for this tool.
13 of 13 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Stealth Chrome for AI agents: bot-protected sites, Turnstile, closed Shadow DOM, clean Markdown.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the depth-4 limit. Anything below that level was never resolved.
3 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.