Inspect page storage
inspect_storageInspect a page origin's browser storage to detect exposed credentials and JWTs, covering localStorage, sessionStorage, IndexedDB, cache, service workers, and quota usage.
Instructions
Everything the selected page's origin keeps in the browser: localStorage, sessionStorage, IndexedDB, Cache Storage, service workers and quota usage.
Flags values that look like credentials — by key name, JWT shape or a "Bearer" prefix, also inside JSON values — because anything in web storage is readable by every script on the origin. JWTs are decoded (algorithm, expiry, claims; the signature is not checked).
Read through DevTools, not page JavaScript, except for the list of service worker registrations. IndexedDB and Cache Storage are listed with their sizes, not dumped; use evaluate_script to read records.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| browser | No | Which browser to act on. Each name is an independent Chrome, created on first use. Omit for the shared default; parallel agents each need their own name. | default |
| reveal_values | No | Print values that look like credentials in full (up to 120 characters). Default false shows their first characters and length only. |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |