browser_js
Execute arbitrary JavaScript in the browser context to extract data, inspect objects, or test security. Returns the evaluated result.
Instructions
Execute arbitrary JavaScript in the browser page context. Returns the expression's result.
PREREQUISITE: browser_open and browser_go must have been called first.
USE CASES:
Extract CSRF tokens: 'document.querySelector("meta[name=csrf-token]").content'
Read cookies: 'document.cookie'
Hook fetch API to monitor requests
Inspect JavaScript objects and prototypes
Test DOM-based XSS payloads
Call internal JavaScript functions
The expression is evaluated in the page's JS context — it has full access to the page's DOM, variables, functions, and APIs.
Args: expression: JavaScript code to evaluate. Can be a single expression or multi-line code. Example: 'document.title' or 'fetch("/api/me").then(r=>r.json())' session_name: Browser session to use (default: "default")
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tab_id | No | ||
| expression | Yes | ||
| session_name | No | default |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |