Tap
Taprun ist ein Browser-Automatisierungs- und Web-Scraping-MCP-Server für KI-Agenten. Zeigen Sie auf eine beliebige Website; Ihr Agent untersucht die Seite einmal, kompiliert ein deterministisches Programm und spielt es für immer ab — null KI-Token zur Laufzeit, das gleiche Ergebnis bei jedem Aufruf. Funktioniert mit Claude Code, Cursor, Cline, Windsurf und jedem MCP-Host. Läuft in echtem Chrome (Login-Sitzungen) oder Headless Playwright. Gesundheitsverträge erkennen stille Fehler. Strukturelle Zustands-Diffs zeigen Ihnen genau, was sich geändert hat. tap doctor erkennt Brüche, bevor Ihre Daten veralten — nicht erst drei Tage später.
Forge: AI inspects the site → compiles a .tap.js program (one-time cost)
Run: The program executes instantly, same result every time ($0, zero AI)
Monitor: tap doctor checks health contracts + structural state diffs (catches breakage)
Heal: AI reads diagnostics and patches the program (only when needed)MCP ist die Autorenebene. tap.run ist die Ausführungsebene. Die KI nimmt während der Erstellung (einmalig) teil. Die Ausführung ist reiner Code — null Token, deterministische Ausgabe. Über 140 vorgefertigte Skills für mehr als 68 Websites — Reddit, GitHub, Hacker News, LinkedIn, Twitter, YouTube, Producthunt und mehr — oder erstellen Sie Ihre eigenen von jeder URL aus. Ein Binärprogramm, null Abhängigkeiten.
Anwendungsfälle: Browser-Automatisierung für KI-Agenten · geplantes Web-Scraping · strukturierte Datenextraktion · Inhaltsüberwachung · Automatisierung von Websites mit Login · standortübergreifende Datenpipelines · Zuverlässigkeitsüberwachung für langlebige Agenten.
Erste Schritte
1. Installation
Zero-Install via npx (jedes Gerät mit Node):
npx -y @taprun/cli --versionDer erste Lauf lädt das passende Plattform-Binärprogramm (~30MB) herunter und speichert es zwischen. Nachfolgende Aufrufe erfolgen sofort.
Permanente Installation via curl (macOS / Linux):
curl -fsSL https://taprun.dev/install.sh | shPlattform | Download |
macOS (Apple Silicon) | |
macOS (Intel) | |
Linux | |
Windows |
2. Verbindung mit Ihrem KI-Agenten herstellen
Funktioniert mit Claude Code, Cursor, Windsurf oder jedem MCP-kompatiblen Agenten — keine Erweiterung erforderlich:
{ "mcpServers": { "tap": { "command": "npx", "args": ["-y", "@taprun/cli", "mcp", "start"] } } }Oder konfigurieren Sie alle installierten Agenten automatisch:
tap mcp connect3. Loslegen
tap github/trending # GitHub trending repos
tap hackernews/hot # Hacker News front page
tap weibo/hot # 微博热搜
tap xiaohongshu/search --keyword "AI" # 小红书搜索Oder fragen Sie einfach Ihren KI-Agenten:
You: What's trending on GitHub today?
Agent: Here are today's top repos — React compiler hit 734 stars...
You: Forge a tap for Douban top 250 movies
Agent: Done. Run `tap douban/top250` anytime — $0 per run.Optional: Chrome-Erweiterung (für Websites mit Login)
Die meisten Taps funktionieren ohne Login. Für Websites, die Ihre Sitzung benötigen (Xiaohongshu, Zhihu usw.), installieren Sie die Chrome-Erweiterung aus dem Chrome Web Store.
Related MCP server: Puppeteer MCP Server
Was können Sie tun?
Lesen — Extrahieren Sie Daten von jeder Website
tap reddit/hot # Reddit front page
tap bilibili/trending # Bilibili trending
tap arxiv/search --keyword "LLM" # arXiv papersSchreiben — Bedienen Sie jede Website
tap xiaohongshu/publish --title "My Note" --images photo.jpg
tap zhihu/publish --title "My Article" --content "..."Beobachten — Überwachen Sie Änderungen
tap watch github/trending --every 5mKomponieren — Verketten wie Unix-Pipes
tap github/trending | tap filter --field stars --gt 500 | tap tableErstellen (Forge) — Erstellen Sie neue Automatisierungen mit KI
tap forge "get Hacker News top stories" # BYOK Claude / GPT
tap forge https://news.ycombinator.com # API detected — compiled without AIBringen Sie Ihr eigenes Modell mit — funktioniert mit Claude, OpenAI, DeepSeek oder jedem OpenAI-kompatiblen Endpunkt, einschließlich lokalem Ollama / LM Studio für vollständig offline erstellte Automatisierungen:
tap config set ai.baseUrl http://localhost:11434/v1
tap config set ai.key ollama
tap config set ai.model llama3.1
tap forge "scrape arxiv recent papers" # 0 bytes leave your machineWie es funktioniert
┌─ Chrome (your real browser sessions)
You → AI → Taprun ──────┤─ Playwright (headless, server, CI/CD)
compile └─ macOS (native desktop apps)Sie beschreiben, was Sie möchten (natürliche Sprache oder URL)
Die KI kompiliert es in ein
.tap.js-Programm — einfaches JavaScript, versionskontrolliertTaprun führt das Programm auf einer der drei Laufzeitumgebungen aus — für immer, zu $0
Jede erfolgreiche Kompilierung macht die nächste schneller. Über 140 Community-Skills bedeuten, dass Ihr Agent bereits 68+ Websites kennt.
Community-Skills
tap-skills — 140+ Skills, Open Source.
Kategorie | Beispiele |
Trending | GitHub, Hacker News, Reddit, Product Hunt, Bilibili, Zhihu, Weibo, Xiaohongshu |
Suche | arXiv, Reddit, X, Zhihu, Weibo, Xiaohongshu, Bilibili, Medium |
Lesen | Zhihu-Threads, Bilibili-Videos, Xiaohongshu-Notizen, WeRead-Bücher |
Schreiben | X-Posts, Xiaohongshu-Notizen, Zhihu-Artikel, Dev.to, LinkedIn |
Überwachen | Preisverfolgung, Aktiendaten, Wettbewerbsanalyse |
tap doctor # Health check — catches silent failures before your data goes stale
tap update # Install / update all skills
tap list # See everything availableWie Taprun im Vergleich abschneidet
Taprun | KI-Browser-Agenten | Traditionelle Scraper | |
KI-Kosten pro Lauf | $0 (einmalig kompilieren) | Token bei jedem Lauf | Kostenlos |
Genauigkeit | Deterministisch | Variiert pro Lauf | Deterministisch |
Erkennung stiller Fehler | Gesundheitsverträge + strukturelle Zustands-Diffs | Keine | Keine |
Fehlerdiagnose |
| Keine | Manuelle Stichproben |
Erkennungsrisiko | Niedrig (echte Browsersitzungen) | Hoch | Hoch |
Laufzeitumgebungen | 3 (Chrome + Playwright + macOS) | 1 | 1 |
Code inspizierbar | .tap.js — git diff, debug, version | Blackbox / flüchtig | Zerbrechliche Skripte |
MCP-nativ | Ja (nur Autorenebene — Ausführung ist null Token) | Nein | Nein |
Sicherheit
Ebene | Schutz |
Sandbox | Programme laufen mit null Berechtigungen — kein Datei-, Netzwerk- oder Systemzugriff |
Statische Analyse | CI blockiert gefährliche Muster, bevor sie Benutzer erreichen |
Nur lokal | Ihre Daten, Sitzungen und API-Schlüssel verlassen niemals Ihr Gerät |
Siehe SECURITY.md für Details.
Mitwirken
Der einfachste Weg mitzuwirken: Erstellen Sie einen neuen Tap. Eine .tap.js-Datei ist alles, was nötig ist.
Siehe CONTRIBUTING.md für Details.
Roadmap
[x] 140+ Community-Skills für 68+ Websites
[x] 3 Laufzeitumgebungen — Chrome, Playwright, macOS
[x] Unix-Pipes —
tap A | tap B[x] Beobachtungsmodus — Änderungen im Zeitverlauf überwachen
[x] Doctor — Gesundheitsverträge, Fingerabdruck-Diffs, automatische Diagnose für defekte Taps
[x] Ein-Befehl-Setup —
tap mcp connectkonfiguriert alle KI-Agenten[ ] Android-Laufzeit
[ ] iOS-Laufzeit
[ ] Parallelitätskontrolle — deterministische Koordination für M-Agenten, die gemeinsam genutzte Konten parallel betreiben
Support
GitHub Discussions — Fragen & Antworten, Ideen, Show & Tell
support@taprun.dev — Lizenzierung, privates Feedback, Beratung
Issues — Fehlerberichte
Lizenz
Chrome-Erweiterung & Dokumentation: MIT. Community-Skills: MIT.
Star-Verlauf
Available Tools
11 toolsforge_draftAInspect
Load a tap into memory and optionally verify it live. Accepts a structured plan (TapAnnotation — preferred; verify runs it via the plan runtime) or legacy code (.tap.js source). When url is provided, auto-runs verification and returns {score, rows}. Without url, just stashes the draft.
| Name | Required | Description | Default |
|---|---|---|---|
| url | No | URL to verify against. When provided, draft loads + runs live verification in one step. | |
| code | No | Legacy .tap.js source — still supported for rollback; auto-migrated on save. | |
| path | No | Path to .tap.js file. Ignored when plan or code is provided. | |
| plan | No | TapAnnotation envelope — W3C Annotation with body:tap:ExecutionPlan. Preferred over code. | |
| description | No | Short summary of what this verifies (e.g. 'HN posts with rank, title, points') |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=false and openWorldHint=true, implying mutation and external access. The description confirms live verification when url is provided and mentions returning {score, rows}. However, it does not disclose side effects like memory consumption, potential overwrites, or access requirements beyond what annotations hint. The description adds some value but lacks depth for a tool that modifies state.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, starting with a clear action-oriented purpose. All critical information (input modes, behavior modes) is included without redundancy. Every phrase adds value, making it highly efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 5 parameters (none required), no output schema, and complex two-mode behavior, the description covers the main scenarios: with url (verification) and without (stashing). It explains the two input options and their relationship. However, it could be more complete by clarifying what 'stashes the draft' means in terms of state persistence or lifetime.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has 100% coverage; each parameter is described. The description adds context about the preferred usage of plan over code and explains the url behavior. However, it does not significantly enhance understanding beyond the schema, and the parameter 'description' is mentioned without additional semantic value. Baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool loads a tap into memory and optionally verifies it live. It specifies two input modes (plan and code) and differentiates behavior based on url presence. However, it does not explicitly differentiate from sibling tools like tap_run or tap_list, leaving some ambiguity about when to use this tool over others.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to use url (auto-run verification) and when not (stash draft). It also indicates a preference for the plan parameter over legacy code. While it doesn't explicitly mention alternatives or when-not-to-use, the context of the tool (loading draft) is reasonably clear from the description.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
forge_inspectARead-onlyInspect
Analyze a page for tap forging: detects framework, SSR state, APIs, and generates extraction strategies. Also use this to re-forge a broken tap — inspect the page again to find what changed. Pass probe_writes:true to discover write actions without triggering them (zero side effects).
AUTHORING PRINCIPLE: Prefer API > SSR > DOM. handle.fetch (cookie-aware) and handle.ssrState beat handle.eval(querySelectorAll); handle.find / handle.copyAll beat hand-rolled selectors. Read existing_taps first — if one already covers part of the need, compose with it inside handle.pipe rather than re-extracting.
| Name | Required | Description | Default |
|---|---|---|---|
| url | No | ||
| detail | No | Comma-separated extra sections to include: network,ssr,auth,a11y,annotations,structure,deep. 'structure' adds per-candidate anti-scraping diagnostics (Flexbox order, custom fonts, canvas, ::before/::after content, homoglyphs) + href stability score. 'deep' additionally computes readable_ratio (expensive). Use 'all' for the full payload. Default returns top candidates + confidence + status only. | |
| probe_writes | No | Discover write actions (POST/PUT/PATCH/DELETE) without executing them. Captures endpoints + payloads via abort intercept. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations are readOnlyHint=true, destructiveHint=false, openWorldHint=true. Description adds detail that probe_writes has zero side effects and emphasizes discovery without execution. No contradictions, and description complements annotations well.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured, starting with the primary purpose, then secondary use, parameter tip, and authoring principle. It is front-loaded and informative, though slightly lengthy. Still earns a 4.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's purpose (analysis), the description covers main outputs, parameter usage, and authoring principles. No output schema, but the description mentions default return values. Adequate for the complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 67% (probe_writes and detail have descriptions; url does not). The description adds context for probe_writes and detail, but does not significantly extend beyond what the schema provides for those parameters. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool analyzes pages for tap forging, detects framework/SSR/APIs, and generates extraction strategies. It also distinguishes between initial analysis and re-forging broken taps, making the purpose specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to re-forge (broken taps) and how to use probe_writes. It mentions reading existing_taps first, but does not fully distinguish this tool from all siblings like inspect, though context implies it's for page analysis.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
forge_saveADestructiveInspect
Save the tap to disk as .tap.json and auto-commit to git. Accepts either a structured plan (W3C Annotation wrapping an ExecutionPlan body — preferred) or code (legacy .tap.js source, migrated to a plan on write). Falls back to code from the active forge.draft session when neither is passed. After saving, tap.run can execute it forever with zero AI.
Optional verify_examples runs the just-saved tap against the supplied examples and asserts row-shape contracts (min_rows, non_empty, max_elapsed_ms). When all examples pass, the response includes doctor (verdict from running tap.doctor on the saved tap). When any example fails, the response includes regenerated_inspect — a fresh forge.inspect on the same URL — so the agent can re-forge in one round-trip instead of three. When omitted, behavior is unchanged and the response carries doctor: "indeterminate".
| Name | Required | Description | Default |
|---|---|---|---|
| code | No | Optional — legacy .tap.js source; auto-migrated to a plan on save | |
| name | Yes | ||
| plan | No | TapAnnotation envelope — W3C Annotation with body:tap:ExecutionPlan. Preferred over code. | |
| site | Yes | ||
| verify_examples | No | Optional auto-verify hook (issue #31). Each example runs the just-saved tap with `args` and asserts the result against `expect`. On any failure the response gains `ok:false` and `regenerated_inspect` (a fresh forge.inspect on the saved URL). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate destructive hint (true), and description elaborates: 'auto-commit to git', 'migrated to a plan on write', and post-save execution capability. Describes conditional behavior with verify_examples: on success returns doctor, on failure returns regenerated_inspect. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is front-loaded with core action, then modes, then verification details. Each sentence adds value. Slightly lengthy due to detailed verify_examples explanation, but that is necessary for completeness. Could be trimmed slightly without losing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description covers return values thoroughly: doctor on success, regenerated_inspect on failure, and default indeterminate. Explains fallback behavior and migration. Covers all aspects of the tool's behavior, making it self-contained for agent use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 60%, and description adds meaning for plan, code, and verify_examples with usage details. Site and name are not elaborated in description but are straightforward required identifiers. The explanation of verify_examples' sub-fields (min_rows, non_empty, max_elapsed_ms) compensates for nested complexity. Could describe site/name more, but adequate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the tool's purpose: saving a tap to disk as .tap.json with auto-commit to git. Distinguishes from siblings like forge_draft (which presumably creates drafts) and forge_inspect (which inspects) by focusing on persistence. Mentions two input modes (plan preferred, code legacy) and fallback to draft session.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use each parameter: 'plan (W3C Annotation...preferred)' vs 'code (legacy .tap.js source...)', and fallback to active forge.draft session. Also explains when to use verify_examples and its outcomes, enabling the agent to make informed decisions about error handling and round-trip optimization.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
inspectARead-onlyInspect
Inspect the current page. Use target to choose what to inspect: page (url/title/meta), dom (HTML structure), a11y (accessibility tree), element (single element detail, requires selector), network (captured traffic — auto-starts capture on first call, dumps on subsequent). Default: page.
| Name | Required | Description | Default |
|---|---|---|---|
| bodies | No | Include response bodies (target=network only) | |
| target | No | What to inspect | page |
| selector | No | CSS selector (required for target=element, optional for target=dom to scope) | |
| url_filter | No | Filter network entries by URL substring (target=network only) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate read-only and non-destructive behavior. The description adds useful behavioral detail for the 'network' target, specifying auto-start and dump behavior. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences with front-loaded purpose. Every part adds value, no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers main targets and network behavior, but lacks details on output format. Given no output schema, this is a minor gap. Overall, it provides a solid understanding for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers all parameters with descriptions. The tool description adds extra meaning by summarizing what each target inspects and noting that 'element' requires a selector, enhancing understanding beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool inspects the current page and lists target options. However, it does not differentiate from the sibling tool 'forge_inspect', which may serve a similar purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for each target option and explains default behavior. It does not explicitly state when not to use the tool or mention alternatives, but the guidance for target selection is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_doctorARead-onlyInspect
Health check for taps. Runs each tap's examples against its health contract. Returns {ok, annotations[], issues[], suggestions[]}. Each annotation is a W3C Web Annotation (motivation:'assessing') with body.tap:verdict in {healthy, broken, stale, layer-mismatch}. Use when tap.run returns empty/error rows, or after forge.save to validate. ALWAYS specify site+name — unscoped checks scan all user taps and are expensive. PIPE TAPS: annotations include recursive sub-tap diagnosis via body.children[]. Use tap.explain for static analysis without running.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Tap name within site (optional — omit to check all taps for the site) | |
| site | No | Site to check. Always specify — omitting scans all user-forged taps. | |
| timeout | No | Timeout per tap in ms |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, and destructiveHint. Description adds rich behavioral context: return format with W3C Web Annotations, verdicts, and recursive sub-tap diagnosis for pipe taps via body.children[]. It also warns about expensive unscoped scans. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise but packs information: purpose, return format, usage guidance, caveat, and pipe-specific behavior. Each sentence adds value. Could be slightly more structured but is efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no output schema, the description fully details the return structure including the annotation format and verdicts. It covers pipe taps with recursive diagnosis. It also references a sibling (tap.explain) for static analysis. Given the tool's complexity, the description is complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions for all 3 parameters. Description adds meaningful context beyond schema: reinforces that site and name should always be specified, and explains that omitting them scans all user taps (expensive). This adds value over the bare schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Health check for taps. Runs each tap's examples against its health contract. Returns {ok, annotations[], issues[], suggestions[]}.' It gives specific return structure and verdicts. It distinguishes from siblings like tap_run (runs the tap) and tap_explain (static analysis).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use: 'Use when tap.run returns empty/error rows, or after forge.save to validate.' Also gives a strong caveat: 'ALWAYS specify site+name — unscoped checks scan all user taps and are expensive.' Provides an alternative: 'Use tap.explain for static analysis without running.'
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_envARead-onlyIdempotentInspect
Check tap runtime environment: binary version, TAP_HOME directory, installed skills count, Playwright availability, daemon status, and OS info. Zero side effects — no browser needed. Use for initial troubleshooting or CI health gates.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide safety hints (readOnlyHint, destructiveHint, idempotentHint). The description adds 'Zero side effects — no browser needed,' reinforcing and adding context beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with main purpose, then usage guidance. No redundant or unnecessary information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no parameters, no output schema, but rich annotations, the description is complete: it explains what the tool checks and when to use it. No missing context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, and schema coverage is 100% (trivial). Per guidelines, 0 parameters baseline is 4; description does not need to add parameter meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool checks tap runtime environment, listing specific items (binary version, TAP_HOME, skills count, etc.) and explicitly distinguishes from siblings by noting zero side effects and no browser needed.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description says 'Use for initial troubleshooting or CI health gates,' providing clear context. While it doesn't explicitly mention when not to use or alternative tools, the purpose is well-defined among siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_expand_toolsAInspect
Expand this session's MCP tool set. Call when the default Layer-1 set (run/list/doctor/fix/forge.*/inspect) is insufficient — e.g. need manual browser actions (click/type/fill/scroll), write-tap operations, or diagnostic probes that aren't exposed yet. Levels: 2 = creative (forge supplements + diagnostics), 3 = manual (raw browser control: tap.click, tap.type, tap.eval, tap.find, tap.upload, tap.nav, tap.wait, tap.cookies, tap.pressKey). After calling, the server sends notifications/tools/list_changed; clients that honor it will re-query tools/list automatically. Higher-level calls subsume lower ones — calling with level:3 exposes both Layer 2 and Layer 3.
| Name | Required | Description | Default |
|---|---|---|---|
| level | Yes | Target tier. 2: creative. 3: full manual. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description fully discloses the behavioral impact: after calling, the server sends notifications/tools/list_changed, and clients that honor it will re-query tools/list automatically. This explains the dynamic nature of the tool set expansion. The annotation 'openWorldHint: true' aligns with the description, confirming that the tool can change available tools. There is no contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single paragraph that is generally concise and front-loaded with the main action. Every sentence adds value, but it could be slightly more streamlined. For example, the list of level-3 tools is helpful but somewhat lengthy. Overall, it is well-structured and informative without being verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with only one parameter, no output schema, and complex behavior (expanding the tool set with side effects), the description covers all essential aspects: purpose, when to use, level details, server notification, and client behavior. It is complete enough for an agent to decide correctly whether and how to invoke this tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Although the schema provides an enum for the 'level' parameter with values 2 and 3, the description adds significant meaning by explaining that level 2 is 'creative (forge supplements + diagnostics)' and level 3 is 'manual (raw browser control: tap.click, tap.type, etc.)'. It also clarifies that higher-level calls subsume lower ones, which is not evident from the schema alone. With 100% schema coverage, the description goes beyond the baseline 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: to expand the MCP tool set. It specifies the context when the default Layer-1 set is insufficient, and explicitly lists the types of operations (e.g., browser actions, write-tap operations, diagnostics) that warrant its use. This distinguishes it from sibling tools like 'tap_run' or 'inspect' by focusing on tool set expansion rather than individual tool execution.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to use the tool ('when default Layer-1 set is insufficient') and gives concrete examples of needed actions. It explains the two levels (2 and 3) and what each exposes, including the condition that higher levels subsume lower ones. The description also notes the side effect of server notification and client re-query, which helps agents understand the invocation context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_fixARead-onlyInspect
Diagnose and repair a broken tap. Runs tap.doctor first, then collects page-level diagnostics (current DOM vs expected selectors, auth wall detection, redirect analysis). Returns the same shape as tap.doctor plus repair-specific fields: {diagnostics:{currentSnapshot, expectedSelectors, authWall, suggestions[]}, patches[]}. Free tier gets diagnostics only; Pro tier gets AI-generated fix proposals. Use when tap.doctor returns verdict=broken.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Tap name | |
| site | Yes | Site | |
| timeout | No | Timeout in ms |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate readOnlyHint=true, but the description says 'repair' which implies mutation, creating a contradiction. The description also does not clarify whether the repair is actually applied or just proposed. This lack of clarity is problematic.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise: four sentences, no wasted words. The first sentence states purpose, front-loading key information. Structure is efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains the process and return shape partially, but given no output schema, it should provide more detail on the structure of diagnostics and patches. It also omits what 'repair' actually does, which is critical given the annotation contradiction.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds context about the process (runs tap.doctor) and return shape but does not provide additional meaning for individual parameters like name, site, or timeout beyond what the schema already gives.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('diagnose and repair') and resource ('broken tap'), and distinguishes from sibling tool tap_doctor by indicating it builds on it.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Use when tap.doctor returns verdict=broken.' This tells when to use. It also mentions tier differences (free vs Pro) affecting capabilities. Missing explicit when-not-to-use or alternatives, but the guidance is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_listARead-onlyIdempotentInspect
Discover available taps. Default (no args) returns a compact site-grouped summary for orientation. Pass {query:'...'} for substring search across site/name/description (ranked by relevance). Pass {site} for full schema (columns, args) of one site; {site, name} for a single tap. If a matching tap exists, use tap.run — it executes with zero AI, faster and more stable than manual tap operations. NEVER bypass a tap by using manual tap.* calls to replicate what a tap already does.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Optional tap name. Requires site. Returns full schema for the single matching tap. | |
| site | No | Optional site filter. When provided, returns full schema (columns, args) for matching taps. | |
| query | No | Substring search across site/name/description. Returns flat ranked results. Use this when you know WHAT you want but not the tap name (e.g. 'reddit comments', 'extract bounties'). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnly, idempotent, non-destructive. Description adds behavioral context: default returns compact site-grouped summary, query returns flat ranked results, site/name returns full schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is fairly concise given the complexity of three modes. Front-loaded with main purpose. Some redundancy in explaining when to use tap_run but overall efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no output schema, the description covers return formats for each mode (compact summary, full schema columns/args, flat ranked). Includes examples and usage guidance, making it complete for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%. Description adds meaning beyond schema for each parameter: name requires site, query is for substring search with ranking, site filters and returns schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool discovers available taps and explains three distinct modes (default summary, query search, site/name schema). It distinguishes itself from sibling tools like tap_run which executes taps.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly advises when to use each argument pattern: default for orientation, query for search, site/name for schema. Also warns against bypassing with manual tap calls and recommends tap_run for existing taps.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_runAInspect
Run a pre-built tap. Preferred over tap.* tools — deterministic, zero AI at runtime. Returns {columns, rows, count, timing, cache_hit}. Read-intent taps are memoized for 5 minutes per process; identical calls return cached data with cache_hit:true. Pass {fresh:true} to bypass cache. Write-intent taps are never cached. If rows contain login/error page content or are empty on a site that requires login → call tap.runtime(runtime:'chrome') first, then retry. If rows is empty on a public site, use tap.doctor(site, name) for structured diagnosis. On transient failure (timeout, connection), RETRY tap.run — do not fall back to manual tap.* operations.
| Name | Required | Description | Default |
|---|---|---|---|
| args | No | Tap arguments | |
| name | Yes | Tap name | |
| site | Yes | Site name | |
| fresh | No | Bypass the 5-minute per-process result cache. Use when you need current data despite a recent identical call. | |
| envelope | No | Response shape. 'bare' (default) returns {rows, columns, count, elapsed_ms}; 'annotation' wraps the result in a W3C Web Annotation with target + body:tap:RunResult + prov:wasDerivedFrom — useful for provenance chains and signing. Does NOT affect sub-tap composition or pipe bindings (those read the internal flat shape). | bare |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds significant behavioral context beyond annotations: read-intent taps are memoized for 5 minutes, identical calls return cached data with cache_hit:true, fresh:true bypasses cache, write-intent taps never cache, and error handling for login/error pages and transient failures. Annotations are readOnlyHint=false, destructiveHint=false, openWorldHint=true, and description does not contradict them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized, front-loads the core purpose, and every sentence serves a purpose: stating purpose, caching behavior, error handling, and retry logic. No redundant content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 5 parameters, full schema coverage, sibling tools, and absence of output schema, the description covers return shape ({columns, rows, count, timing, cache_hit}), caching behavior, error recovery mechanisms, and when to use sibling tools. It is complete and self-contained.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds value by explaining fresh:true bypasses cache, envelope parameter differences between 'bare' and 'annotation', and implicit context for site and name. While schema already describes parameters, the description clarifies their behavioral impact.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool runs a pre-built tap, emphasizes it is preferred over tap.* tools, and distinguishes sibling tools by highlighting deterministic behavior with zero AI at runtime.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit usage guidance: when to use this tool, when to use fresh:true to bypass cache, when to fall back to tap.runtime for login/error pages, when to use tap.doctor for empty rows on public sites, and how to handle transient failures by retrying tap.run. It also specifies caching rules and alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_runtimeAIdempotentInspect
Switch browser runtime mid-session. Default is headless (no login). Use 'chrome' when you need the user's real browser with login sessions (Xiaohongshu, Zhihu, etc.) or for write operations (publish, comment). Use 'headless' to switch back. (Unrelated to tap mcp connect, which registers the Tap MCP server with an AI host.)
| Name | Required | Description | Default |
|---|---|---|---|
| runtime | Yes | chrome = user's real Chrome browser (login sessions available). headless = Playwright (fast, no login). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate idempotentHint=true and destructiveHint=false. The description adds behavioral context: switching runtime affects login availability (chrome provides user sessions, headless does not). No contradictions with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with purpose, highly concise with no wasted words. Clearly structured and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple runtime switch tool with no output schema, the description covers behavior, usage scenarios, and distinguishes from unrelated commands. No gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter has a clear enum and schema description. The tool description adds value by contextualizing when to use each value (chrome for login, headless otherwise), going beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Switch browser runtime mid-session.' It specifies the two runtime options (chrome and headless) and what each is used for, making the action unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly advises when to use each runtime: chrome for login sessions or write operations, headless to switch back. It also distinguishes from `tap mcp connect`, providing clear usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v0.29.1- Added
forge_draft - Added
tap_doctor - Added
tap_fix - Added
tap_list - Added
tap_runtime
5 tool updates
v0.27.0- Removed
forge_draft - Removed
tap_doctor - Removed
tap_fix - Removed
tap_list - Removed
tap_runtime
11 tool updates
v0.15.14- Added
forge_draft - Added
forge_inspect - Added
forge_save - Added
inspect - Added
tap_doctor - Added
tap_env - Added
tap_expand_tools - Added
tap_fix - Added
tap_list - Added
tap_run - Added
tap_runtime
11 tool updates
v0.15.8- Removed
forge_draft - Removed
forge_inspect - Removed
forge_save - Removed
inspect - Removed
tap_doctor - Removed
tap_env - Removed
tap_expand_tools - Removed
tap_fix - Removed
tap_list - Removed
tap_run - Removed
tap_runtime
1 tool update
v0.15.5- Added
tap_doctor
1 tool update
v0.14.2- Removed
tap_doctor
1 tool update
v0.14.7- Added
tap_doctor
TDQS
Scored across 11 tools
Tools have mostly distinct purposes, but forge_inspect and inspect both deal with page inspection, and tap_doctor/tap_fix overlap in diagnosis/repair. Descriptions help disambiguate, but some overlap exists.
Naming follows consistent verb_noun pattern with 'forge_' and 'tap_' prefixes. 'inspect' stands alone without prefix, and 'tap_expand_tools' is slightly wordy but still consistent with the prefix pattern.
11 tools is well-scoped for the tap automation domain, covering forging, running, diagnosing, fixing, inspecting, and environment checks without being overwhelming or sparse.
Covers the core lifecycle: draft, save, run, list, inspect, diagnose, fix, and runtime switching. Missing explicit delete or view detailed tap schema, but most critical operations are present.
Maintenance
Related MCP Connectors
Pre-action attestation perimeter for AI agents — 8 primitives, signed C18 receipt per call.
The cloud for agents. Tools for AI agents to register, build, and deploy other agents. Zero human required.
AI agent infrastructure for discovery, authorization, execution, identity, and signed receipts.
Context and control for any AI. Agent identity, scoped access, and proof across tools.
Related MCP Servers
- AlicenseBqualityDmaintenanceEnables automation of browser tasks using Playwright by interacting via Claude Desktop for executing user-defined prompts and operations.12289 npm12MIT
- AlicenseAqualityBmaintenanceEnables browser automation with Puppeteer, supporting navigation, form interactions, and connection to active Chrome instances for comprehensive web page interaction.82,710 npm487MIT
- AlicenseAqualityCmaintenanceA Model Context Protocol server that provides real-time web search capabilities to AI assistants through pluggable search providers, currently integrated with the Brave Search API.516MIT
- AlicenseAqualityDmaintenanceA Model Context Protocol server that enables web scraping, crawling, and content extraction capabilities through integration with Firecrawl.8129,393 npm2MIT