CDP Manager - an MCP server that runs Chrome slots 1-30 over CDP so multiple Claude agents can share and drive them by number
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
browser_statusShows running Chrome slots (1-30) with their tabs, opener, last action and one-line summary. Pass slot for just that slot.Shows running Chrome slots (1-30) with their tabs, opener, last action and one-line summary. Pass slot for just that slot.
No input schema was published for this tool.
browser_launchStarts slot Chrome. Call only when the user explicitly asks (other tools never start a closed slot).Starts slot Chrome. Call only when the user explicitly asks (other tools never start a closed slot).
No input schema was published for this tool.
browser_closeCloses slot Chrome cleanly (session and cookies saved). The profile (logins) is kept. Reports if another agent used it recently.Closes slot Chrome cleanly (session and cookies saved). The profile (logins) is kept. Reports if another agent used it recently.
No input schema was published for this tool.
browser_tabsSlot tab list: number, ID, title, URL, opener, last action, per-tab summary (updated only by actions with summary). "·front" marks the tab currently in front in its window (one per window).Slot tab list: number, ID, title, URL, opener, last action, per-tab summary (updated only by actions with summary). "·front" marks the tab currently in front in its window (one per window).
No input schema was published for this tool.
browser_tab_newOpens a new tab in the slot and returns its ID. When agents share a slot, open your own tab and work only by its ID to avoid mixing.Opens a new tab in the slot and returns its ID. When agents share a slot, open your own tab and work only by its ID to avoid mixing.
No input schema was published for this tool.
browser_tab_closeCloses a tab. tab is required.Closes a tab. tab is required.
No input schema was published for this tool.
browser_tab_selectBrings a tab to the front of its Chrome window. Changes what the user sees, so use only when the user wants it. (Background tabs can be read, operated and captured; no need to bring them forward to work.)Brings a tab to the front of its Chrome window. Changes what the user sees, so use only when the user wants it. (Background tabs can be read, operated and captured; no need to bring them forward to work.)
No input schema was published for this tool.
browser_snapshotReads the tab as accessibility-tree text. Clickable/typable elements get refs like [e12].Reads the tab as accessibility-tree text. Clickable/typable elements get refs like [e12].
No input schema was published for this tool.
browser_textReads the page body text (main/article if present). With ref, only that element's text. Shorter and easier than a snapshot for articles/documents. Use page for long text.Reads the page body text (main/article if present). With ref, only that element's text. Shorter and easier than a snapshot for articles/documents. Use page for long text.
No input schema was published for this tool.
browser_screenshotCaptures the visible area of the tab as PNG, even background tabs (without switching). Never changes window size or viewport, so full-page capture is unsupported (scroll then capture, or use snapshot/text).Captures the visible area of the tab as PNG, even background tabs (without switching). Never changes window size or viewport, so full-page capture is unsupported (scroll then capture, or use snapshot/text).
No input schema was published for this tool.
browser_navigateNavigates the tab to a URL and waits for the body to load.Navigates the tab to a URL and waits for the body to load.
No input schema was published for this tool.
browser_backGo back.Go back.
No input schema was published for this tool.
browser_forwardGo forward (after going back).Go forward (after going back).
No input schema was published for this tool.
browser_reloadReloads the page (same as Chrome reload). ignore_cache=true bypasses the cache. Careful: unsaved user input on the page is lost.Reloads the page (same as Chrome reload). ignore_cache=true bypasses the cache. Careful: unsaved user input on the page is lost.
No input schema was published for this tool.
browser_dialogAccepts (accept: true) or dismisses (accept: false) an open dialog (alert/confirm/prompt/beforeunload). The tab is frozen while a dialog is open.Accepts (accept: true) or dismisses (accept: false) an open dialog (alert/confirm/prompt/beforeunload). The tab is frozen while a dialog is open.
No input schema was published for this tool.
browser_permissionLists or answers Chrome permission bubbles ("site wants to: access other apps and services on this device / show notifications / know your location…").Lists or answers Chrome permission bubbles ("site wants to: access other apps and services on this device / show notifications / know your location…").
No input schema was published for this tool.
browser_hoverMoves the real mouse over a ref element (no click). For hover menus and tooltips. Use read=changes to see the opened menu.Moves the real mouse over a ref element (no click). For hover menus and tooltips. Use read=changes to see the opened menu.
No input schema was published for this tool.
browser_dragDrags with the real mouse (press → move in steps → release): drag and drop, sliders, reordering, drag CAPTCHAs, etc.Drags with the real mouse (press → move in steps → release): drag and drop, sliders, reordering, drag CAPTCHAs, etc.
No input schema was published for this tool.
browser_download_waitWaits for the most recently started download to finish and returns the saved file path (user's Chrome download folder). Call after clicking the download button. Returns as soon as it finishes.Waits for the most recently started download to finish and returns the saved file path (user's Chrome download folder). Call after clicking the download button. Returns as soon as it finishes.
No input schema was published for this tool.
browser_pdfSaves the page as a PDF (receipts, articles, etc.). Without path, saves to the user's Downloads folder named after the page title. Doesn't change the screen or window.Saves the page as a PDF (receipts, articles, etc.). Without path, saves to the user's Downloads folder named after the page title. Doesn't change the screen or window.
No input schema was published for this tool.
browser_clickClicks a ref element with real mouse events. If another element covers it, doesn't click and reports it. Waits for loading if the click navigates; reports new tabs.Clicks a ref element with real mouse events. If another element covers it, doesn't click and reports it. Waits for loading if the click navigates; reports new tabs.
No input schema was published for this tool.
browser_typeTypes text into a ref element, sending real key events (keydown/keypress/input/keyup) per character like a human.Types text into a ref element, sending real key events (keydown/keypress/input/keyup) per character like a human.
No input schema was published for this tool.
browser_fillFills several inputs on the same page in order (each cleared, typed with real key events, value verified).Fills several inputs on the same page in order (each cleared, typed with real key events, value verified).
No input schema was published for this tool.
browser_uploadprivilegedPuts files into a file input (no OS file picker shown to the user). Give ref of the file input (<input type=file> or its label), orPuts files into a file input (no OS file picker shown to the user). Give ref of the file input (<input type=file> or its label), or
No input schema was published for this tool.
browser_selectPicks an option in a <select> dropdown (by value or visible text; partial match OK). Focuses the dropdown and moves with keys (arrow keys on Windows/Linux, typing the first letters on macOS), so the page gets real events and no list popup opens. If nothing matches, lists the available options.Picks an option in a <select> dropdown (by value or visible text; partial match OK). Focuses the dropdown and moves with keys (arrow keys on Windows/Linux, typing the first letters on macOS), so the page gets real events and no list popup opens. If nothing matches, lists the available options.
No input schema was published for this tool.
browser_press_keyNo description publishedThis tool published no description. Forge does not invent one.
browser_scrollScrolls a ref element into view, or by dy pixels (positive = down, negative = up, default 600). Reports the actual resulting position.Scrolls a ref element into view, or by dy pixels (positive = down, negative = up, default 600). Reports the actual resulting position.
No input schema was published for this tool.
browser_waitWaits until text appears; gone: that text disappears; url: the URL changes; enabled: that button/input becomes enabled;Waits until text appears; gone: that text disappears; url: the URL changes; enabled: that button/input becomes enabled;
No input schema was published for this tool.
browser_evalprivilegedEvaluates a JavaScript expression in the tab and returns the result as JSON. Escape hatch only when other tools can't do it.Evaluates a JavaScript expression in the tab and returns the result as JSON. Escape hatch only when other tools can't do it.
No input schema was published for this tool.
browser_networkTab network request list (newest at bottom). Records the latest 500 since CDPM first attached to the tab. Filter with filter (URL part), type (Document, XHR, Fetch, Script, Image, etc.), failed (failures only). For details pass the n-number to browser_network_detail.Tab network request list (newest at bottom). Records the latest 500 since CDPM first attached to the tab. Filter with filter (URL part), type (Document, XHR, Fetch, Script, Image, etc.), failed (failures only). For details pass the n-number to browser_network_detail.
No input schema was published for this tool.
browser_network_detailShows one request's headers, sent data and response body (start of it, if text). id is the n-number from browser_network.Shows one request's headers, sent data and response body (start of it, if text). id is the n-number from browser_network.
No input schema was published for this tool.
browser_blockBlocks tab network requests matching URL patterns (they fail). add adds, remove removes, clear removes all rules you set.Blocks tab network requests matching URL patterns (they fail). add adds, remove removes, clear removes all rules you set.
No input schema was published for this tool.
slot_pauseUse only when the user says to pause (e.g. "pause 3"); agents never call it on their own. All action tools on the slot are refused and any browser_wait in progress stops at once.Use only when the user says to pause (e.g. "pause 3"); agents never call it on their own. All action tools on the slot are refused and any browser_wait in progress stops at once.
No input schema was published for this tool.
slot_resumeUse only when the user says to resume (e.g. "continue 3"); the agent owning a paused slot never calls it on its own. Unpauses and messages every agent on the slot to wake it (agents re-read the page and continue). all=true resumes every paused slot.Use only when the user says to resume (e.g. "continue 3"); the agent owning a paused slot never calls it on its own. Unpauses and messages every agent on the slot to wake it (agents re-read the page and continue). all=true resumes every paused slot.
No input schema was published for this tool.
slot_sendSends a message to other agents (real-time collaboration). slot = the slot the recipient owns (to reach another slot's agent, use that slot number). Omit to to send to everyone on that slot.Sends a message to other agents (real-time collaboration). slot = the slot the recipient owns (to reach another slot's agent, use that slot number). Omit to to send to everyone on that slot.
No input schema was published for this tool.
slot_inboxShows your unread messages. With wait (seconds), waits up to that long for a new message (for real-time conversation).Shows your unread messages. With wait (seconds), waits up to that long for a new message (for real-time conversation).
No input schema was published for this tool.
35 of 36 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
CDP Manager - an MCP server that runs Chrome slots 1-30 over CDP so multiple Claude agents can share and drive them by number
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the depth-4 limit. Anything below that level was never resolved.
The crawl stopped at the 60-package limit. The rest of the tree was never resolved.
36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
55 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+43 more not listed. The counts by reason above cover all of them.
Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.