Tap
Taprun 是一个用于 AI 智能体的浏览器自动化和网页抓取 MCP 服务器。 指向任何网站;你的智能体只需检查一次页面,编译出一个确定性程序,然后永久重放它 —— 运行时零 AI token 消耗,每次调用结果一致。适用于 Claude Code、Cursor、Cline、Windsurf 以及任何 MCP 主机。在真实 Chrome(登录会话)或无头 Playwright 中运行。健康契约可捕获静默故障。结构状态差异分析能告诉你具体发生了什么变化。tap doctor 在数据过时前(而不是三天后)检测到损坏。
Forge: AI inspects the site → compiles a .tap.js program (one-time cost)
Run: The program executes instantly, same result every time ($0, zero AI)
Monitor: tap doctor checks health contracts + structural state diffs (catches breakage)
Heal: AI reads diagnostics and patches the program (only when needed)MCP 是创作层。tap.run 是执行层。 AI 仅在构建(一次性)期间参与。执行是纯代码 —— 零 token,确定性输出。涵盖 68+ 个网站的 140+ 预构建技能 —— Reddit、GitHub、Hacker News、LinkedIn、Twitter、YouTube、Producthunt 等 —— 或者从任何 URL 构建你自己的技能。单个二进制文件,零依赖。
使用场景: AI 智能体浏览器自动化 · 定时网页抓取 · 结构化数据提取 · 内容监控 · 需要登录的网站自动化 · 多站点数据流水线 · 长时间运行智能体的可靠性监控。
入门指南
1. 安装
通过 npx 零安装(任何装有 Node 的机器):
npx -y @taprun/cli --version首次运行会下载匹配的平台二进制文件(约 30MB)并缓存。后续调用即时完成。
通过 curl 永久安装(macOS / Linux):
curl -fsSL https://taprun.dev/install.sh | sh平台 | 下载 |
macOS (Apple Silicon) | |
macOS (Intel) | |
Linux | |
Windows |
2. 连接到你的 AI 智能体
适用于 Claude Code、Cursor、Windsurf 或任何兼容 MCP 的智能体 —— 无需扩展:
{ "mcpServers": { "tap": { "command": "npx", "args": ["-y", "@taprun/cli", "mcp", "start"] } } }或者自动配置所有已安装的智能体:
tap mcp connect3. 开始使用
tap github/trending # GitHub trending repos
tap hackernews/hot # Hacker News front page
tap weibo/hot # 微博热搜
tap xiaohongshu/search --keyword "AI" # 小红书搜索或者直接询问你的 AI 智能体:
You: What's trending on GitHub today?
Agent: Here are today's top repos — React compiler hit 734 stars...
You: Forge a tap for Douban top 250 movies
Agent: Done. Run `tap douban/top250` anytime — $0 per run.可选:Chrome 扩展(用于需要登录的网站)
大多数 tap 无需登录即可工作。对于需要你登录会话的网站(小红书、知乎等),请从 Chrome 应用商店安装 Chrome 扩展。
Related MCP server: Puppeteer MCP Server
你能做什么?
读取 — 从任何网站提取数据
tap reddit/hot # Reddit front page
tap bilibili/trending # Bilibili trending
tap arxiv/search --keyword "LLM" # arXiv papers写入 — 操作任何网站
tap xiaohongshu/publish --title "My Note" --images photo.jpg
tap zhihu/publish --title "My Article" --content "..."观察 — 监控变更
tap watch github/trending --every 5m组合 — 像 Unix 管道一样串联
tap github/trending | tap filter --field stars --gt 500 | tap table构建 — 用 AI 创建新的自动化
tap forge "get Hacker News top stories" # BYOK Claude / GPT
tap forge https://news.ycombinator.com # API detected — compiled without AI自带模型 —— 适用于 Claude、OpenAI、DeepSeek 或任何兼容 OpenAI 的端点,包括本地 Ollama / LM Studio,实现完全离线构建:
tap config set ai.baseUrl http://localhost:11434/v1
tap config set ai.key ollama
tap config set ai.model llama3.1
tap forge "scrape arxiv recent papers" # 0 bytes leave your machine工作原理
┌─ Chrome (your real browser sessions)
You → AI → Taprun ──────┤─ Playwright (headless, server, CI/CD)
compile └─ macOS (native desktop apps)你描述你想要的内容(自然语言或 URL)
AI 编译成一个
.tap.js程序 —— 纯 JavaScript,支持版本控制Taprun 运行该程序 —— 在三种运行时中的任意一种上,永久运行,成本为 $0
每次成功的编译都会使下一次更快。140+ 社区技能意味着你的智能体已经了解 68+ 个网站。
社区技能
tap-skills — 140+ 技能,开源。
分类 | 示例 |
趋势 | GitHub, Hacker News, Reddit, Product Hunt, Bilibili, 知乎, 微博, 小红书 |
搜索 | arXiv, Reddit, X, 知乎, 微博, 小红书, Bilibili, Medium |
读取 | 知乎帖子, Bilibili 视频, 小红书笔记, 微信读书 |
写入 | X 帖子, 小红书笔记, 知乎文章, Dev.to, LinkedIn |
监控 | 价格追踪, 股票数据, 竞品分析 |
tap doctor # Health check — catches silent failures before your data goes stale
tap update # Install / update all skills
tap list # See everything availableTaprun 对比
Taprun | AI 浏览器智能体 | 传统爬虫 | |
单次运行 AI 成本 | $0 (仅编译一次) | 每次运行消耗 Token | 免费 |
准确性 | 确定性 | 每次运行不同 | 确定性 |
静默故障检测 | 健康契约 + 结构状态差异 | 无 | 无 |
损坏诊断 |
| 无 | 手动抽查 |
检测风险 | 低 (真实浏览器会话) | 高 | 高 |
运行时 | 3 (Chrome + Playwright + macOS) | 1 | 1 |
代码可检查性 | .tap.js — git diff, 调试, 版本控制 | 黑盒 / 瞬态 | 脆弱的脚本 |
MCP 原生 | 是 (仅创作层 — 执行零 Token) | 否 | 否 |
安全性
层级 | 保护 |
沙箱 | 程序在零权限下运行 — 无文件、网络或系统访问权限 |
静态分析 | CI 在危险模式到达用户前进行拦截 |
仅限本地 | 你的数据、会话和 API 密钥永远不会离开你的机器 |
详情请参阅 SECURITY.md。
贡献
贡献的最简单方式:构建一个新的 tap。 只需一个 .tap.js 文件即可。
详情请参阅 CONTRIBUTING.md。
路线图
[x] 涵盖 68+ 个网站的 140+ 社区技能
[x] 3 种运行时 — Chrome, Playwright, macOS
[x] Unix 管道 —
tap A | tap B[x] 观察模式 — 随时间监控变更
[x] Doctor — 健康契约、指纹差异、损坏 tap 的自动诊断
[x] 一键设置 —
tap mcp connect配置所有 AI 智能体[ ] Android 运行时
[ ] iOS 运行时
[ ] 并发控制 — 为并行操作共享账户的 M 个智能体提供确定性协调
支持
GitHub Discussions — 问答、想法、展示与交流
support@taprun.dev — 授权、私下反馈、咨询
Issues — 错误报告
许可证
Star 历史
Available Tools
11 toolsforge_draftAInspect
Load a tap into memory and optionally verify it live. Accepts a structured plan (TapAnnotation — preferred; verify runs it via the plan runtime) or legacy code (.tap.js source). When url is provided, auto-runs verification and returns {score, rows}. Without url, just stashes the draft.
| Name | Required | Description | Default |
|---|---|---|---|
| url | No | URL to verify against. When provided, draft loads + runs live verification in one step. | |
| code | No | Legacy .tap.js source — still supported for rollback; auto-migrated on save. | |
| path | No | Path to .tap.js file. Ignored when plan or code is provided. | |
| plan | No | TapAnnotation envelope — W3C Annotation with body:tap:ExecutionPlan. Preferred over code. | |
| description | No | Short summary of what this verifies (e.g. 'HN posts with rank, title, points') |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations declare readOnlyHint=false and openWorldHint=true, implying mutation and external access. The description confirms live verification when url is provided and mentions returning {score, rows}. However, it does not disclose side effects like memory consumption, potential overwrites, or access requirements beyond what annotations hint. The description adds some value but lacks depth for a tool that modifies state.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, starting with a clear action-oriented purpose. All critical information (input modes, behavior modes) is included without redundancy. Every phrase adds value, making it highly efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 5 parameters (none required), no output schema, and complex two-mode behavior, the description covers the main scenarios: with url (verification) and without (stashing). It explains the two input options and their relationship. However, it could be more complete by clarifying what 'stashes the draft' means in terms of state persistence or lifetime.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema has 100% coverage; each parameter is described. The description adds context about the preferred usage of plan over code and explains the url behavior. However, it does not significantly enhance understanding beyond the schema, and the parameter 'description' is mentioned without additional semantic value. Baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool loads a tap into memory and optionally verifies it live. It specifies two input modes (plan and code) and differentiates behavior based on url presence. However, it does not explicitly differentiate from sibling tools like tap_run or tap_list, leaving some ambiguity about when to use this tool over others.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to use url (auto-run verification) and when not (stash draft). It also indicates a preference for the plan parameter over legacy code. While it doesn't explicitly mention alternatives or when-not-to-use, the context of the tool (loading draft) is reasonably clear from the description.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
forge_inspectARead-onlyInspect
Analyze a page for tap forging: detects framework, SSR state, APIs, and generates extraction strategies. Also use this to re-forge a broken tap — inspect the page again to find what changed. Pass probe_writes:true to discover write actions without triggering them (zero side effects).
AUTHORING PRINCIPLE: Prefer API > SSR > DOM. handle.fetch (cookie-aware) and handle.ssrState beat handle.eval(querySelectorAll); handle.find / handle.copyAll beat hand-rolled selectors. Read existing_taps first — if one already covers part of the need, compose with it inside handle.pipe rather than re-extracting.
| Name | Required | Description | Default |
|---|---|---|---|
| url | No | ||
| detail | No | Comma-separated extra sections to include: network,ssr,auth,a11y,annotations,structure,deep. 'structure' adds per-candidate anti-scraping diagnostics (Flexbox order, custom fonts, canvas, ::before/::after content, homoglyphs) + href stability score. 'deep' additionally computes readable_ratio (expensive). Use 'all' for the full payload. Default returns top candidates + confidence + status only. | |
| probe_writes | No | Discover write actions (POST/PUT/PATCH/DELETE) without executing them. Captures endpoints + payloads via abort intercept. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations are readOnlyHint=true, destructiveHint=false, openWorldHint=true. Description adds detail that probe_writes has zero side effects and emphasizes discovery without execution. No contradictions, and description complements annotations well.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured, starting with the primary purpose, then secondary use, parameter tip, and authoring principle. It is front-loaded and informative, though slightly lengthy. Still earns a 4.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's purpose (analysis), the description covers main outputs, parameter usage, and authoring principles. No output schema, but the description mentions default return values. Adequate for the complexity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 67% (probe_writes and detail have descriptions; url does not). The description adds context for probe_writes and detail, but does not significantly extend beyond what the schema provides for those parameters. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool analyzes pages for tap forging, detects framework/SSR/APIs, and generates extraction strategies. It also distinguishes between initial analysis and re-forging broken taps, making the purpose specific and unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to re-forge (broken taps) and how to use probe_writes. It mentions reading existing_taps first, but does not fully distinguish this tool from all siblings like inspect, though context implies it's for page analysis.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
forge_saveADestructiveInspect
Save the tap to disk as .tap.json and auto-commit to git. Accepts either a structured plan (W3C Annotation wrapping an ExecutionPlan body — preferred) or code (legacy .tap.js source, migrated to a plan on write). Falls back to code from the active forge.draft session when neither is passed. After saving, tap.run can execute it forever with zero AI.
Optional verify_examples runs the just-saved tap against the supplied examples and asserts row-shape contracts (min_rows, non_empty, max_elapsed_ms). When all examples pass, the response includes doctor (verdict from running tap.doctor on the saved tap). When any example fails, the response includes regenerated_inspect — a fresh forge.inspect on the same URL — so the agent can re-forge in one round-trip instead of three. When omitted, behavior is unchanged and the response carries doctor: "indeterminate".
| Name | Required | Description | Default |
|---|---|---|---|
| code | No | Optional — legacy .tap.js source; auto-migrated to a plan on save | |
| name | Yes | ||
| plan | No | TapAnnotation envelope — W3C Annotation with body:tap:ExecutionPlan. Preferred over code. | |
| site | Yes | ||
| verify_examples | No | Optional auto-verify hook (issue #31). Each example runs the just-saved tap with `args` and asserts the result against `expect`. On any failure the response gains `ok:false` and `regenerated_inspect` (a fresh forge.inspect on the saved URL). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate destructive hint (true), and description elaborates: 'auto-commit to git', 'migrated to a plan on write', and post-save execution capability. Describes conditional behavior with verify_examples: on success returns doctor, on failure returns regenerated_inspect. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is front-loaded with core action, then modes, then verification details. Each sentence adds value. Slightly lengthy due to detailed verify_examples explanation, but that is necessary for completeness. Could be trimmed slightly without losing clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description covers return values thoroughly: doctor on success, regenerated_inspect on failure, and default indeterminate. Explains fallback behavior and migration. Covers all aspects of the tool's behavior, making it self-contained for agent use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 60%, and description adds meaning for plan, code, and verify_examples with usage details. Site and name are not elaborated in description but are straightforward required identifiers. The explanation of verify_examples' sub-fields (min_rows, non_empty, max_elapsed_ms) compensates for nested complexity. Could describe site/name more, but adequate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states the tool's purpose: saving a tap to disk as .tap.json with auto-commit to git. Distinguishes from siblings like forge_draft (which presumably creates drafts) and forge_inspect (which inspects) by focusing on persistence. Mentions two input modes (plan preferred, code legacy) and fallback to draft session.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use each parameter: 'plan (W3C Annotation...preferred)' vs 'code (legacy .tap.js source...)', and fallback to active forge.draft session. Also explains when to use verify_examples and its outcomes, enabling the agent to make informed decisions about error handling and round-trip optimization.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
inspectARead-onlyInspect
Inspect the current page. Use target to choose what to inspect: page (url/title/meta), dom (HTML structure), a11y (accessibility tree), element (single element detail, requires selector), network (captured traffic — auto-starts capture on first call, dumps on subsequent). Default: page.
| Name | Required | Description | Default |
|---|---|---|---|
| bodies | No | Include response bodies (target=network only) | |
| target | No | What to inspect | page |
| selector | No | CSS selector (required for target=element, optional for target=dom to scope) | |
| url_filter | No | Filter network entries by URL substring (target=network only) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate read-only and non-destructive behavior. The description adds useful behavioral detail for the 'network' target, specifying auto-start and dump behavior. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences with front-loaded purpose. Every part adds value, no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers main targets and network behavior, but lacks details on output format. Given no output schema, this is a minor gap. Overall, it provides a solid understanding for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers all parameters with descriptions. The tool description adds extra meaning by summarizing what each target inspects and noting that 'element' requires a selector, enhancing understanding beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool inspects the current page and lists target options. However, it does not differentiate from the sibling tool 'forge_inspect', which may serve a similar purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context for each target option and explains default behavior. It does not explicitly state when not to use the tool or mention alternatives, but the guidance for target selection is sufficient.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_doctorARead-onlyInspect
Health check for taps. Runs each tap's examples against its health contract. Returns {ok, annotations[], issues[], suggestions[]}. Each annotation is a W3C Web Annotation (motivation:'assessing') with body.tap:verdict in {healthy, broken, stale, layer-mismatch}. Use when tap.run returns empty/error rows, or after forge.save to validate. ALWAYS specify site+name — unscoped checks scan all user taps and are expensive. PIPE TAPS: annotations include recursive sub-tap diagnosis via body.children[]. Use tap.explain for static analysis without running.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Tap name within site (optional — omit to check all taps for the site) | |
| site | No | Site to check. Always specify — omitting scans all user-forged taps. | |
| timeout | No | Timeout per tap in ms |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, openWorldHint, and destructiveHint. Description adds rich behavioral context: return format with W3C Web Annotations, verdicts, and recursive sub-tap diagnosis for pipe taps via body.children[]. It also warns about expensive unscoped scans. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise but packs information: purpose, return format, usage guidance, caveat, and pipe-specific behavior. Each sentence adds value. Could be slightly more structured but is efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no output schema, the description fully details the return structure including the annotation format and verdicts. It covers pipe taps with recursive diagnosis. It also references a sibling (tap.explain) for static analysis. Given the tool's complexity, the description is complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions for all 3 parameters. Description adds meaningful context beyond schema: reinforces that site and name should always be specified, and explains that omitting them scans all user taps (expensive). This adds value over the bare schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Health check for taps. Runs each tap's examples against its health contract. Returns {ok, annotations[], issues[], suggestions[]}.' It gives specific return structure and verdicts. It distinguishes from siblings like tap_run (runs the tap) and tap_explain (static analysis).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use: 'Use when tap.run returns empty/error rows, or after forge.save to validate.' Also gives a strong caveat: 'ALWAYS specify site+name — unscoped checks scan all user taps and are expensive.' Provides an alternative: 'Use tap.explain for static analysis without running.'
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_envARead-onlyIdempotentInspect
Check tap runtime environment: binary version, TAP_HOME directory, installed skills count, Playwright availability, daemon status, and OS info. Zero side effects — no browser needed. Use for initial troubleshooting or CI health gates.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide safety hints (readOnlyHint, destructiveHint, idempotentHint). The description adds 'Zero side effects — no browser needed,' reinforcing and adding context beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with main purpose, then usage guidance. No redundant or unnecessary information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no parameters, no output schema, but rich annotations, the description is complete: it explains what the tool checks and when to use it. No missing context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters exist, and schema coverage is 100% (trivial). Per guidelines, 0 parameters baseline is 4; description does not need to add parameter meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool checks tap runtime environment, listing specific items (binary version, TAP_HOME, skills count, etc.) and explicitly distinguishes from siblings by noting zero side effects and no browser needed.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description says 'Use for initial troubleshooting or CI health gates,' providing clear context. While it doesn't explicitly mention when not to use or alternative tools, the purpose is well-defined among siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_expand_toolsAInspect
Expand this session's MCP tool set. Call when the default Layer-1 set (run/list/doctor/fix/forge.*/inspect) is insufficient — e.g. need manual browser actions (click/type/fill/scroll), write-tap operations, or diagnostic probes that aren't exposed yet. Levels: 2 = creative (forge supplements + diagnostics), 3 = manual (raw browser control: tap.click, tap.type, tap.eval, tap.find, tap.upload, tap.nav, tap.wait, tap.cookies, tap.pressKey). After calling, the server sends notifications/tools/list_changed; clients that honor it will re-query tools/list automatically. Higher-level calls subsume lower ones — calling with level:3 exposes both Layer 2 and Layer 3.
| Name | Required | Description | Default |
|---|---|---|---|
| level | Yes | Target tier. 2: creative. 3: full manual. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description fully discloses the behavioral impact: after calling, the server sends notifications/tools/list_changed, and clients that honor it will re-query tools/list automatically. This explains the dynamic nature of the tool set expansion. The annotation 'openWorldHint: true' aligns with the description, confirming that the tool can change available tools. There is no contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single paragraph that is generally concise and front-loaded with the main action. Every sentence adds value, but it could be slightly more streamlined. For example, the list of level-3 tools is helpful but somewhat lengthy. Overall, it is well-structured and informative without being verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with only one parameter, no output schema, and complex behavior (expanding the tool set with side effects), the description covers all essential aspects: purpose, when to use, level details, server notification, and client behavior. It is complete enough for an agent to decide correctly whether and how to invoke this tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Although the schema provides an enum for the 'level' parameter with values 2 and 3, the description adds significant meaning by explaining that level 2 is 'creative (forge supplements + diagnostics)' and level 3 is 'manual (raw browser control: tap.click, tap.type, etc.)'. It also clarifies that higher-level calls subsume lower ones, which is not evident from the schema alone. With 100% schema coverage, the description goes beyond the baseline 3.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: to expand the MCP tool set. It specifies the context when the default Layer-1 set is insufficient, and explicitly lists the types of operations (e.g., browser actions, write-tap operations, diagnostics) that warrant its use. This distinguishes it from sibling tools like 'tap_run' or 'inspect' by focusing on tool set expansion rather than individual tool execution.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to use the tool ('when default Layer-1 set is insufficient') and gives concrete examples of needed actions. It explains the two levels (2 and 3) and what each exposes, including the condition that higher levels subsume lower ones. The description also notes the side effect of server notification and client re-query, which helps agents understand the invocation context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_fixARead-onlyInspect
Diagnose and repair a broken tap. Runs tap.doctor first, then collects page-level diagnostics (current DOM vs expected selectors, auth wall detection, redirect analysis). Returns the same shape as tap.doctor plus repair-specific fields: {diagnostics:{currentSnapshot, expectedSelectors, authWall, suggestions[]}, patches[]}. Free tier gets diagnostics only; Pro tier gets AI-generated fix proposals. Use when tap.doctor returns verdict=broken.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Tap name | |
| site | Yes | Site | |
| timeout | No | Timeout in ms |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate readOnlyHint=true, but the description says 'repair' which implies mutation, creating a contradiction. The description also does not clarify whether the repair is actually applied or just proposed. This lack of clarity is problematic.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise: four sentences, no wasted words. The first sentence states purpose, front-loading key information. Structure is efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains the process and return shape partially, but given no output schema, it should provide more detail on the structure of diagnostics and patches. It also omits what 'repair' actually does, which is critical given the annotation contradiction.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds context about the process (runs tap.doctor) and return shape but does not provide additional meaning for individual parameters like name, site, or timeout beyond what the schema already gives.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('diagnose and repair') and resource ('broken tap'), and distinguishes from sibling tool tap_doctor by indicating it builds on it.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Use when tap.doctor returns verdict=broken.' This tells when to use. It also mentions tier differences (free vs Pro) affecting capabilities. Missing explicit when-not-to-use or alternatives, but the guidance is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_listARead-onlyIdempotentInspect
Discover available taps. Default (no args) returns a compact site-grouped summary for orientation. Pass {query:'...'} for substring search across site/name/description (ranked by relevance). Pass {site} for full schema (columns, args) of one site; {site, name} for a single tap. If a matching tap exists, use tap.run — it executes with zero AI, faster and more stable than manual tap operations. NEVER bypass a tap by using manual tap.* calls to replicate what a tap already does.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Optional tap name. Requires site. Returns full schema for the single matching tap. | |
| site | No | Optional site filter. When provided, returns full schema (columns, args) for matching taps. | |
| query | No | Substring search across site/name/description. Returns flat ranked results. Use this when you know WHAT you want but not the tap name (e.g. 'reddit comments', 'extract bounties'). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnly, idempotent, non-destructive. Description adds behavioral context: default returns compact site-grouped summary, query returns flat ranked results, site/name returns full schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is fairly concise given the complexity of three modes. Front-loaded with main purpose. Some redundancy in explaining when to use tap_run but overall efficient.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite no output schema, the description covers return formats for each mode (compact summary, full schema columns/args, flat ranked). Includes examples and usage guidance, making it complete for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%. Description adds meaning beyond schema for each parameter: name requires site, query is for substring search with ranking, site filters and returns schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool discovers available taps and explains three distinct modes (default summary, query search, site/name schema). It distinguishes itself from sibling tools like tap_run which executes taps.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly advises when to use each argument pattern: default for orientation, query for search, site/name for schema. Also warns against bypassing with manual tap calls and recommends tap_run for existing taps.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_runAInspect
Run a pre-built tap. Preferred over tap.* tools — deterministic, zero AI at runtime. Returns {columns, rows, count, timing, cache_hit}. Read-intent taps are memoized for 5 minutes per process; identical calls return cached data with cache_hit:true. Pass {fresh:true} to bypass cache. Write-intent taps are never cached. If rows contain login/error page content or are empty on a site that requires login → call tap.runtime(runtime:'chrome') first, then retry. If rows is empty on a public site, use tap.doctor(site, name) for structured diagnosis. On transient failure (timeout, connection), RETRY tap.run — do not fall back to manual tap.* operations.
| Name | Required | Description | Default |
|---|---|---|---|
| args | No | Tap arguments | |
| name | Yes | Tap name | |
| site | Yes | Site name | |
| fresh | No | Bypass the 5-minute per-process result cache. Use when you need current data despite a recent identical call. | |
| envelope | No | Response shape. 'bare' (default) returns {rows, columns, count, elapsed_ms}; 'annotation' wraps the result in a W3C Web Annotation with target + body:tap:RunResult + prov:wasDerivedFrom — useful for provenance chains and signing. Does NOT affect sub-tap composition or pipe bindings (those read the internal flat shape). | bare |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds significant behavioral context beyond annotations: read-intent taps are memoized for 5 minutes, identical calls return cached data with cache_hit:true, fresh:true bypasses cache, write-intent taps never cache, and error handling for login/error pages and transient failures. Annotations are readOnlyHint=false, destructiveHint=false, openWorldHint=true, and description does not contradict them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is appropriately sized, front-loads the core purpose, and every sentence serves a purpose: stating purpose, caching behavior, error handling, and retry logic. No redundant content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 5 parameters, full schema coverage, sibling tools, and absence of output schema, the description covers return shape ({columns, rows, count, timing, cache_hit}), caching behavior, error recovery mechanisms, and when to use sibling tools. It is complete and self-contained.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds value by explaining fresh:true bypasses cache, envelope parameter differences between 'bare' and 'annotation', and implicit context for site and name. While schema already describes parameters, the description clarifies their behavioral impact.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool runs a pre-built tap, emphasizes it is preferred over tap.* tools, and distinguishes sibling tools by highlighting deterministic behavior with zero AI at runtime.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit usage guidance: when to use this tool, when to use fresh:true to bypass cache, when to fall back to tap.runtime for login/error pages, when to use tap.doctor for empty rows on public sites, and how to handle transient failures by retrying tap.run. It also specifies caching rules and alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tap_runtimeAIdempotentInspect
Switch browser runtime mid-session. Default is headless (no login). Use 'chrome' when you need the user's real browser with login sessions (Xiaohongshu, Zhihu, etc.) or for write operations (publish, comment). Use 'headless' to switch back. (Unrelated to tap mcp connect, which registers the Tap MCP server with an AI host.)
| Name | Required | Description | Default |
|---|---|---|---|
| runtime | Yes | chrome = user's real Chrome browser (login sessions available). headless = Playwright (fast, no login). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate idempotentHint=true and destructiveHint=false. The description adds behavioral context: switching runtime affects login availability (chrome provides user sessions, headless does not). No contradictions with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with purpose, highly concise with no wasted words. Clearly structured and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple runtime switch tool with no output schema, the description covers behavior, usage scenarios, and distinguishes from unrelated commands. No gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter has a clear enum and schema description. The tool description adds value by contextualizing when to use each value (chrome for login, headless otherwise), going beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Switch browser runtime mid-session.' It specifies the two runtime options (chrome and headless) and what each is used for, making the action unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly advises when to use each runtime: chrome for login sessions or write operations, headless to switch back. It also distinguishes from `tap mcp connect`, providing clear usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v0.29.1- Added
forge_draft - Added
tap_doctor - Added
tap_fix - Added
tap_list - Added
tap_runtime
5 tool updates
v0.27.0- Removed
forge_draft - Removed
tap_doctor - Removed
tap_fix - Removed
tap_list - Removed
tap_runtime
11 tool updates
v0.15.14- Added
forge_draft - Added
forge_inspect - Added
forge_save - Added
inspect - Added
tap_doctor - Added
tap_env - Added
tap_expand_tools - Added
tap_fix - Added
tap_list - Added
tap_run - Added
tap_runtime
11 tool updates
v0.15.8- Removed
forge_draft - Removed
forge_inspect - Removed
forge_save - Removed
inspect - Removed
tap_doctor - Removed
tap_env - Removed
tap_expand_tools - Removed
tap_fix - Removed
tap_list - Removed
tap_run - Removed
tap_runtime
1 tool update
v0.15.5- Added
tap_doctor
1 tool update
v0.14.2- Removed
tap_doctor
1 tool update
v0.14.7- Added
tap_doctor
TDQS
Scored across 11 tools
Tools have mostly distinct purposes, but forge_inspect and inspect both deal with page inspection, and tap_doctor/tap_fix overlap in diagnosis/repair. Descriptions help disambiguate, but some overlap exists.
Naming follows consistent verb_noun pattern with 'forge_' and 'tap_' prefixes. 'inspect' stands alone without prefix, and 'tap_expand_tools' is slightly wordy but still consistent with the prefix pattern.
11 tools is well-scoped for the tap automation domain, covering forging, running, diagnosing, fixing, inspecting, and environment checks without being overwhelming or sparse.
Covers the core lifecycle: draft, save, run, list, inspect, diagnose, fix, and runtime switching. Missing explicit delete or view detailed tap schema, but most critical operations are present.
Maintenance
Related MCP Connectors
Pre-action attestation perimeter for AI agents — 8 primitives, signed C18 receipt per call.
The cloud for agents. Tools for AI agents to register, build, and deploy other agents. Zero human required.
AI agent infrastructure for discovery, authorization, execution, identity, and signed receipts.
Context and control for any AI. Agent identity, scoped access, and proof across tools.
Related MCP Servers
- AlicenseBqualityDmaintenanceEnables automation of browser tasks using Playwright by interacting via Claude Desktop for executing user-defined prompts and operations.12289 npm12MIT
- AlicenseAqualityBmaintenanceEnables browser automation with Puppeteer, supporting navigation, form interactions, and connection to active Chrome instances for comprehensive web page interaction.82,710 npm487MIT
- AlicenseAqualityCmaintenanceA Model Context Protocol server that provides real-time web search capabilities to AI assistants through pluggable search providers, currently integrated with the Brave Search API.516MIT
- AlicenseAqualityDmaintenanceA Model Context Protocol server that enables web scraping, crawling, and content extraction capabilities through integration with Firecrawl.8129,393 npm2MIT