Chrome Bridge
Chrome Bridge is an MCP server that lets Claude Code drive a real, logged-in Chrome browser over a local WebSocket bridge, with 59 tools for web development, testing, debugging, and automation.
Navigation & tabs: open, close, move, tile, duplicate, activate, reload, discard, mute, and list tabs/windows.
Interacting with pages: click, type, fill forms, hover, press keys, drag-and-drop, upload files, handle dialogs, and dismiss overlays.
Reading pages: extract text/markdown/HTML/accessibility trees, query DOM, find text, get interactives, read tables and repeated structures, and inspect page metadata.
Screenshots & visual checks: viewport, element, full-page screenshots, visual regression diffs, and spacing measurements.
Debugging & network: read console logs, monitor network requests, mock/block/redirect/stub network traffic, and decode tracking beacons.
Audits: run accessibility, SEO, security, links, Core Web Vitals, CSS/resource/cache audits, plus cookie/consent-banner audits.
State, storage & sessions: read/write localStorage, sessionStorage, cookies; save/restore session fixtures; handle HTTP auth; manage downloads; save MHTML pages.
Automation & CI: record/replay sessions, export Playwright tests, run assertions, watch for page changes, and use a headless launch mode.
User-assisted flows: hand off to a human for 2FA/CAPTCHA/login, or ask the user to pick an element.
Chrome Bridge
An MCP server that gives Claude Code your real, logged-in Chrome — measured 2.75× fewer turns and 2.28× lower cost than the official "Claude in Chrome" extension on a form-filling task, with ~3× the toolset and no paid plan.
59 web-development tools (navigation, DOM inspection, visual regression, audits, network mocking) over a local WebSocket bridge, plus a headless instance for CI. Self-hosted, local-only.

Quickstart
Requires Node.js 18+ and Chrome 135+.
git clone git@github.com:frsorrentino/chrome-bridge.git
cd chrome-bridge && ./install.shOpen
chrome://extensions, enable Developer mode, click Load unpacked, select theextension/folder.Restart Claude Code.
Then ask for something like "open localhost:3000, run an accessibility audit
and find the Sign Up button": Claude Code calls navigate,
audit and find_text. Because navigate already returns
element refs, click(ref="n1") follows with no discovery turn in between.
On ChromeOS/Crostini install from the Chrome Web Store instead: an unpacked extension is dropped on every reboot, because the container isn't mounted when Chrome starts.
install.sh registers the MCP server with --scope user. To do it by hand:
claude mcp add --scope user chrome-bridge node /path/to/server/index.js.
For execute_js, enable Allow user scripts in chrome://extensions →
Chrome Bridge → Details (on Chrome 135-137, enable Developer Mode instead).
As a plugin, without a clone: in Claude Code, /plugin marketplace add frsorrentino/chrome-bridge then /plugin install chrome-bridge@chrome-bridge
registers the MCP server from npm (all capabilities) together with the recipes
skill; clients that read Agent Plugins 1.0 get the
same from plugin.json + mcp.json. The extension still comes from the Web
Store or extension/. Pick one path: the plugin and install.sh would
register the same server twice.
Related MCP server: kilogent-browser
Why Chrome Bridge?
Chrome Bridge | Claude in Chrome | Chrome DevTools MCP | Playwright MCP | |
ChromeOS / Crostini | Yes (real host) | No | Container only | Container only |
Tools | 59 (38 core) | 22 | 29 default (56 with flags) | 24 core (71 total) |
Requires paid plan | No | Yes (Pro+) | No | No |
Network mocking | Yes (stub/headers) | No | No | Yes |
Visual regression | Yes ( | No | No | No |
Audits (a11y/SEO/sec) | Yes (one call, report on disk) | No | Lighthouse | No |
Headless / CI | Yes | No | Yes | Yes |
GIF / video | No | Yes | Partial | No |
Breakpoints / heap | No | No | Yes | No |
Codex for Chrome (OpenAI, May 2026) sits in the Claude in Chrome column: an
official extension with the debugger permission, macOS and Windows only,
the ChatGPT app required. Claude in Chrome documents Linux desktop since
September 2026; ChromeOS and WSL stay out. Competitor figures measured on
2026-09-01 and 2026-09-11 (docs/analisi-2026-09-11-concorrenti.md).
It wins on round trips, not payload size: short element refs instead of the
screenshot-and-click loop, fill_form filling N fields in one call, table
filtering done server-side. Per single turn it actually costs slightly more.
The full benchmark — method, every raw run including the unfavourable ones, and what the harness can't measure — is in docs/EFFICIENCY.md.

Using it
The skill in skills/chrome-bridge/SKILL.md
is what makes the tools discoverable: recipes with the phrase that triggers
each one ("verify the email arrives", "test the checkout with a test card",
"which plugin slows the page", "what fires before consent"), the tool sequence,
and the zero-token CLI commands the model would otherwise never see.
install.sh copies it to ~/.claude/skills/chrome-bridge; do the same by
hand for other clients.
Beyond the MCP tools, two lanes keep work away from the model entirely.

CLI — batch operations, piped through grep or jq before anything reaches
the context:
chrome-bridge navigate --url https://example.com
chrome-bridge read_console --level error | head -20
chrome-bridge assert --selector "#success" --text "Done"
chrome-bridge replay --file ./recordings/login.jsonlLaunch mode — a dedicated Chromium instance with an ephemeral profile, for isolated sessions or CI:
node server/index.js --launch --headlessPair it with session_record + replay for smoke tests with no model in the
loop. In launch mode execute_js falls back to new Function when the
user-script toggle isn't available.
Tools
59 in total, in seven groups. Only core (38 tools) loads by default; the rest
are opt-in via --caps.

Group | N | What's in it |
Core & Navigation | 13 | tabs, windows, |
Interaction | 11 |
|
DOM & Inspection | 10 |
|
Debugging & Network | 8 |
|
Visual & Responsive | 5 |
|
Audits | 2 |
|
State, Storage & Files | 9 | storage, fixtures, MHTML, recording, |
Every tool, with the notes that matter: docs/TOOLS.md.
How it works

Claude Code <--stdio--> MCP Server <--WebSocket :8765--> Chrome Extension
(server/) (extension/, MV3)The Node.js server handles the protocol and tool logic; the MV3 extension
executes commands through Chrome APIs. User scripts (execute_js) run via
chrome.userScripts.execute().
Configuration and security
Environment variables, each with a matching CLI flag:
Variable | Default | Notes |
|
| |
|
|
|
| unset | Required on both |
|
|
|
| unset | No arbitrary JavaScript in the page: |
| unset | Every path the model chooses ( |
The bridge binds loopback, accepts extension connections only from a
chrome-extension:// origin, and — when a token is set — requires it on both
handshakes. Without one, any local process could act as a relay and reach
execute_js inside your authenticated browser session. Secondary MCP instances
connect via loopback and are acknowledged with relay_init_ok, so a foreign
process holding the port fails fast instead of timing out per command.
What is not protected: page content reaches the model unfiltered, so a
hostile page's text is untrusted input. get_storage, session_fixture, HAR
exports and screenshots are not redacted and may carry cookies, tokens or
personal data. Don't point the automation at pages holding secrets you wouldn't
paste into a chat.
Troubleshooting
Symptom | Cause / fix |
| Extension disabled, or its port differs from the server's. The error names the actual host/port; check them in the popup (⚙). |
Port 8765 already in use | Expected: a second MCP session becomes a relay and shares the one bridge. Set |
| Something else owns the port. Free it or change |
| Enable Allow user scripts in |
| The page was opened before the extension, "Capture console & metrics" is off, or the page isn't injectable ( |
Screenshot times out | On ChromeOS a fully occluded window stops producing frames; captures fail after 10s. Bring the window forward. |
Commands work, then stop | The MV3 service worker restarted and in-memory state (network log, diff baselines, HTTP auth) was reset. Re-run the monitoring call. |
Extension dropped on every ChromeOS reboot | Install from the Web Store instead of Load unpacked. |
Tool missing from the list | It's in an opt-in group. Check |
Documentation
docs/TOOLS.md — all 59 tools, by group
docs/CAPABILITIES.md — what the bridge gets past and what it does not, one dated state per wall
docs/EFFICIENCY.md — the benchmark and the design behind it
docs/PERFORMANCE.md — latency per tool on the real path,
npm run bench:latencybench/RESULTS.md — raw runs and inclusion rule
Tests
npm test (Chrome-free, ~22s) · npm run test:e2e (needs Chrome and a
connected extension; with a bridge already on 8765:
CHROME_BRIDGE_PORT=8799 node test/test-devtools.js --launch, which opens
its own Chromium with extension/) · npm run measure (schema cost) ·
npm run bench:latency (milliseconds per tool, launches its own Chromium,
writes docs/PERFORMANCE.md).
License
MIT
Available Tools
59 toolsassertARead-onlyIdempotent
Assert a page condition, polling until timeout: element exists/visible (optionally with count or containing text), text on page, tab url/title. Patterns: substring, or "/…/" for regex. Recorded flows replay it as a test.
| Name | Required | Description | Default |
|---|---|---|---|
| url | No | Tab url pattern | |
| text | No | In the element (with selector) or anywhere on the page | |
| count | No | Exact match count for selector | |
| state | No | attached means present in the DOM, visible also requires a rendered box | attached |
| title | No | Tab title pattern | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| timeout | No | Max ms to wait for the condition before failing | |
| selector | No | Element the assertion is about; ">>>" pierces shadow DOM |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and idempotentHint=true. The description adds behavioral context about polling timeout and pattern syntax, which is valuable beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no wasted words. The core functionality and pattern syntax are conveyed efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 8 parameters and no output schema, the description covers main conditions, patterns, and replay context. It lacks explicit return behavior but is otherwise sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so parameters are already well-described. The description adds minimal extra meaning, only summarizing condition types and pattern styles. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: to assert page conditions (element existence/visibility, text, URL/title) with polling until timeout. It distinguishes from siblings by focusing on assertion rather than observation or waiting.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies use for assertions but does not provide explicit guidance on when to use this tool versus alternatives like wait_for or query_dom. No exclusions or comparison with siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
auditARead-onlyIdempotent
One-call page audit, pick the kinds: accessibility, keyboard (tab order and focus issues), SEO, security headers, broken links, Core Web Vitals, unused CSS, resources (which plugin/theme/module/host slows the page), cache (is the CDN serving the new version). A summary line per kind; with save_to the full Markdown report with every finding. Read-only.
| Name | Required | Description | Default |
|---|---|---|---|
| kinds | No | Default skips keyboard, css (slow, approximate), resources and cache | |
| scope | No | a11y only: limit to this subtree | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| save_to | No | Absolute path: write the full Markdown report there and return the path instead of the content | |
| max_links | No | links only: cap on URLs fetched |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare read-only, idempotent, and non-destructive, and the description repeats 'Read-only'. It adds useful behavioral details beyond annotations: the output format ('summary line per kind', 'full Markdown report') and the save_to behavior. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, compact and well-structured. It front-loads the core purpose ('One-call page audit'), lists all options efficiently, and includes output details without verbosity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (5 optional parameters) and the annotations covering safety, the description provides sufficient context: it explains each parameter via schema descriptions and details output behavior. It does not mention edge cases or prerequisites, but the tab_id and scope parameters are self-explanatory from schema descriptions, so nothing critical is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and each parameter has a helpful description. The main description further enriches parameter semantics by explaining what each kind refers to (e.g., 'resources' means which plugin/theme/module/host slows the page) and clarifying default behavior for kinds like keyboard and css. This goes beyond the schema's enum list.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly states 'One-call page audit' and enumerates the exact audit kinds (accessibility, keyboard, SEO, security headers, broken links, Core Web Vitals, unused CSS, resources, cache). This clearly identifies the verb (audit), the resource (page), and distinguishes it from specialized siblings like cookie_audit.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description says to 'pick the kinds' and lists them, so it's clear when to use this tool for any of those audit categories. It does not explicitly name alternatives or state when not to use it, but the coverage is evident from the kind list, making usage largely implied.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
clickA
Click an element by CSS selector or by a ref (n1, n2…) from get_interactives or navigate. A real pointer sequence: it can submit, open a dialog or navigate — use wait_after. Not idempotent; a native confirm() blocks the bridge: handle_dialogs first.
| Name | Required | Description | Default |
|---|---|---|---|
| ref | No | From get_interactives, e.g. "n3" | |
| count | No | 2 emits dblclick after the two clicks, which is what selects a word or opens an editor | |
| force | No | Click even if occluded | |
| button | No | right opens the page context menu instead of activating the element | left |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| frame_id | No | Target iframe id from get_frames; omitted = main frame | |
| selector | No | CSS selector; ">>>" pierces shadow DOM. Ignored when ref is given | |
| wait_after | No | Settle before returning: navigation waits for a page load, networkidle for quiet traffic | none |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations, the description discloses important behavioral details: real pointer actions can trigger navigation, dialogs, or form submission, and native confirm() dialogs can block the bridge. It explicitly states non-idempotence and directs users to handle dialogs, providing valuable context not present in the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, using three focused sentences that front-load the core purpose and then add necessary caveats. Every sentence contributes meaningful information—no fluff, redundancy, or excessive detail. The structure is efficient and easy to scan.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (8 parameters, no output schema), the description covers purpose, selector/ref resolution, side effects, and interaction with wait_after and handle_dialogs. It does not describe return values, but for an action-oriented click tool this is a minor omission given the rich schema and behavioral notes.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides full descriptions for all 8 parameters, so the baseline is high. The description adds useful semantic context by explaining the relationship between ref and selector (selector ignored when ref given) and that wait_after controls settling behavior. This goes slightly beyond schema descriptions without duplicating them.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's primary function: clicking an element by CSS selector or ref. It distinguishes usage from related tools like hover and press_key by specifying the click action and referencing get_interactives/navigate for obtaining refs. The purpose is immediately understandable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to use the tool and how to handle side effects: it notes that a real pointer sequence can submit, open dialogs, or navigate, and recommends wait_after. It also warns about non-idempotence and advises using handle_dialogs first for native confirm() blocks, making usage conditions clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
clipboardAIdempotent
Read or write the system clipboard (text). Activates the tab first. write overwrites whatever the user had copied, which is not recoverable.
| Name | Required | Description | Default |
|---|---|---|---|
| text | No | For write | |
| action | Yes | write takes text; read returns the current clipboard contents | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses that write overwrites the clipboard and that this is not recoverable, which is critical behavioral information beyond the annotations. It also notes that the tab is activated first, adding transparency about side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is exceptionally concise, consisting of two short sentences that pack essential information without anyone. The structure is logical, starting with the core function and then adding the warning.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the primary function and the critical warning, but lacks guidance on alternative tools or edge cases (e.g., what happens when reading an empty clipboard). Given the absence of an output schema, a bit more context about expected behavior would improve completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema descriptions already fully explain all parameters (action, text, tab_id) with 100% coverage. The tool description does not add extra semantic meaning beyond the schema, so a baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reads or writes the system clipboard (text), which is a specific verb and resource. It also clarifies the scope to text, leaving no ambiguity about the tool's function.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not mention when to use this tool versus alternatives like type_text or read_page. It only mentions 'Activates the tab first' as an operational note, but provides no guidance on appropriate use cases or conditions where another tool would be more suitable.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
cookie_auditAIdempotent
Cookie and consent-banner audit: clears this site's cookies, reloads, records cookies and third-party requests BEFORE consent, accepts the banner, records again; the findings name the trackers contacted before consent. Logs you out of the audited site.
| Name | Required | Description | Default |
|---|---|---|---|
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| settle_ms | No | Wait after load and after consent, for late beacons | |
| accept_selector | No | Accept button of the banner; omitted = dismiss_overlays; "none" skips consent |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (idempotent, non-destructive), the description explicitly discloses the side effects: clearing cookies, accepting the banner, and logging out. This transparency about state changes exceeds what the annotations alone convey.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single run-on sentence but is rich with relevant detail. It front-loads the purpose and follows a logical sequence. Slightly dense, but not verbose—allocating a 4 for clarity and efficiency.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the full workflow, expected output (findings naming trackers), and side effects (logout). With no output schema, this textual explanation sufficiently equips an agent to understand the tool's behavior and results.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already provides full descriptions for all three parameters (coverage 100%). The tool description adds no additional parameter meaning, so the baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the tool's specific function: a cookie and consent-banner audit. It lists the sequence of actions (clear cookies, reload, record before consent, accept banner, record again) and explicitly notes the logout side effect, making the intended purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is used when auditing tracker behavior before and after consent, and it warns about the logout effect. It does not explicitly compare against alternatives like the generic 'audit' tool, but the specific scenario is clear enough for an agent to select it appropriately.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
create_tabA
Open a new tab, optionally at a URL, and make it the implicit target of later commands in this session. Each call creates another tab: reuse a tab_id or navigate() to move an existing one instead of piling up tabs.
| Name | Required | Description | Default |
|---|---|---|---|
| top | No | Window y (new_window) | |
| url | No | URL to open (default: new tab page) | |
| left | No | Window x on the virtual desktop (new_window) | |
| width | No | Window width px (new_window) | |
| active | No | false opens the tab in the background, leaving the current one focused | |
| height | No | Window height px (new_window) | |
| new_window | No | Open in a fresh window instead of a tab; with left/top it lands on the chosen monitor |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses that the new tab becomes 'the implicit target of later commands in this session' and that each call creates another tab, behaviors not captured by the annotations. This provides critical context about statefulness and side effects beyond the structured hints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the primary action and followed by a practical usage tip. Every sentence contributes value with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is fully self-contained for a state-changing tool: it explains the action, the session-wide implication, and the fallback to navigate(). It does not explicitly state the return value, but the mention of 'reuse a tab_id' implies a tab identifier is returned, which is sufficient given the tool's simplicity and the comprehensive schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description adds minimal parameter-specific meaning beyond the schema, merely mentioning the optional URL, which is already documented. It does not introduce new information about parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Open') and resource ('new tab'), clearly distinguishing this from navigation tools. It explicitly contrasts with navigate(), stating 'reuse a tab_id or navigate() to move an existing one instead of piling up tabs.'
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit usage guidance: it tells the agent that each call creates a new tab and recommends reusing a tab_id or using navigate() to move an existing tab, preventing tab accumulation. This addresses when to use the tool versus alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dismiss_overlaysAIdempotent
Dismiss cookie banners/modal overlays: OneTrust, Cookiebot, Usercentrics, then generic heuristic. Idempotent.
| Name | Required | Description | Default |
|---|---|---|---|
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Description complements annotations by detailing the specific overlay dismissal approach (vendor-specific plus heuristic). Annotations already mark destructiveHint false and idempotentHint true, and description reinforces idempotency, adding valuable context without contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences pack the essential information: what it does, which overlays it targets, and idempotency. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the simple input schema, annotations covering safety and idempotency, and the focused purpose, the description is fully adequate. No output schema needed for this straightforward action.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with a clear description for tab_id. The tool description adds the non-obvious default behavior: omitted means last tab navigated or active tab, which is helpful beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the tool dismisses cookie banners/modal overlays, listing specific vendor patterns (OneTrust, Cookiebot, Usercentrics) and a generic heuristic. This sets it apart from sibling tools that interact with page elements in other ways.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly mentions idempotency, signaling safe repeated use. Implicitly suggests use when overlays block interaction. No explicit when-not-to-use or alternatives, but context is clear given sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
drag_and_dropA
Drag an element onto another. html5 = DragEvent+DataTransfer; pointer = pointer/mouse events (sortable libraries).
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | Which event family to emit, since libraries listen to different ones | html5 |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| frame_id | No | Target iframe id from get_frames; omitted = main frame | |
| source_selector | Yes | Element to drag; ">>>" pierces shadow DOM | |
| target_selector | Yes | Drop target; ">>>" pierces shadow DOM |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate non-destructive behavior. The description adds the event family implementation detail but does not disclose other behavioral traits like timing, side effects (e.g., element reordering), or error scenarios.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence with no filler. Every word adds meaning, and the semicolon effectively separates the general action from mode specifics.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of drag-and-drop (source, target, modes, frames, tabs) and no output schema, the description is adequate but thin. It does not explain return values, waiting behavior, or what constitutes a successful drop.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All 5 parameters have schema descriptions (100% coverage), so the tool description's role is diminished. However, it adds valuable context for the 'mode' parameter by explaining the difference between html5 and pointer events, which goes beyond the schema's 'which event family to emit'.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the action ('Drag an element onto another') and distinguishes by specifying two event families (html5 vs pointer). This verb+resource structure is specific and distinct from sibling tools like click or hover.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
While the description explains when to use each mode ('html5 = DragEvent+DataTransfer; pointer = pointer/mouse events'), it lacks explicit guidance on when not to use this tool or alternative approaches. No prerequisites or exclusions are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
element_screenshotARead-onlyIdempotent
Screenshot cropped to one element or to a viewport region (PNG), optionally enlarged. Read-only. The cheapest image in the set, because it carries only the box you asked for — and with scale the way to read fine print: crop the box, zoom it, verify.
| Name | Required | Description | Default |
|---|---|---|---|
| scale | No | Enlargement of the crop, 1-4; output still capped at 1568px | |
| region | No | Box in viewport CSS px (the rect frame of get_interactives/query_dom), instead of selector | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| selector | No | CSS selector; ">>>" pierces shadow DOM. The element is scrolled into view first |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description explicitly says 'Read-only,' matching the readOnlyHint and destructiveHint annotations. It also discloses behavior beyond the annotations, such as optional enlargement, output being capped at 1568px, and the selector parameter noting that 'The element is scrolled into view first.'
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the main purpose and keeps additional explanation compact and purposeful. The cost and scale guidance is phrased efficiently, and no sentence is redundant or filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description, combined with the parameter details, gives an agent enough context to call the tool correctly: what it returns (PNG), how to target an element or region, how scaling behaves, and which tab is used. No output schema is present, but the textual description sufficiently covers the output format and key invocation details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All four parameters have meaningful descriptions that go beyond the schema types. The scale parameter documents its default and bounds, region explains it is a viewport box in CSS pixels rather than a selector, tab_id explains fallback behavior, and selector explains shadow DOM piercing and pre-scroll behavior.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Screenshot cropped to one element or to a viewport region (PNG), optionally enlarged.' It also highlights the differentiating cost benefit, 'The cheapest image in the set, because it carries only the box you asked for,' which helps distinguish it from broader screenshot tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives practical usage context by noting it is the 'cheapest image in the set' and that 'with scale the way to read fine print: crop the box, zoom it, verify.' It does not explicitly name sibling alternatives like screenshot or full_page_screenshot, but the cropping and viewport-region framing make the intended use case reasonably clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
emulate_mediaAIdempotent
Make the page believe it runs elsewhere, until reset or reload: prefers-color-scheme, prefers-reduced-motion, print mode, navigator.userAgent/platform. user_agent changes only what page JS reads — the request header is network_rules modify_header. Pair with viewport_resize to emulate a device.
| Name | Required | Description | Default |
|---|---|---|---|
| reset | No | Remove all emulations | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| printMode | No | Make print media queries match, without opening a print dialog | |
| user_agent | No | Overrides navigator.userAgent and appVersion in the page (not the HTTP header) | |
| colorScheme | No | Value reported to prefers-color-scheme queries | |
| reducedMotion | No | Value reported to prefers-reduced-motion queries |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate idempotent and non-destructive behavior; the description adds valuable behavioral details such as the temporary nature of emulation, the reset parameter, and the fact that user_agent does not affect the HTTP header. No contradictions with annotations were found.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, well-structured, and avoids unnecessary detail. It packs essential information into a few sentences and clearly separates the tool's purpose, scope, and parameter behavior.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description is complete for the tool's apparent simple use case: it explains scope, reset behavior, and parameter semantics, and notes how it fits with viewport_resize. Since there is no output schema and the tool likely returns no meaningful data, the absence of return-value details is acceptable.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema covers all six parameters with descriptions and enums, and the description reinforces important nuances such as user_agent not being the HTTP header and reset removing all emulations. This adds meaningful context beyond the structured schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: making the page believe it is in a different environment for media queries and user agent. It also distinguishes it from related tools by explicitly noting that user_agent changes only what page JS reads, not the HTTP header, and by recommending pairing with viewport_resize.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides practical usage guidance, including the reset option, the scope until reset/reload, and the relationship to viewport_resize for device emulation. It does not explicitly say 'use this when...' but the context and parameter details make the intended use clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
execute_jsADestructive
Run JavaScript in the page (MAIN world). Requires the extension's "Allow user scripts" toggle; errors explain setup if disabled.
| Name | Required | Description | Default |
|---|---|---|---|
| code | Yes | JS evaluated in the page; the value of the last expression is returned | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| frame_id | No | Target iframe id from get_frames; omitted = main frame | |
| max_length | No | Max output chars |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate destructive and non-readonly behavior. The description adds important context about MAIN world execution and the permission toggle, complementing annotations without contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Extremely concise two sentences: first sentence states core purpose, second sentence adds essential setup requirement. No wasted words, every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers core purpose and setup requirement well. Schema already documents that the return value is the last expression result. Could mention async behavior, but overall sufficiently complete given the tool's simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All parameters are fully documented in the schema with 100% coverage. The description adds no additional semantics beyond what the schema provides, meeting the baseline expectation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool runs JavaScript in the MAIN world of the page, using specific verb 'run' and resource 'JavaScript in the page', distinguishing it from similar sibling tools that may operate in other contexts.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides a clear precondition (requires 'Allow user scripts' toggle) and a helpful note about error messages explaining setup if disabled. However, it does not explicitly compare with alternative tools like query_dom or modify_dom.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
extractARead-onlyIdempotent
Read repeated non-tabular structures — product cards, list items, search results — as one record per item: item_selector matches the repeating block, fields map output names to selectors relative to it. Read-only, deterministic, parsed server-side from the main-document HTML.
| Name | Required | Description | Default |
|---|---|---|---|
| fields | Yes | field name → {selector, attr} | |
| format | No | lines is compact; json keeps one object per record | lines |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| save_to | No | Absolute path: write the records as JSON there and return the path instead of the content | |
| max_items | No | Cap on records returned, in document order | |
| max_length | No | Max output chars | |
| item_selector | Yes | CSS selector matching each item |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, destructiveHint=false, idempotentHint=true. The description adds useful context: deterministic, parsed server-side from main-document HTML. This adds value beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that front-loads the purpose. Every part adds value with no wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (7 params, nested object, no output schema), the description covers the core usage and behavioral context. It lacks explicit mention of defaults or output format, but schema descriptions fill that gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions for all 7 parameters. The description adds a general pattern explanation but does not provide details beyond the schema. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reads repeated non-tabular structures as records per item, with specific examples (product cards, list items, search results). It distinguishes from siblings like extract_table by specifying 'non-tabular'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use (non-tabular structures) and hints at alternatives (extract_table for tables), but does not explicitly state when not to use or list alternatives. The context is clear enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
extract_tableARead-onlyIdempotent
Read a real as JSON: thead cells become keys, each row an object. Read-only. Only for tabular markup — where filters rows server-side, so one matching row out of 1500 costs a few hundred bytes instead of the whole document. row_count is the table total, match_count how many rows passed the filter.
| Name | Required | Description | Default |
|---|---|---|---|
| index | No | Which table to take when the selector matches several, 0-based | |
| where | No | {column: substring} rows must match, case-insensitive contains. Key "any" matches any cell. | |
| offset | No | Skip N rows of the (filtered) set before applying max_rows. | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| columns | No | Return only these columns per row. | |
| max_rows | No | Max rows returned to you (output cap). | |
| selector | No | The table to read; ">>>" pierces shadow DOM | table |
| scan_rows | No | Max rows materialized in-page to scan/filter; raise for very large tables. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true and destructiveHint=false; description reinforces with 'Read-only' and adds details on filtering behavior and row counts, providing extra context beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three concise sentences front-load the core purpose, add efficiency context, and describe key filtering behavior with zero wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema, the description compensates by mentioning output fields. It covers main usage patterns and performance considerations, though interaction between offset and row limits could be clearer.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers all parameters with descriptions, but the description adds value by explaining the filtering logic of `where` (case-insensitive contains, 'any' key) and hints at output fields like `row_count` and `match_count` not in schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states it reads a table as JSON with specific structure, and the scope 'Only for tabular markup' distinguishes it from generic DOM queries or page reading.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says 'Only for tabular markup' and highlights efficiency benefits of server-side filtering, but does not explicitly state when not to use or name alternative tools for non-tabular data.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
fill_formA
Batch fill form fields with React-compatible events. Handles input, select, checkbox, radio, and textarea. With submit_selector it also submits, so a repeated call submits twice — not safe to retry blindly.
| Name | Required | Description | Default |
|---|---|---|---|
| fields | Yes | {selector, value} pairs | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| frame_id | No | Target iframe id from get_frames; omitted = main frame | |
| wait_after | No | Settle before returning: navigation waits for a page load, networkidle for quiet traffic | none |
| submit_selector | No | Submit button to click after filling |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Explicitly discloses non-idempotent behavior when submit_selector is used, warning that repeated calls submit twice. Also mentions React-compatible events, adding meaningful behavioral detail beyond the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences front-load the core purpose and then add the most important caveat. No fluff or redundant detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the tool's main behavior, supported control types, and the critical submission side effect. Remaining parameter details are provided by the schema, so nothing essential is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema descriptions already cover all parameters, but the description adds extra meaning for submit_selector (triggers submission, not safe to retry) and clarifies supported field types relevant to the fields parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific action ('batch fill form fields'), lists supported element types (input, select, checkbox, radio, textarea), and notes optional submission via submit_selector. Clearly distinguishable from sibling tools like type_text or click.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides clear context for when to use it (batch filling forms across multiple control types) and warns that using submit_selector causes submission and is not safe to retry. Does not explicitly contrast with type_text, but the use case is apparent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
find_settingAIdempotent
Where is a setting in an unknown admin panel: follows the panel's menu links (same origin) until a page contains the keyword and reports the menu path. Navigates the tab, leaves it on the page found, stops at max_pages.
| Name | Required | Description | Default |
|---|---|---|---|
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| keyword | Yes | What you are looking for, e.g. "webp", "cron", "maintenance mode" | |
| max_pages | No | Pages visited at most | |
| menu_selector | No | Where the menu links are | nav, aside, [role="navigation"], #adminmenu, .menu, .sidebar, .navbar, .tabs |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses that the tool navigates the tab and leaves it on the found page, which is a side effect not captured by the annotations. It also explains the iterative behavior of following menu links and stopping at max_pages. This goes beyond the annotation hints and provides useful behavioral transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, two sentences, with no redundant content. It front-loads the purpose and then explains the behavior and constraints. Every phrase adds value, and the structure is easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains the core mechanism but lacks explicit details about the return format ('reports the menu path' is vague), what happens if the keyword is not found, or how it handles pages that fail to load. Since there is no output schema, these details would be useful for an agent to fully anticipate results.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All four parameters have schema descriptions with 100% coverage, so the baseline is 3. The tool description does not add significant extra semantic detail about the parameters beyond what the schema already provides (e.g., keyword is described as 'What you are looking for' in both places).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: to locate a setting in an unknown admin panel by clicking through menu links until the keyword is found, then reporting the menu path. This distinguishes it from other search-related tools like find_text or query_dom, which operate on the current page only.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The phrase 'in an unknown admin panel' and the mechanism of following menu links give clear context for when this tool is appropriate. It also mentions the max_pages limit and the fact that it navigates the tab, which helps agents decide if this tool fits their need. However, it does not explicitly contrast it with alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
find_textARead-onlyIdempotent
Find text on the page: parent selector, context, visibility, position per match. Attaches nearby interactive elements (with refs for click/type_text/hover) for the first visible match.
| Name | Required | Description | Default |
|---|---|---|---|
| text | Yes | Literal text to find, not a regex | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| max_results | No | Cap on matches returned, in document order | |
| case_sensitive | No | Match case exactly |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnlyHint=true, idempotentHint=true, and destructiveHint=false. The description adds behavioral details about attaching nearby interactive elements with refs for interaction. This is valuable context beyond annotations, though it does not cover edge cases like no match found.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences, front-loaded with the core purpose, followed by an important behavioral detail. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description adequately explains the return values (parent selector, context, visibility, position, interactive elements). It covers the main aspects but could be more explicit about the list of matches and behavior when no match is found.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so parameters are well-described in the schema. The description does not add additional meaning or usage hints for parameters beyond what the schema provides. The mention of 'parent selector, context, visibility, position' refers to output, not parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool finds text on a page and specifies what it returns: parent selector, context, visibility, position per match, and attached interactive elements for the first visible match. This is specific and distinguishes it from sibling tools like query_dom or get_interactives.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for finding text and obtaining interactive elements, but it lacks explicit guidance on when to use this versus alternatives like query_dom. No when-not-to-use conditions or prerequisites are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
full_page_screenshotARead-onlyIdempotent
Full-page capture by scrolling: stitched segments of ~2 viewports (≤1568px), or one image per viewport with stitch=false. Expensive: ~2.7k image tokens per segment, only max_segments returned, the rest via segment_offset. Reading the text you need is cheaper by an order of magnitude — prefer read_page, extract or find_text unless layout is the question.
| Name | Required | Description | Default |
|---|---|---|---|
| delay | No | ms between captures (min 500, Chrome quota) | |
| stitch | No | false = one image per viewport | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| max_scrolls | No | Cap on scroll steps: a taller page is captured only up to here | |
| max_segments | No | Images returned from the top (≈2.7k image tokens each); segment_offset for the rest | |
| segment_offset | No | Skip the first N segments |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Describes scroll behavior, segment stitching, token costs, and limits (max_scrolls, max_segments, offset). Consistent with readOnlyHint and idempotentHint; no contradiction, and the cost information adds transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured, front-loading the core purpose, then cost, then usage guidance. It is concise and contains no filler or redundancy, with all sentences contributing to clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the capture process, cost, when to use, and limits. It does not specify the exact return format (e.g., image URLs), but given the absence of an output schema, the provided information is reasonably complete for an agent to invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema descriptions are already thorough (100% coverage) and meaningfully explain each parameter. The description adds context about cost per segment, which enhances the understanding of max_segments, though not all parameters are further elaborated in the description itself.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: full-page capture by scrolling, with stitching or separate viewport images. It distinguishes from other screenshot tools by mentioning the stitching behavior and segment limits.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly advises when to prefer text-based tools (read_page, extract, find_text) over this screenshot tool, and provides cost trade-offs. This gives clear guidance on when to use it versus alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_framesARead-onlyIdempotent
List frames (main + iframes) with frameId, parent, URL — for the frame_id parameter of DOM tools.
| Name | Required | Description | Default |
|---|---|---|---|
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, so the safety profile is clear. The description adds that the tool lists frames with specific fields, which is consistent with annotations and not contradictory.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single 16-word sentence that is front-loaded with the verb 'List' and resource. Every word adds value; no fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple listing tool with one optional parameter and no output schema, the description covers the purpose, output structure, and usage context. It is complete enough for an agent to understand and use the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% for the single parameter tab_id, and the description does not add any additional semantics or details about the parameter beyond what the schema already provides. Baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'List frames (main + iframes) with frameId, parent, URL', specifying the verb (List), resource (frames), and output fields. It distinguishes from siblings like get_tabs by targeting frame IDs for DOM tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says 'for the frame_id parameter of DOM tools', indicating when to use this tool (to get frame IDs for DOM operations). It does not mention when not to use or list alternatives, but the usage context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_interactivesARead-onlyIdempotent
List actionable elements (buttons, links, inputs, [role], [onclick]) with ready-to-use CSS selector, label, position, flags. Prefer this over dumping HTML to discover selectors.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max elements returned; raise it on a dense page | |
| scope | No | Limit search (CSS selector) | |
| format | No | lines is compact; json adds full attributes per element | lines |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| frame_id | No | Target iframe id from get_frames; omitted = main frame | |
| visible_only | No | false also lists elements hidden or scrolled out of view |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide readOnlyHint, idempotentHint, and destructiveHint. The description adds behavioral context by detailing what elements are considered actionable (buttons, links, inputs, roles, onclick) and that it returns selectors, labels, positions, and flags. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Only two sentences, both front-loaded with the tool's purpose and key benefit. No wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With full schema coverage, no output schema, and annotations, the description provides sufficient context about what the tool returns and when to use it. It could mention return format (lines/json) but the schema already covers that.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with all parameters described. The description does not add parameter-specific meaning beyond the schema, but the overall usage context helps. Baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states it lists actionable elements (buttons, links, etc.) with ready-to-use CSS selectors, labels, positions, and flags. It distinguishes itself from sibling tools by recommending preference over dumping HTML.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly advises to prefer this tool over dumping HTML to discover selectors, providing clear usage guidance. Could be strengthened by mentioning conditions where alternatives are better, but it's still helpful.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_page_infoARead-onlyIdempotent
Get page metadata: meta tags, scripts, stylesheets, links, and forms
| Name | Required | Description | Default |
|---|---|---|---|
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| frame_id | No | Target iframe id from get_frames; omitted = main frame |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, destructiveHint=false, so safety and idempotency are clear. Description adds specific metadata types, but no additional behavioral context (e.g., network requests, performance impact).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence with no wasted words, clearly front-loading the purpose. Highly concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Description lists the output components (meta tags, scripts, etc.), providing sufficient context for an agent to understand what will be returned, even without an output schema. Could mention return format but not critical.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with clear descriptions for both parameters. The description does not add extra parameter information beyond the schema, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states verb and resource: 'Get page metadata' and lists specific items (meta tags, scripts, stylesheets, links, forms). Distinguishes from siblings like query_dom (broader) and get_interactives (interactive elements).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool versus alternatives. Among many sibling tools, no context is provided for selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_statusARead-onlyIdempotent
Check bridge status: extension connection, server mode (primary/relay), port, version
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already provide readOnlyHint, idempotentHint, destructiveHint. Description adds minimal extra context beyond listing fields.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, no waste, front-loaded with purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter status check, the description adequately lists key fields. Could elaborate on field meanings or possible values.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
No parameters in schema (100% coverage). Description lists output fields, adding value beyond empty schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Check bridge status' and lists specific fields (extension connection, server mode, port, version). This distinguishes it from sibling browser automation tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage for checking bridge status, but no explicit when-to-use or when-not-to-use compared to sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_storageARead-onlyIdempotent
Read localStorage, sessionStorage or cookies of the current origin (type=all for every one). Read-only. Cookies come with domain, path, expiry and the httpOnly/secure flags, so this also answers whether a session cookie is present — write them back with set_storage, or snapshot a logged-in state with session_fixture.
| Name | Required | Description | Default |
|---|---|---|---|
| type | No | all returns the three together | all |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint, destructiveHint, etc. Description adds specifics about cookie details (domain, path, expiry, flags) and confirms read-only nature. Consistent and adds value.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with verb and resource. No wasted words; each sentence contributes purpose and detail.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema, but description mentions cookie structure. For a simple read tool, it sufficiently covers behavior and output shape. Adequate given the tool's simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 100% description coverage. Description adds context for 'type' (all returns three together) and 'tab_id' default behavior, complementing the schema well.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the tool reads localStorage, sessionStorage, or cookies of the current origin. It differentiates from siblings set_storage and session_fixture by mentioning write and snapshot operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides context on when to use, e.g., checking for session cookies, and hints at alternatives. Lacks explicit when-not-to-use but offers good guidance overall.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_tabsARead-onlyIdempotent
List every open tab with id, url, title, active flag and mine (created by this session). Read-only. Find a tab_id when the implicit target is not the one you mean. include_windows adds position, size, state and type of each window — needed before moving or tiling.
| Name | Required | Description | Default |
|---|---|---|---|
| include_windows | No | Also return the windows with bounds, state, type and tab count |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description states 'Read-only' and explains the 'mine' filter (tabs created by this session), which adds behavioral nuance beyond the annotations. It does not mention side effects, but the read-only nature is unambiguous and reinforced by annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, efficient sentence that packs all essential information—purpose, fields, read-only nature, and parameter rationale—without any redundant wording.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given there is no output schema, the description adequately enumerates the returned fields for both tabs and windows. It also explains the 'mine' filter and the parameter's purpose. Minor omissions like sorting or pagination are not critical for this simple listing tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter include_windows is explained in the description: it adds window details (position, size, state, type) and is needed before moving or tiling. This adds practical context beyond the schema's dry listing of fields.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists all open tabs with specific fields (id, url, title, active, mine) and optionally windows. It also explains a key use case—finding a tab_id when the implicit target is ambiguous—which distinguishes it from similar tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly notes the tool is read-only and guides when to use it (to find a tab_id for other operations). While it doesn't name sibling tools like tab_action or create_tab, the context is clear enough for an agent to select this tool for listing tabs.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
handle_dialogsAIdempotent
Auto-accept/dismiss future JS dialogs (alert/confirm/prompt), logging them. reset restores native dialogs and returns the log.
| Name | Required | Description | Default |
|---|---|---|---|
| action | No | accept/dismiss auto-answer future dialogs; reset restores native behaviour | accept |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| prompt_text | No | Returned by window.prompt on accept |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide idempotentHint=true, and the description adds logging behavior and the reset functionality. It discloses that dialogs are auto-handled and logged, but does not detail the log format or potential side effects like interference with user interaction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, concise, and front-loaded with the primary action. Every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with clear schema and annotations, the description and schema together fully explain the tool's capabilities. The log return is mentioned, and optional parameters are covered.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All three parameters have descriptions in the schema (100% coverage), so the description adds minimal extra value beyond what the schema already provides. The description mentions logging and reset but not parameter-specific details.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly specifies the tool auto-accepts or dismisses future JS dialogs (alert/confirm/prompt) and logging them, with a reset option. It uniquely identifies the resource and action among sibling tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for dialog handling but does not explicitly state when to use this tool vs alternatives or when not to use it. No context on prerequisites or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
handoffAIdempotent
Hand the browser to the user for what only a person can do — 2FA, CAPTCHA, login, a choice — and wait: a banner in the page shows your message with Done/Cancel, the call returns on click or timeout, redirects included. pick_element: the user clicks an element and you get its selector. Never type credentials yourself.
| Name | Required | Description | Default |
|---|---|---|---|
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| message | Yes | What the user should do, one line | |
| timeout | No | ms to wait for the click, default 5 min | |
| pick_element | No | Ask the user to click an element; returns its selector, text and box |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses the blocking/waiting behavior, the banner UI, and that the call returns on click or timeout, including redirects. It does not fully describe the Cancel path or side effects if the user navigates away, but the core interactive behavior is transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and front-loads the main behavior while adding necessary usage guidance. It is slightly dense with punctuation and clauses, but every sentence contributes useful information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains when to use the tool and what happens for pick_element, but it does not fully specify the return value for the normal handoff case. It says the call returns on click or timeout, but not what data or status the agent should expect, and Cancel behavior is ambiguous.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema descriptions already cover all parameters, and the tool description adds helpful context for message, timeout, and pick_element. It does not add additional meaning for tab_id beyond the schema, but overall the parameters are well understood.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific action—handing the browser to the user—and scopes it to tasks only a person can perform, such as 2FA, CAPTCHA, login, or a choice. It also distinguishes the optional pick_element mode, making the tool's purpose unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly says when to use the tool ('for what only a person can do') and includes a strong directive ('Never type credentials yourself') that guides an agent away from attempting those tasks with other tools. The pick_element sub-behavior is also clearly explained.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
hoverAIdempotent
Hover over an element (mouseenter/mouseover), by CSS selector or ref.
| Name | Required | Description | Default |
|---|---|---|---|
| ref | No | From get_interactives | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| frame_id | No | Target iframe id from get_frames; omitted = main frame | |
| selector | No | CSS selector; ">>>" pierces shadow DOM. Triggers CSS and JS hover handlers |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds value beyond annotations by stating that hover triggers CSS and JS hover handlers. Annotations already provide idempotentHint=true and destructiveHint=false, so this context is useful.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence, front-loaded with the verb and resource, no wasted words. Highly concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple hover action with no output schema, the description adequately covers the tool's behavior. It mentions the triggered events, which is sufficient. No major gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents parameters. The description adds minor context ('by CSS selector or ref' and events triggered), but not significant beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (hover) and the resource (element by CSS selector or ref), and it distinguishes from sibling tools like click and type_text.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool over alternatives, such as click or type_text. The description does not mention conditions or prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_authAIdempotent
Set/clear credentials for HTTP Basic/Digest auth dialogs (browser-wide, in-memory only).
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | set installs credentials for HTTP auth prompts; clear removes them | |
| password | No | Required for action=set; kept in memory, never written to disk | |
| username | No | Required for action=set |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide basic hints (readOnlyHint=false, destructiveHint=false, idempotentHint=true). The description adds valuable context: credentials are stored in-memory only, browser-wide. This is consistent with annotations and improves understanding beyond them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence that captures verb, resource, scope, and key constraints. No wasted words, front-loaded with the core action.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description adequately covers purpose, scope, and parameter dependencies. It could mention that credentials apply to all requests (global) or note potential security considerations, but for a simple set/clear tool, it is largely complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with clear descriptions for all three parameters. The description reinforces the action enum and indicates username/password are required for action=set. This adds marginal clarity, but the schema already does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (set/clear), the resource (credentials for HTTP Basic/Digest auth dialogs), and the scope (browser-wide, in-memory only). It is specific and distinct from sibling tools, which are unrelated to auth.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage context ('for HTTP Basic/Digest auth dialogs'), providing clear context. It does not explicitly mention when not to use or alternatives, but the context is sufficiently narrow given the diverse sibling list.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
http_requestADestructive
HTTP request sent from the browser, with the logged-in user's cookies: fetches what a server-side request gets a login page for (invoices, authenticated JSON, exports). Text bodies inline (capped by max_length); save_to writes the bytes — the way to read a PDF, since read_page returns nothing on a PDF tab.
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | Absolute URL. Cookies are sent for its origin | |
| body | No | Request body (POST/PUT/PATCH) | |
| method | No | HEAD fetches headers only, without the body | GET |
| headers | No | Extra request headers | |
| save_to | No | Absolute path: write the response bytes here instead of returning them (PDF, images, archives) | |
| max_length | No | Max chars of body returned inline |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnlyHint=false and destructiveHint=true, so the description does not need to fully disclose side effects. The description does mention sending cookies and writing bytes to a file, which are important behaviors. However, it does not warn that POST/PUT/DELETE methods can modify or destroy remote resources, which is relevant given the destructiveHint annotation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact at two sentences and conveys the core purpose, key parameters, and a specific fallback use case. The phrasing 'fetches what a server-side request gets a login page for' is slightly awkward, but it does not add unnecessary length or repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description explains the return behavior (inline text up to max_length, or bytes written via save_to) but lacks details about response status codes, headers, or error conditions. Since there is no output schema, a bit more information about the response format would improve completeness, though the description is sufficient for basic usage.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, with each parameter having a description. The description adds useful context for save_to and max_length (e.g., writing bytes for PDFs and capping inline text). It does not go beyond the schema to clarify headers or method semantics, but the schema already covers these adequately, so a baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool as an HTTP request from the browser with the user's cookies, meant to fetch authenticated content such as invoices, JSON, or exports. It also distinguishes the PDF-reading use case from read_page, giving a specific purpose. It could be more direct in naming the action 'perform an HTTP request', but the intent is clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains when to use the tool: when a server-side request would get a login page, for authenticated data, and for PDFs where read_page fails. It also hints at not using read_page for PDFs. It does not explicitly enumerate all alternative tools, but the guidance is concrete and actionable.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
inject_cssAIdempotent
Inject a CSS rule into the page. Stays until the next navigation or reload, and re-injecting the same id replaces it rather than stacking. Affects only what is rendered — the stylesheet of the site is untouched.
| Name | Required | Description | Default |
|---|---|---|---|
| css | Yes | One or more CSS rules, as they would appear in a stylesheet | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds significant behavioral context beyond annotations: lifetime (until navigation/reload), idempotency (re-inject replaces), and non-destructive nature (stylesheets untouched). Annotations already indicate idempotent=true and destructive=false, but description enriches with concrete details.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three concise, front-loaded sentences with no redundancy. Each sentence adds essential information: purpose, behavioral details, and scope. Excellent efficiency.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity and the presence of detailed parameter schema, the description covers all necessary aspects: what it does, how it behaves (lifetime, idempotency), and its non-destructive nature. No missing essentials.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with adequate descriptions for both parameters. The description does not add new parameter-level information beyond what's in the schema. The mention of 'same id' in the description implies an identifier not present in the parameters, which could cause confusion but does not directly affect parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'inject' and the resource 'CSS rule into the page'. It distinguishes this tool from siblings like modify_dom or execute_js by focusing specifically on CSS injection.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains persistence ('stays until next navigation') and idempotency ('re-injecting the same id replaces it'). It also clarifies it only affects rendered content, not the site's stylesheet. However, it does not explicitly state when not to use it or mention alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
manage_downloadsA
List downloads, start one, or wait for the newest to finish. Files land in the browser Downloads folder, not on the server. download reports the real state: with Chrome set to ask where to save, it comes back waiting_for_user — bytes fetched, nothing moves until someone picks a destination.
| Name | Required | Description | Default |
|---|---|---|---|
| url | No | What to download (action=download); sent with the session cookies of its origin | |
| limit | No | Max download entries returned, newest first | |
| action | Yes | download fetches with the browser cookies and reports the real state; wait_for_complete blocks until the newest finishes | |
| timeout | No | Max ms (wait_for_complete) | |
| filename | No | Relative path inside the Downloads folder (action=download) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses important side effects and real-world behavior: downloads are saved to the browser's Downloads folder, the tool reports the actual state, and a download may return waiting_for_user if Chrome asks for a destination. This goes beyond the minimal annotations and gives the agent useful runtime expectations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and front-loaded, leading with the three primary operations. It avoids unnecessary detail and each sentence contributes meaningful information about behavior or side effects.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the tool's core actions, storage location, and state-reporting behavior, which is enough for basic use. It does not explicitly describe the return values for list or wait_for_complete, but given the simple schema and annotations, this is a minor gap rather than a critical omission.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The JSON schema already provides 100% coverage of all parameters with descriptions. The tool description mostly restates the action enum behavior and adds little new meaning about the parameters themselves, so it provides only marginal additional value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool's purpose: list downloads, start one, or wait for completion. It distinguishes this from server-side file operations by explicitly stating files land in the browser Downloads folder, and it conveys the download-state reporting behavior.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains the practical context of use, including where files are stored and what happens when the browser is configured to ask for a save location. It does not explicitly name alternative sibling tools, but the 'not on the server' note helps an agent choose this over server-side file operations.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
measure_spacingARead-onlyIdempotent
Measure the gap, overlap and distance in CSS pixels between two elements, with their margins and paddings. Read-only. Values come from the current layout, so zoom and viewport size change them: viewport_resize({zoom:1}) and a fixed viewport_resize make results comparable across runs.
| Name | Required | Description | Default |
|---|---|---|---|
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| selector1 | Yes | First element; distances are measured from its box | |
| selector2 | Yes | Second element; ">>>" pierces shadow DOM |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description states 'Read-only' and explains that values depend on the current layout, zoom, and viewport size, which is important behavioral context. The annotations (readOnlyHint, destructiveHint false) align perfectly. It does not mention potential errors or edge cases, but the most critical behavioral traits are disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is slightly longer than strictly necessary, containing about 40 words, but every sentence contributes valuable information: metrics, units, read‑only nature, layout dependence, and normalization advice. The structure is clear and front‑loaded with the core purpose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Without an output schema, the description implies that the tool returns numeric values for gap, overlap, and distance, but it does not explicitly describe the return format or whether additional data (e.g., margins) is included. Given the tool's simplicity, the essential context is present, though a brief note about the exact return shape would make it fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Every parameter has a meaningful description: `tab_id` explains its fallback behavior, `selector1` and `selector2` both clarify how distances are measured from their boxes and that `>>>` pierces shadow DOM. This adds semantic depth beyond simple name/type information and covers 100% of the parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific action (measure), a specific resource (two elements), and the exact metrics (gap, overlap, distance) along with units (CSS pixels). It also includes the relevant scope (margins and paddings) and notes about layout dependence. This leaves no ambiguity about what the tool does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides practical guidance for obtaining consistent results by recommending `viewport_resize({zoom:1})` for comparability across runs. While it does not explicitly contrast with alternatives (none of the siblings perform measurements), it effectively communicates how to use the tool correctly in a layout‑dependent context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
modify_domAIdempotent
Change an element in the live DOM: setAttribute, removeAttribute, addClass, removeClass, setStyle, setTextContent. Nothing is persisted — the next reload restores the page as the server sends it. For styling many elements at once inject_css is one call instead of N.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Attribute name | |
| value | No | Attribute value, style declaration, or text, per action | |
| action | Yes | setStyle takes a CSS declaration in value; addClass/removeClass take className | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| frame_id | No | Target iframe id from get_frames; omitted = main frame | |
| selector | Yes | CSS selector; ">>>" pierces shadow DOM. Only the first match is changed | |
| className | No | Class to add or remove (addClass/removeClass) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate idempotent and non-destructive. Description adds transparency that changes are not persisted across reloads and that only the first match is modified. No contradictions with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences plus a one-sentence alternative recommendation. No redundant information; every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the 7 parameters fully described in the schema, no output schema, and annotations providing safety profile, the description adequately covers core functionality and persistence behavior. Could enhance by contrasting with query_dom for read-only access.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptive parameter names and descriptions. The description does not add additional context beyond the schema, so baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool changes an element in the live DOM, enumerates specific actions (setAttribute, removeAttribute, etc.), and contrasts with inject_css for bulk styling. It differentiates itself from sibling tools like inject_css.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use inject_css instead for many elements, providing clear guidance. Does not explicitly exclude other scenarios, but the contrast is sufficient for most use cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
monitor_networkARead-onlyIdempotent
Monitor network requests. source=page: XHR/fetch hook (installed on first call); source=browser: all requests incl. static assets; source=websocket: connections and messages. format=har exports HAR 1.2.
| Name | Required | Description | Default |
|---|---|---|---|
| clear | No | Clear buffer after read | |
| limit | No | Most recent; buffer 1000 | |
| format | No | har exports HAR 1.2 for external tooling | lines |
| source | No | page: XHR/fetch only; browser: static assets too; websocket: connections and messages | page |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, openWorld, idempotent, and not destructive. The description adds transparency by noting that the page source installs a hook on first call, which is a subtle side effect not fully covered by the annotations. This extra detail improves behavioral understanding.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact yet informative, using semicolons to separate key points. It avoids unnecessary fluff and conveys all essential details in a structured manner, making it easy to parse and understand.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the tool's core behavior, source options, and output format. It lacks a detailed explanation of the return structure (no output schema), but the limit parameter mentions a buffer, giving some context. Overall, it is sufficiently complete for typical usage.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema descriptions already cover all parameters, but the description adds semantic clarity for the enum values (e.g., 'page: XHR/fetch only' and 'har exports HAR 1.2') and explains buffer limits. This enriches the parameter meaning beyond the schema alone.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose as 'Monitor network requests' and specifies the different sources (page, browser, websocket) and output format (har). This gives a precise understanding of what the tool does and distinguishes it from potential sibling tools like network_rules.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides guidance on selecting source types and explains the format export, but it does not explicitly mention when to use this tool over alternatives (e.g., network_rules or track_events). The guidance is implicit through parameter descriptions rather than direct usage scenarios.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
move_tabAIdempotent
Move an existing tab into another window (chrome.tabs.move), keeping id, history and page state; works on chrome-untrusted:// tabs too. The destination must be a normal window: out of an app/popup window is fine, into one is refused. A ChromeOS Terminal tab can be pulled out (new_window, window_type popup) but never merged back: extensions cannot create app windows.
| Name | Required | Description | Default |
|---|---|---|---|
| top | No | New window y (new_window) | |
| left | No | New window x (new_window) | |
| index | No | Position in the destination window; -1 appends at the end | |
| width | No | New window width px (new_window) | |
| height | No | New window height px (new_window) | |
| tab_id | Yes | Tab to move; get it from get_tabs | |
| window_id | No | Destination window; get_tabs reports windowId for every tab | |
| new_window | No | Extract the tab into a fresh window instead of an existing one | |
| window_type | No | new_window only: popup has no tab strip nor omnibox, the terminal-window look | normal |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes beyond the annotations by detailing side effects and edge cases: it preserves id/history/state, works on chrome-untrusted:// tabs, only allows moving into normal windows, and clarifies that ChromeOS Terminal tabs can be pulled out but not merged back. This is extensive behavioral disclosure.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise yet information-dense, packing all necessary constraints and nuances into two sentences without redundancy or filler. It is well-structured and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of the tool (edge cases, constraints, parameter interactions), the description covers the essential usage rules comprehensively. It does not describe the return value or error behavior, but since there is no output schema and the primary usage context is clear, this is a minor gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and each parameter already has descriptive text in the schema. The main description does not add meaning beyond what the schema provides; it merely references get_tabs for tab_id and window_id, which is already in the schema descriptions. Thus baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (move an existing tab) and the target resource (into another window), while also providing key constraints (destination must be normal, etc.). It distinguishes itself from sibling tools like get_tabs or create_tab by focusing specifically on moving tabs.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives concrete usage guidance: it explains where to get the tab_id (from get_tabs) and notes special cases like chrome-untrusted:// and ChromeOS Terminal tabs. However, it does not explicitly contrast with alternative tools (e.g., tab_action) or state when not to use this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
network_rulesAIdempotent
Network interception, browser-wide, survives reloads until cleared: block, redirect, set/remove headers, stub a synthetic body, or record real API responses and replay them with forced errors/latency (local helper; from HTTPS pages the stub host must be trusted).
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | Response body (action=stub) | |
| name | No | Fixture name for record/replay | |
| action | Yes | record saves the page's API responses (url_filter) as a fixture, replay serves them with overrides; list/clear | |
| header | No | Header name for action=modify_header, e.g. "User-Agent" | |
| status | No | action=stub | |
| overrides | No | replay: force a status, body or delay on matching URLs — error states a real backend will not produce | |
| url_filter | No | declarativeNetRequest urlFilter, e.g. "||example.com/api/*" | |
| content_type | No | action=stub | application/json |
| header_value | No | Omit to remove header | |
| redirect_url | No | Destination for action=redirect | |
| header_target | No | response = strip content-security-policy / x-frame-options, inject CORS | request |
| resource_types | No | Limit the rule to these request types; omitted = all of them |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses that rules persist across reloads until cleared and that it is a local helper, with an HTTPS-specific limitation. Combined with annotations indicating non-read-only, idempotent behavior, this gives a solid picture of side effects.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and dense, packing many capabilities into a single readable paragraph. It avoids fluff, though the long colon-separated list requires careful parsing.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
It covers core behavior and constraints, but does not explain return values, rule precedence, how to clear a single rule versus all rules, or how overlapping rules are resolved. For a tool with this many actions and optional parameters, that is a notable gap.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The JSON schema already documents all parameters with descriptions, and the narrative description adds useful semantics such as header_target behavior for stripping CSP and injecting CORS, and overrides being useful for error states a real backend will not produce.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool as browser-wide network interception that can block, redirect, set/remove headers, stub, record, and replay. It is distinct from monitoring tools like monitor_network, though it does not use an explicit verb phrase like 'Manage network rules'.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains what the tool can do but gives no guidance on when to use it versus alternatives such as monitor_network or http_request. The HTTPS host trust caveat is useful but does not provide selection criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
press_keyA
Send a key to the focused element (or to selector, focusing it first) as a real keydown/keypress/keyup sequence, so framework handlers fire. For typing a value use type_text; this is for Enter, Tab, Escape, arrows and shortcuts. Not idempotent: two calls send the key twice.
| Name | Required | Description | Default |
|---|---|---|---|
| alt | No | Hold Alt | |
| key | Yes | e.g. "Enter", "Escape", "Tab", "ArrowDown" | |
| ctrl | No | Hold Control | |
| meta | No | Hold Meta (Command/Windows) | |
| shift | No | Hold Shift | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| frame_id | No | Target iframe id from get_frames; omitted = main frame | |
| selector | No | Target (default: activeElement) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate non-idempotent (idempotentHint=false) and non-destructive. Description adds that it simulates a real key sequence and focuses the element if a selector is provided. Does not contradict annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, each serving a clear purpose: first explains the action and effect, second provides usage guidance and idempotency warning. No redundant words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers key aspects: what the tool does, key sequence, focusing behavior, example keys, and idempotency. No output schema, so return values are not needed. Sufficient for an 8-parameter tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers all 8 parameters with descriptions (100% coverage). Description only adds context about focusing when a selector is used, which is already implied. Little additional value beyond schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Send a key to the focused element') and specifies the key sequence (keydown/keypress/keyup). It distinguishes from type_text for typing values and gives examples like Enter, Tab, Escape, arrows, and shortcuts.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly tells when to use (Enter, Tab, Escape, arrows, shortcuts) and when not ('For typing a value use type_text'). Also warns about non-idempotency: 'Not idempotent: two calls send the key twice'.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
query_domARead-onlyIdempotent
Query DOM elements by CSS selector, returning structure, attributes, bounding rect, and computed styles.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Max elements returned, from the top of the match list | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| frame_id | No | Target iframe id from get_frames; omitted = main frame | |
| selector | Yes | CSS selector; ">>>" pierces shadow DOM. Matches all, not just the first | |
| properties | No | Computed styles to include, e.g. ["color"] |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnlyHint=true and idempotentHint=true. The description adds value by stating what is returned (structure, attributes, bounding rect, computed styles), and the schema covers the limit and selector details. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that is front-loaded with the action and key details. No unnecessary words; highly concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given no output schema, the description adequately hints at the return format (structure, attributes, bounding rect, computed styles). It could mention that results are an array or ordered by DOM order, but it is sufficient for an agent.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description does not add extra meaning beyond the schema; it only mentions the selector in the tool description but not the other parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (Query DOM elements by CSS selector) and the return data (structure, attributes, bounding rect, computed styles). It is specific and distinguishes from siblings like get_interactives or modify_dom.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not provide explicit guidance on when to use this tool versus others. It implies usage for general DOM querying but does not mention alternatives or exclusions. Given many sibling tools, more context would help.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
read_consoleADestructive
Read console messages captured since page load, incl. uncaught errors and unhandled rejections.
| Name | Required | Description | Default |
|---|---|---|---|
| clear | No | Clear buffer after read | |
| level | No | all merges every level in one chronological list | all |
| limit | No | Most recent; buffer 1000 | |
| format | No | lines is compact; json keeps timestamps and stack traces | lines |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| sourcemap | No | Resolve bundle.js:line:col frames to source files through their source maps |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description does not disclose potential side effects such as clearing the buffer if the 'clear' parameter is set, but the annotation destructiveHint=true already signals possible destructive behavior. The description does not contradict the annotation, and the parameter schema covers the clearing detail, so transparency is adequate without being explicit.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that conveys the core functionality without unnecessary detail. It is well-structured and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description mentions what is included (uncaught errors, unhandled rejections) giving some context. Since there is no output schema, it doesn't need to describe return values. However, it could have clarified the scope (e.g., browser console only) slightly more, but overall it is complete for typical use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with each parameter having a description. The description does not add further meaning beyond the schema; it only restates the tool's purpose. The baseline of 3 applies because the schema already fully documents parameters.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reads console messages captured since page load, including uncaught errors and unhandled rejections. It specifies the resource (console messages) and the action (read), and is distinct from sibling tools that read page content or DOM.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use (when needing console output) but does not explicitly mention alternatives or when not to use. It does not reference sibling tools like read_page or get_page_info, leaving the choice to the agent's inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
read_formARead-onlyIdempotent
Read a form as the user filled it — label, type, value, checked/selected, required-but-empty, browser validity — to check it against the project's documents before an irreversible Submit. Password and card values come back [redacted]. Read-only, on request.
| Name | Required | Description | Default |
|---|---|---|---|
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| selector | No | The form or container; omitted = every visible control on the page |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint annotation, the description explicitly states 'Read-only' and discloses that password and card values are redacted, which is valuable behavioral information not covered by annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is succinct and well-structured, conveying all necessary information in two sentences without redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description fully covers what the tool does, when to use it, and important constraints. Given the tool's simplicity and lack of output schema, it provides complete context for an agent to use it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides clear descriptions for both parameters (tab_id, selector). The tool description does not add extra meaning to these parameters, so it meets but does not exceed the baseline for parameter semantics.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: reading a form as filled by the user, listing specific attributes (label, type, value, etc.) and its intended use case (checking against project documents before submit). It distinguishes itself from generic read tools by focusing on forms.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It provides usage context ('before an irreversible Submit') and essential caveats (sensitive values redacted, read-only). While it doesn't explicitly name alternative tools, the guidance is sufficient for an agent to decide when to invoke it.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
read_pageARead-onlyIdempotent
Read the page as text (default), markdown, raw HTML, or accessibility tree. Read-only. markdown keeps headings, links and tables at a fraction of the HTML cost. Expensive on big pages: HTML on a large table costs tens of thousands of tokens for data you filter anyway — prefer extract_table/extract for repeated content, get_interactives for click targets.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | text strips markup; markdown keeps headings/links/tables far cheaper than html; accessibility = a11y tree | text |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| save_to | No | Absolute path: write the page there and return the path instead of the content | |
| frame_id | No | Target iframe id from get_frames; omitted = main frame | |
| max_length | No | Max output chars |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint annotation, the description discloses that the operation is read-only and that HTML mode can be token-expensive, adding useful behavioral context about resource usage.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured and front-loaded with the purpose, but includes some redundancy around HTML cost and repeated mentions of the same idea, so it is slightly less concise than ideal.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Provides sufficient context for selecting and using the tool, including cost implications and alternatives, though it does not cover potential output variations or errors beyond what the schema implies.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already provides 100% parameter description coverage with clear details for each param, so the tool description adds no extra parameter semantics; baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reads a page in multiple modes (text, markdown, HTML, accessibility tree) and distinguishes it from siblings by advising when to use extract_table or get_interactives instead.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit usage guidance: warns about high token costs on big pages and recommends alternative tools for repeated content or click targets, making the when-to-use decision clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
save_pageADestructiveIdempotent
Save the full page (DOM, styles, images) as an MHTML archive file on the server filesystem.
| Name | Required | Description | Default |
|---|---|---|---|
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| output_path | Yes | Absolute file path to write (e.g. /tmp/page.mhtml) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate destructiveHint=true and idempotentHint=true. The description adds that the tool writes an MHTML archive to the server filesystem, which elaborates on the destructive nature but does not detail side effects or required permissions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that conveys all essential information without redundancy or unnecessary details. It is efficiently front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity, the description adequately covers the operation. However, it omits potential edge cases, such as errors from invalid paths or overwrite behavior, which could be important for proper use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema coverage is 100%, so the schema already describes both parameters. The description adds no extra semantics beyond the schema, such as the meaning of 'last tab navigated' for tab_id. Therefore, it provides minimal added value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action (save), the resource (full page), and the output format (MHTML archive file). It distinguishes from sibling tools like screenshot (image capture) and read_page (content extraction) by specifying the archive format and filesystem destination.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives, such as when to prefer save_page over screenshot or get_page_info. No context about prerequisites or exclusions is given.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
screenshotARead-onlyIdempotent
Screenshot of the visible viewport only (PNG), at the current scroll position, or one per viewport preset with presets. Read-only. Activates the tab in the background without stealing window focus, then restores the previous tab. Downscaled to ≤1568px: for fine print, element_screenshot with scale.
| Name | Required | Description | Default |
|---|---|---|---|
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| presets | No | One capture per preset, window restored; save_to = directory, one file each | |
| save_to | No | Absolute path: write the PNG there and return the path instead of the content |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the read-only, idempotent, and non-destructive annotations, the description discloses a side effect (background tab activation and restoration) and a limitation (downscaling to ≤1568px). These details are not present in the annotations and materially affect how an agent should reason about the call.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, zero filler. The core purpose is front-loaded, followed by behavioral notes and an alternative. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the main behavior, presets, save_to implication, side effects, and the key downscaling limitation with a concrete alternative. It relies on the schema for tab_id and save_to details, which is acceptable given the schema coverage. Minor gap: it doesn't mention what happens when no tab_id is provided, but that is already in the schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already documents all three parameters with 100% coverage. The description adds minimal new parameter-level meaning, only echoing the preset behavior. Given the high schema coverage, a baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool captures a PNG of the visible viewport only, at the current scroll position or per preset. It explicitly contrasts with element_screenshot and full_page_screenshot, making its scope unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It specifies when to use an alternative (for fine print, use element_screenshot with scale) and implies not for full-page captures by saying 'visible viewport only'. However, it does not enumerate all sibling alternatives or explicitly state when to prefer full_page_screenshot.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
screenshot_diffAIdempotent
Visual regression: save a named baseline (viewport, element, or a PNG such as the design mockup) and compare later — changed-pixel % and a red-highlighted diff; or compare_urls: production vs staging in this tab, pixels plus text diff, logged-in pages included. Baselines are in-memory (lost on service worker restart).
| Name | Required | Description | Default |
|---|---|---|---|
| mask | No | compare_urls: selectors hidden on both pages (dates, carousels, ads) | |
| name | No | Baseline id: reuse the same one to compare across runs | default |
| url_a | No | compare_urls: reference page, e.g. production | |
| url_b | No | compare_urls: page under test, e.g. staging or a PR preview | |
| action | Yes | baseline stores, compare measures against it, compare_urls diffs url_a vs url_b here, clear drops baselines | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| selector | No | Capture one element (default viewport) | |
| from_file | No | action=baseline: take it from this PNG (design mockup) instead of capturing | |
| threshold | No | Per-channel tolerance 0-255 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description explicitly notes that baselines are in-memory and lost on service worker restart, which is important stateful behavior. It also mentions that 'clear drops baselines' in the action parameter. It does not fully detail navigation side effects for compare_urls, but the provided context exceeds the annotations alone.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but efficient, packing the core workflow into two sentences. The em-dash list and semicolon structure keep related ideas together, though there is slight redundancy between 'changed-pixel %' and 'pixels plus text diff'.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity of multiple actions and parameters, the description covers the essential workflow, output characteristics (changed-pixel percentage and diff highlight), and the in-memory limitation. It does not specify the exact return format, but the parameter-level descriptions and action enum cover most operational details.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
All 9 parameters have descriptions in the schema, and the main description adds meaningful context such as using from_file for design mockups and threshold as per-channel tolerance. The descriptions clarify the distinction between compare and compare_urls, so an agent can infer parameter usage without external documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with 'Visual regression:' and clearly defines the tool's purpose: saving named baselines and comparing later, with support for viewport, element, or PNG baselines. It also distinguishes compare_urls for production-vs-staging diffs, making the intended use obvious.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains when to use the tool for visual regression and specifically calls out compare_urls for production-vs-staging comparisons. It does not explicitly contrast it with sibling screenshot tools, but the regression-focused wording is enough to imply the alternative use cases.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
scrollA
Scroll. action=to: once to element/coordinates; action=until: repeatedly until element visible, network idle, or no new content (infinite scroll).
| Name | Required | Description | Default |
|---|---|---|---|
| x | No | Absolute horizontal position in px (action=to, without selector) | |
| y | No | Absolute vertical position in px (action=to, without selector) | |
| until | No | no_new_content stops when the page height stops growing | no_new_content |
| action | No | to jumps to a position or element; until scrolls repeatedly to load more | to |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| step_px | No | px per step, default viewport height | |
| behavior | No | instant avoids waiting for smooth-scroll animations | auto |
| frame_id | No | Target iframe id from get_frames; omitted = main frame | |
| offset_y | No | px offset for fixed headers (to) | |
| selector | No | Target (to) or stop element (until=element) | |
| settle_ms | No | Pause ms after each step | |
| max_scrolls | No | Cap on scroll steps, so an infinite feed terminates |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds behavioral context beyond annotations by differentiating the two scroll modes and mentioning conditions like 'network idle' and 'infinite scroll.' However, it does not disclose potential side effects such as triggering lazy loading or the impact of parameters like settle_ms and step_px. Annotations are minimal, so the description carries some burden but is not fully transparent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise with two sentences, front-loading the key information about the two actions. The redundant 'Scroll.' at the start is minor. It is well-structured for quick reading, though it could be slightly more informative without sacrificing conciseness.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (12 parameters, no output schema), the description provides a minimal overview of the two main modes but lacks details on how to use parameters like 'selector', 'offset_y', 'step_px', etc. It is enough for basic understanding but incomplete for advanced usage. The schema descriptions help, but the tool description could be more comprehensive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so parameters are already documented. The description provides a high-level overview of the 'action' and 'until' parameters, but does not add significant meaning to other parameters like 'x', 'y', 'selector', or 'offset_y'. It clarifies the purpose of the two modes, which is useful, but overall adds limited value beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool scrolls the page and defines the two distinct actions ('to' and 'until') with specific behaviors. However, it could be more explicit about the overall function (e.g., 'Scroll the current page') rather than just 'Scroll.' Distinguishes between modes but not from sibling tools, which are mostly unrelated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains when to use each action: 'to' for one-time scroll to element/coordinates, 'until' for repeated scrolling until a condition. This provides clear context but does not include explicit when-not or alternatives, though none are obviously needed for a scroll tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
session_fixtureADestructiveIdempotent
Snapshot localStorage, sessionStorage and cookies of the current origin into a named fixture (a logged-in state, usually), restore one, or list them. save overwrites silently; restore writes on top without clearing and refuses on a different origin — cookies would attach to the wrong site.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Required for save/restore | |
| action | Yes | save snapshots the current origin; restore writes it back | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description is highly transparent about side effects: 'save overwrites silently' and 'restore writes on top without clearing' explicitly warn about destructive behavior, and the origin restriction is explained. This aligns with the destructiveHint annotation and adds specific detail beyond it.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, using two well-structured sentences. It packs all necessary information without redundancy or filler, making it easy to parse quickly.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers core functionality and safety caveats, but does not mention any return values or error cases beyond the origin refusal. Since there is no output schema, the agent might not know what 'list' returns. Still, for a simple tool, the given context is mostly sufficient.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The parameter descriptions add meaningful context: 'name' is explained as required for save/restore (though optional in schema), 'action' describes save and restore semantics, and 'tab_id' is clear. However, the 'list' action is not explicitly described, and the conditional requirement for 'name' could be clearer. Since schema coverage is 100%, this is above baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's three actions (snapshot, restore, list) and specifies it targets localStorage, sessionStorage, and cookies for the current origin into a named fixture. However, it doesn't explicitly differentiate itself from similar sibling tools like get_storage or set_storage, which might cause some ambiguity.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It provides useful behavioral context (e.g., 'restore refuses on a different origin') but does not explicitly state when to use this tool over alternatives like session_record or get_storage/set_storage. The condition 'logged-in state' gives some guidance, but a clearer comparison to siblings would improve the score.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
session_recordA
Record the commands of this session as a replayable jsonl (chrome-bridge replay --file ); observe what the user does in a tab ("watch how I do it") into the same format plus a readable procedure, never recording sensitive values; export a recording as a Playwright test for CI. Replays target the tab they navigate.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Required for start, observe and export (recording name, or a .jsonl path) | |
| action | Yes | start records this session; observe records what the USER does; stop writes the file; export makes a Playwright test | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| values | No | observe: record values of non-sensitive fields instead of {{field}} placeholders | |
| save_to | No | Absolute path: write the exported .spec.ts there and return the path instead of the content |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses key behaviors: it records to a jsonl format, never records sensitive values, and replays target the tab navigated. These are valuable behavioral details beyond the annotations, which are all false. However, it doesn't mention side effects like file creation (beyond the replay command), whether stop is required, or how the export writes files. Given the false annotations, the description carries the burden and does a solid job, though not exhaustive.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single run-on sentence with semicolons, but it's dense with information and front-loads the core purpose. It avoids redundant wording and each clause adds distinct value. While not perfectly structured, it is efficient and does not waste words, earning a 4.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with five parameters and six actions, the description covers the high-level workflow well: recording, observing, exporting, and the replay target. The schema details the actions, so the description doesn't need to repeat them. It misses some nuance like what 'list' or 'status' do, but those are covered by the schema. The lack of an output schema is partially mitigated by the description's mention of 'return the path' in the save_to parameter, so overall it's fairly complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already describes all parameters with 100% coverage, including the action enum and their purposes. The description adds minimal parameter-specific meaning—it mentions the replay file path and observe mode, but these are already implied in the schema. Since the schema is comprehensive, a baseline of 3 is appropriate; the description doesn't significantly enhance parameter understanding.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool as a session recorder with three distinct capabilities: recording commands, observing user actions, and exporting to Playwright tests. It uses specific verbs and resources, and the three modes are explicitly differentiated, which distinguishes it from generic tools. Though it doesn't name a sibling, the description makes the tool's unique purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides contextual hints like 'for CI' and the replay command, but it doesn't explicitly state when to use this tool over alternatives or when to avoid it. There's no mention of prerequisites (e.g., needing an active session) or exclusions. The guidance is implicit rather than explicit, leaving some inference to the agent.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
set_geolocationAIdempotent
Override navigator.geolocation with fixed coordinates (page-level patch). reset restores native.
| Name | Required | Description | Default |
|---|---|---|---|
| reset | No | Restore the real position and stop overriding | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| accuracy | No | Meters | |
| latitude | No | Decimal degrees, -90 to 90 | |
| longitude | No | Decimal degrees, -180 to 180 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations indicate idempotentHint=true and readOnlyHint=false, which the description does not contradict. The description adds that it is a page-level patch and that reset restores native behavior, but does not elaborate on persistence or scope beyond the page.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise (two sentences) and front-loaded with the main action. It is efficient but could be slightly more structured with separation of setting and resetting.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With 5 parameters and no output schema, the description is adequate but does not explain the interaction between reset and coordinates, or the temporary/durable nature of the override. It lacks guidance for typical testing scenarios.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all parameters. The description adds minimal extra meaning beyond the schema (e.g., 'reset restores native' is implicit in the reset parameter description).
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action: override navigator.geolocation with fixed coordinates. It also mentions the reset capability. This distinguishes it from sibling tools, as no other tool handles geolocation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage (setting coordinates for testing), but does not explicitly state when to use this tool versus alternatives, nor does it provide exclusion criteria or prerequisites.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
set_storageADestructiveIdempotent
Write, delete or clear a localStorage/sessionStorage key, or a cookie with its path, domain and expiry. action=clear wipes every entry of that type for the origin and cannot be undone — on a site the user is logged into, clearing cookies logs them out. Read the current values first with get_storage.
| Name | Required | Description | Default |
|---|---|---|---|
| key | No | Required for set/delete | |
| path | No | Cookie path (default /) | |
| type | Yes | cookie writes a real cookie, not a storage key | |
| value | No | Required for action=set | |
| action | Yes | clear ignores key and wipes every entry of that type | |
| domain | No | Cookie domain | |
| secure | No | Cookie sent over HTTPS only | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| expires | No | UTC date string (cookie) | |
| sameSite | No | None requires secure=true | |
| http_only | No | Cookie hidden from page JS |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond annotations (destructiveHint=true, idempotentHint=true), the description adds that clearing cookies logs the user out and cannot be undone, giving critical behavioral context for agent decision-making.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences with front-loaded core functionality and a critical warning. No wasted words; every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given 11 parameters with full schema coverage and no output schema, the description covers the main behavior, destructive consequences, and prerequisite (read first). Could mention error conditions or parameter interactions, but sufficient for selection.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema coverage, baseline is 3. The description adds meaning by explaining action=clear wipes all entries of that type and that reading first is advisable, which goes beyond schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool writes, deletes, or clears localStorage, sessionStorage, or cookies. It specifies the action, storage type, and parameters like path, domain, and expiry, making it distinct from siblings like get_storage.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description advises reading current values first with get_storage, providing clear context for safe usage. It does not explicitly list when not to use, but the destructive hint and warning about logout imply caution.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tab_actionADestructive
Tab lifecycle: close, activate, reload, back, forward, discard, mute, duplicate, close_session (only tabs this session created). close drops unsaved work and cannot be undone — it may be the user's tab. reload drops injected CSS, emulations and hooks. duplicate works where create_tab is forbidden (chrome-untrusted://) and lands in the source window, app windows included. discard replaces the tab id.
| Name | Required | Description | Default |
|---|---|---|---|
| action | Yes | close cannot be undone; discard frees memory (reloads on focus); reload drops injected CSS and hooks | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| bypass_cache | No | reload only |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses significant side effects beyond the annotations, such as close dropping unsaved work, reload dropping injections, and discard replacing the tab id. This goes well beyond the destructiveHint and idempotentHint flags, giving the agent clear expectations of consequences.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact and information-dense, listing actions and consequences in a single readable paragraph. Every sentence contributes to understanding the tool's behavior and constraints, with no redundant or extraneous content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers the main actions, side effects, and parameter semantics. It does not mention return values or error cases, but given the absence of an output schema and the operational nature of the tool, the context is adequately complete for most usage scenarios.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already provides descriptions for all parameters, including the enum meanings and the omission rule for tab_id. The tool description adds little extra semantic value beyond what is in the schema, so it meets the baseline for parameter coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool as performing tab lifecycle actions, listing all supported operations explicitly. It distinguishes from similar tools by noting that duplicate works where create_tab is forbidden, helping disambiguate from sibling tools like create_tab or move_tab.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives specific guidance on when to use certain actions, such as duplicate being available in restricted contexts and close_session applying only to tabs created in this session. It does not explicitly compare all actions to sibling tools, but the provided constraints are useful for agent decision-making.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
tile_windowsAIdempotent
Tile Chrome windows over one monitor in equal parts with no gap. Only Chrome windows. The monitor is the one of a window already on it, whose work area is read from a page there: at least one target needs a scriptable tab (not chrome://). Maximized windows are restored first, since maximized ignores bounds.
| Name | Required | Description | Default |
|---|---|---|---|
| area | No | Monitor area to fill, when no target window has a scriptable tab to read it from | |
| layout | No | columns splits left to right, rows top to bottom, grid keeps tiles as square as it can | grid |
| padding | No | Px of empty margin kept inside the work area | |
| window_ids | No | Windows to tile; omitted = every normal window on the reference monitor | |
| include_types | No | Window types to include; omitted = normal only | |
| reference_window_id | No | Window whose monitor is used; omitted = the focused one |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses important behavioral nuances beyond the annotations, such as 'Maximized windows are restored first, since maximized ignores bounds' and the prerequisite that at least one target must have a scriptable tab. These details inform the agent about side effects and conditions, complementing the annotations (readOnlyHint false, idempotentHint true) without contradicting them.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, using two sentences to convey purpose, scope, and behavioral details. It is front-loaded with the core action ('Tile Chrome windows over one monitor in equal parts with no gap') and then efficiently covers constraints and edge cases. Every sentence adds value without redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (6 parameters, nested object, enums) and the rich schema descriptions, the description is largely complete. It covers the main purpose, scope, prerequisites, and a key behavioral quirk. It does not mention return values or error handling, but those are not expected from the schema's lack of an output schema. The description fills the context gap well for an agent to decide and invoke the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides descriptions for all six parameters, and these descriptions are specific and informative (e.g., layout 'columns splits left to right', padding 'Px of empty margin kept inside the work area'). The tool description adds little beyond what the schema says; it reinforces the overall behavior but does not materially enhance parameter understanding. With 100% schema coverage, a baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: 'Tile Chrome windows over one monitor in equal parts with no gap.' It specifies the resource (Chrome windows), the action (tile), and the scope (one monitor, equal parts, no gap). The additional clarification 'Only Chrome windows' further narrows the scope, leaving no ambiguity about what the tool does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides implicit constraints (e.g., 'at least one target needs a scriptable tab') but does not explicitly state when to use this tool over alternatives. There is no comparison with sibling tools like 'window_layout' or 'move_tab', and no conditions like 'use this when...'. It lacks direct usage guidance for an agent choosing among similar window management tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
track_eventsARead-onlyIdempotent
Decode the tracking beacons the page fired (GA4, Meta Pixel, Google Ads, TikTok, LinkedIn, Pinterest, Microsoft Ads, GTM, Hotjar, Clarity) from the browser network log: one line per event with its key params. Read-only; POST-body params are flagged, not decoded.
| Name | Required | Description | Default |
|---|---|---|---|
| clear | No | Clear the browser log first — call it right before the action you want to observe | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| wait_ms | No | Time to wait before reading, for beacons sent after the action |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description explicitly states 'Read-only' and 'POST-body params are flagged, not decoded', which adds behavioral detail beyond the annotations. It also indicates output format (one line per event). No contradiction with annotations (readOnlyHint=true, etc.) and the additional limitation on POST-body is valuable.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise, two sentences, front-loaded with the main purpose and the tracker list, and includes the read-only note and POST-body limitation. Every sentence adds value with no waste.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a specialized decoding tool, the description explains what it does, which sources it covers, output format (one line per event), and read-only nature. It lacks a detailed output schema description, but the given summary is sufficient for an agent to understand the expected result. Given the tool's complexity, this is nearly complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema fully documents all three parameters (clear, tab_id, wait_ms). The tool description does not add any parameter-specific semantics beyond what the schema provides, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: decoding tracking beacons (GA4, Meta Pixel, etc.) from the browser network log, with output as one line per event. It is specific about the resource and lists the major tracker types, and it distinguishes itself from generic network tools like monitor_network.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives clear context: it is for tracking beacons specifically, not all network traffic. However, it does not explicitly mention when not to use it or name alternatives, so it lacks explicit exclusions but provides enough context for an agent to infer appropriate use.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
type_textAIdempotent
Put text into an input, textarea or contenteditable, by selector or ref. Replaces the whole value through the native setter (React/Vue controlled inputs register it) and fires input and change. mode=keys emits keydown/input/keyup per character for autocomplete and masked fields: slower, use it only when mode=set leaves the field empty.
| Name | Required | Description | Default |
|---|---|---|---|
| ref | No | From get_interactives, e.g. "n3" | |
| mode | No | set = assign value; keys = per-char events (autocomplete/masked) | set |
| text | Yes | Value to type; empty string clears the field | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| frame_id | No | Target iframe id from get_frames; omitted = main frame | |
| selector | No | CSS selector; ">>>" pierces shadow DOM. Ignored when ref is given | |
| wait_after | No | Settle before returning: navigation waits for a page load, networkidle for quiet traffic | none |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses key behavioral details beyond the annotations: it replaces the whole value, fires input and change events, and for 'keys' mode emits per-character events. It also notes that selector is ignored when ref is given, and explains the wait_after options. This gives an agent a thorough understanding of side effects and execution behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the primary action, and includes no redundant wording. It efficiently covers the core functionality, mode selection, and settle behavior without unnecessary elaboration.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (7 parameters, enums, and multiple modes) and the absence of an output schema, the description provides sufficient high-level context. It explains the event firing, mode differences, and wait_after semantics, but does not delve into error handling or edge cases; however, the schema covers parameter details adequately, so the overall context is complete for an agent to use the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema already provides high coverage (100%) with descriptions for every parameter, so the baseline is 3. The tool description adds meaningful context by explaining the overall behavior (e.g., React/Vue controlled inputs) and clarifying the relationship between mode and ref/selector, which enhances understanding beyond the schema's individual parameter descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's function: 'Put text into an input, textarea or contenteditable, by selector or ref.' It specifies the target element types and the mechanism (native setter, firing events), making the purpose unambiguous and distinct from sibling tools like click or fill_form.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance on when to use each mode ('set' vs 'keys') and even notes that 'keys' is slower and should only be used when 'set' leaves the field empty. However, it does not explicitly contrast type_text with sibling tools like fill_form, so cross-tool selection guidance is implicit rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
upload_fileA
Set a file on input[type=file] from the server filesystem via DataTransfer (max 10MB).
| Name | Required | Description | Default |
|---|---|---|---|
| path | Yes | Absolute path on the server machine | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| selector | Yes | The file input to fill; ">>>" pierces shadow DOM | |
| mime_type | No | Default: inferred from extension |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations are mostly false, so description carries burden. It discloses the DataTransfer mechanism and a 10MB limit, but omits behavior on size exceedance, path errors, or whether it clears existing files. Adequate but not rich.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One concise sentence with no wasted words. Front-loaded with the action and key details.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With no output schema and 4 params fully described in schema, the description adds the 10MB limit and mechanism. Missing error behavior or return value, but complete enough for a straightforward file upload tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers 100% of parameters with descriptions. The description adds only the 10MB limit, which is not per-parameter. Baseline 3 achieved; no additional meaning beyond schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool uploads a file from the server filesystem to an input[type=file] via DataTransfer, with a 10MB limit. This is specific and distinct from sibling tools like fill_form or type_text.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage for file inputs but does not explicitly state when to use vs alternatives or any exclusions. No 'when not to use' or alternatives mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
viewport_resizeAIdempotent
Resize the Chrome window to a preset (mobile 375x812, tablet 768x1024, desktop 1440x900) or explicit dimensions; the viewport is smaller by the browser chrome, action=get reports the real one. width/height override half a preset. A maximized window on ChromeOS ignores the request.
| Name | Required | Description | Default |
|---|---|---|---|
| top | No | Window y on the virtual desktop | |
| left | No | Window x on the virtual desktop; on multi-monitor this is what picks the screen | |
| zoom | No | Page zoom for this origin, 1 = 100%; applied after the resize | |
| state | No | Applied before bounds: a maximized window accepts left/top/width/height and ignores them | |
| width | No | Overrides preset | |
| action | No | get reports the current viewport without resizing anything | set |
| height | No | Overrides preset | |
| preset | No | 375x812, 768x1024, 1440x900 | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the annotations (readOnlyHint=false, destructiveHint=false, idempotentHint=true), the description clarifies that the viewport is smaller by browser chrome, that action=get reports the real viewport without resizing, and that a maximized window on ChromeOS ignores the request. These are useful behavioral details not covered by annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a tight three-sentence paragraph with no fluff. The main purpose is front-loaded, and every sentence adds relevant detail (presets, override behavior, viewport vs window, ChromeOS caveat).
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with 9 parameters and no output schema, the description covers the core behaviors: resizing, presets, explicit dimensions, the get action, and the ChromeOS caveat. Parameters like top/left/tab_id are fully documented in the schema, so the description does not need to repeat them. The description is sufficient for an agent to invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
With 100% schema coverage, the baseline is 3, but the description adds semantics: width/height override a preset, and action=get reports without resizing. These enrich understanding beyond the schema definitions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb (resize) and resource (Chrome window), defines preset dimensions, and distinguishes the viewport from the window. It implicitly differentiates from sibling layout tools like window_layout by focusing on viewport sizing, so an agent can tell it apart.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives usage conditions such as the maximized-window-on-ChromeOS caveat and the action=get behavior, but it does not explicitly compare to alternatives like window_layout or tile_windows. An agent must infer when to prefer this tool over those siblings.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
wait_forARead-onlyIdempotent
Block until a condition holds: element, text, function (JS expression; needs the "Allow user scripts" toggle), navigation (mode=spa for client-side routes), network_idle. Polls until timeout (10s element/function, 15s the rest) then returns found: false with a reason instead of raising: check it, or a failed wait reads as success. Read-only.
| Name | Required | Description | Default |
|---|---|---|---|
| mode | No | spa = pushState/popstate/hashchange | load |
| text | No | Literal text to wait for (condition=text), matched case-insensitively | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| idle_ms | No | Quiet period ms (network_idle) | |
| timeout | No | Max ms (default 10000; 15000 navigation/network_idle) | |
| visible | No | Element must also be visible | |
| frame_id | No | Target iframe id from get_frames; omitted = main frame | |
| interval | No | Poll ms, min 50 | |
| selector | No | condition=element; with condition=text it narrows the search to that subtree | |
| condition | Yes | element and text need selector or text; function needs expression | |
| expression | No | JS expression (condition=function) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnly/idempotent annotations, the description discloses key behavioral details: it blocks execution, returns 'found: false' with a reason instead of raising an error on timeout, and mentions the 'Allow user scripts' toggle dependency for function conditions. This provides practical information about how the tool behaves in edge cases.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured paragraph that efficiently lists the condition types, relevant parameters, timeouts, and return behavior without extraneous detail. It is easy to parse and directly addresses the core functionality.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (11 parameters, 5 condition types, enums), the description provides a solid high-level overview but does not explicitly cover every combination or edge case (e.g., interaction between selector and condition=navigation). However, the schema fills these gaps, so the description is sufficiently complete for most usage scenarios.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema already provides comprehensive descriptions for all 11 parameters (100% coverage). The description text adds extra value by clarifying the relationship between selector and text (narrowing search) and by noting the toggle requirement, though these are minor increments over the schema's own explanations.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly specifies that the tool blocks until a condition holds and enumerates the supported condition types (element, text, function, navigation, network_idle). It distinguishes itself from sibling tools like read_page or get_page_info by focusing exclusively on waiting for state changes, making its purpose unambiguous.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides implicit usage guidance by explaining each condition type and the associated requirements (e.g., needing the 'Allow user scripts' toggle for function). It does not explicitly compare against alternatives, but the context is sufficient for an agent to decide when to invoke this tool for waiting on asynchronous conditions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
watchAIdempotent
Keep watching a page in the background — "tell me when the pipeline is green / the Approve button appears / this number changes" — checked every interval_s by the extension. Events are collected, not pushed: action=poll, or a script blocking on "chrome-bridge watch --wait ". Survives extension idling, not a browser restart.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Watch id | |
| text | No | Text that appears / disappears | |
| since | No | poll: events after this ms timestamp | |
| until | No | Default: change with value_of, else match | |
| action | No | poll = events since a timestamp | add |
| reload | No | Reload before each check, for pages that do not update live | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| selector | No | Element that appears (until=match) or disappears (until=gone) | |
| value_of | No | Element whose text changing fires (until=change) | |
| interval_s | No | Between checks, min 30 | |
| expires_min | No | Give up after |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare idempotentHint=true and non-destructive, so the description doesn't repeat those. It adds valuable context beyond annotations: 'Survives extension idling, not a browser restart' clarifies persistence scope, and 'Events are collected, not pushed' explains the event delivery model. These details help an agent understand lifecycle and consumption without contradicting the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is compact, front-loaded with the core purpose, and includes illustrative examples. It packs multiple behavioral notes (polling, event collection, persistence) into three sentences without redundancy. Slightly dense but efficient; no wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For an 11-parameter tool with no output schema, the description explains the watch mechanism and lifecycle but does not describe what the tool returns (e.g., event structure or format). Since parameters are fully documented in the schema, the main gap is the output contract. An agent might need additional clues to interpret the result, especially for the poll action.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so each parameter is individually documented. The tool description does not add additional meaning to the parameters beyond what the schema provides; it only references interval_s in context. This meets the baseline for fully covered schemas, but does not elevate it.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose: to keep watching a page in the background for conditions like text appearing, disappearing, or changing. It provides concrete examples (pipeline green, Approve button appears) and explicitly distinguishes the polling mechanism ('events are collected, not pushed'). This differentiates it from siblings like watch_dom or wait_for by emphasizing the background, interval-based monitoring.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives usage context (polling with action=poll, blocking script with --wait) but does not explicitly state when to choose this tool over alternatives like watch_dom or wait_for. It implies usage for long-running background checks but lacks exclusions or alternative routing, leaving the decision partially to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
watch_domARead-onlyIdempotent
Watch DOM mutations (MutationObserver). First call installs the watcher; later calls read accumulated mutations.
| Name | Required | Description | Default |
|---|---|---|---|
| stop | No | Disconnect observer | |
| clear | No | Clear buffer after read | |
| limit | No | Most recent mutations; buffer 1000 | |
| tab_id | No | Target tab; omitted = last tab navigated in this session, else the active one | |
| subtree | No | Observe descendants too, not just the matched node | |
| selector | No | Subtree to observe; ">>>" pierces shadow DOM | body |
| childList | No | Report added and removed children | |
| attributes | No | Report attribute changes | |
| characterData | No | Report text content changes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds stateful behavior (install watcher on first call) which contradicts the 'idempotentHint: true' annotation. While it discloses more about usage pattern than annotations alone, the contradiction reduces reliability. Missing details on side effects like buffer limits or callback behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise with two sentences covering the core functionality and phase behavior. No redundant words; essential information is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
While parameter details are fully covered by the schema, the description lacks information about return format, how mutations are structured, and the lifecycle of the watcher. For a tool with 9 parameters, more behavioral context (e.g., how to stop/clear) would improve completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the description adds no additional meaning beyond the schema. Each parameter's purpose is already clear from the schema, so no extra value from the tool description.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool watches DOM mutations via MutationObserver and explains the two-phase behavior (install then read). It distinguishes itself from siblings like 'query_dom' or 'modify_dom' by specifying the observation pattern.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies the tool is for tracking DOM changes over time but does not explicitly state when to use it versus alternatives like 'get_interactives' or 'execute_js'. No exclusions or prerequisite conditions are provided.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
window_layoutADestructiveIdempotent
Save the current window arrangement under a name, restore, list or delete. save overwrites silently. Window ids do not survive a browser restart: restore matches windows by the overlap of their tab URLs and reports the ones it cannot recognise instead of guessing.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Layout name, required except for list | |
| action | Yes | save snapshots every window; restore repositions the recognised ones |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses key side effects and behaviors: save overwrites silently, and restore matches by tab URL overlap while reporting unrecognized windows. This goes beyond the annotations and gives the agent concrete expectations for action outcomes.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences, front-loading the primary purpose and then adding essential behavioral details. There is no redundancy or extraneous information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's moderate complexity and absence of an output schema, the description covers the core functionality, key side effects, and the matching strategy for restore. It provides enough context for an agent to use the tool correctly without further documentation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema description covers 100% of parameters (action and name), so the baseline is 3. The tool description does not add further semantic details beyond what the schema already provides, so it remains at baseline.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's purpose with specific verbs (save, restore, list, delete) and the resource (window arrangement under a name). It distinguishes itself from related window tools by focusing on named layouts rather than individual window actions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides important behavioral notes (silent overwrite, URL-based matching) but does not explicitly state when to use this tool versus alternatives like tile_windows or move_tab. It implies usage through its functionality but lacks direct comparison.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
31 tool updates
v1.16.1- Removed
accessibility_audit - Added
audit - Removed
check_links - Added
cookie_audit - Changed
element_screenshot3 fields changed- added
Input schema / properties / regionAdded value: +{ + "description": "Box in viewport CSS px (the rect frame of get_interactives/query_dom), instead of selector", + "properties": { + "height": { + "type": "number" + }, + "width": { + "type": "number" + }, + "x": { + "type": "number" + }, + "y": { + "type": "number" + } + }, + "required": [ + "x", + "y", + "width", + "height" + ], + "type": "object" +} - added
Input schema / properties / scaleAdded value: +{ + "default": 1, + "description": "Enlargement of the crop, 1-4; output still capped at 1568px", + "maximum": 4, + "minimum": 1, + "type": "number" +} - removed
Input schema / requiredRemoved value: -[ - "selector" -]
- Added
find_setting - Changed
full_page_screenshot1 field changed- changed
Input schema / properties / max_segments / descriptionPrevious value: -"Images returned, from the top (each ≈2.7k image tokens); raise or use segment_offset for the rest"New value: +"Images returned from the top (≈2.7k image tokens each); segment_offset for the rest"
- Removed
get_performance - Added
handoff - Removed
highlight_elements - Removed
list_event_listeners - Changed
manage_downloads1 field changed- changed
Input schema / properties / action / descriptionPrevious value: -"download fetches with the browser cookie jar and reports the real state; wait_for_complete blocks until the newest finishes"New value: +"download fetches with the browser cookies and reports the real state; wait_for_complete blocks until the newest finishes"
- Changed
monitor_network2 fields changed- changed
Input schema / properties / source / descriptionPrevious value: -"page sees XHR/fetch only; browser also sees static assets"New value: +"page: XHR/fetch only; browser: static assets too; websocket: connections and messages" - changed
Input schema / properties / source / enumPrevious value: -[ - "page", - "browser" -]New value: +[ + "page", + "browser", + "websocket" +]
- Removed
monitor_websocket - Changed
move_tab2 fields changed- changed
Input schema / properties / new_window / descriptionPrevious value: -"Extract the tab into a fresh window instead — tabs.move needs an existing window, this does not"New value: +"Extract the tab into a fresh window instead of an existing one" - changed
Input schema / properties / window_type / descriptionPrevious value: -"new_window only: popup has no tab strip and no omnibox — the terminal-window look for detached chrome-untrusted://terminal tabs"New value: +"new_window only: popup has no tab strip nor omnibox, the terminal-window look"
- Changed
network_rules4 fields changed- changed
Input schema / properties / action / descriptionPrevious value: -"list and clear inspect and drop the rules already installed"New value: +"record saves the page's API responses (url_filter) as a fixture, replay serves them with overrides; list/clear" - changed
Input schema / properties / action / enumPrevious value: -[ - "block", - "redirect", - "modify_header", - "stub", - "list", - "clear" -]New value: +[ + "block", + "redirect", + "modify_header", + "stub", + "record", + "replay", + "list", + "clear" +] - added
Input schema / properties / nameAdded value: +{ + "description": "Fixture name for record/replay", + "type": "string" +} - added
Input schema / properties / overridesAdded value: +{ + "description": "replay: force a status, body or delay on matching URLs — error states a real backend will not produce", + "items": { + "properties": { + "body": { + "type": "string" + }, + "latency_ms": { + "type": "number" + }, + "status": { + "type": "number" + }, + "url_contains": { + "type": "string" + } + }, + "required": [ + "url_contains" + ], + "type": "object" + }, + "type": "array" +}
- Changed
read_console1 field changed- added
Input schema / properties / sourcemapAdded value: +{ + "default": false, + "description": "Resolve bundle.js:line:col frames to source files through their source maps", + "type": "boolean" +}
- Added
read_form - Changed
read_page1 field changed- changed
Input schema / properties / mode / descriptionPrevious value: -"text strips markup, markdown keeps headings/links/tables far cheaper than html, accessibility returns the a11y tree"New value: +"text strips markup; markdown keeps headings/links/tables far cheaper than html; accessibility = a11y tree"
- Changed
screenshot1 field changed- added
Input schema / properties / presetsAdded value: +{ + "description": "One capture per preset, window restored; save_to = directory, one file each", + "items": { + "enum": [ + "mobile", + "tablet", + "desktop" + ], + "type": "string" + }, + "type": "array" +}
- Changed
screenshot_diff6 fields changed- changed
Input schema / properties / action / descriptionPrevious value: -"baseline stores, compare measures against it, clear drops baselines"New value: +"baseline stores, compare measures against it, compare_urls diffs url_a vs url_b here, clear drops baselines" - changed
Input schema / properties / action / enumPrevious value: -[ - "baseline", - "compare", - "list", - "clear" -]New value: +[ + "baseline", + "compare", + "compare_urls", + "list", + "clear" +] - added
Input schema / properties / from_fileAdded value: +{ + "description": "action=baseline: take it from this PNG (design mockup) instead of capturing", + "type": "string" +} - added
Input schema / properties / maskAdded value: +{ + "description": "compare_urls: selectors hidden on both pages (dates, carousels, ads)", + "items": { + "type": "string" + }, + "type": "array" +} - added
Input schema / properties / url_aAdded value: +{ + "description": "compare_urls: reference page, e.g. production", + "type": "string" +} - added
Input schema / properties / url_bAdded value: +{ + "description": "compare_urls: page under test, e.g. staging or a PR preview", + "type": "string" +}
- Removed
security_headers - Removed
seo_audit - Changed
session_record6 fields changed- changed
Input schema / properties / action / descriptionPrevious value: -"start begins recording, stop writes the file and returns its path"New value: +"start records this session; observe records what the USER does; stop writes the file; export makes a Playwright test" - changed
Input schema / properties / action / enumPrevious value: -[ - "start", - "stop", - "status", - "list" -]New value: +[ + "start", + "stop", + "status", + "list", + "export", + "observe" +] - changed
Input schema / properties / name / descriptionPrevious value: -"Required for start"New value: +"Required for start, observe and export (recording name, or a .jsonl path)" - added
Input schema / properties / save_toAdded value: +{ + "description": "Absolute path: write the exported .spec.ts there and return the path instead of the content", + "type": "string" +} - added
Input schema / properties / tab_idAdded value: +{ + "description": "Target tab; omitted = last tab navigated in this session, else the active one", + "type": "number" +} - added
Input schema / properties / valuesAdded value: +{ + "default": false, + "description": "observe: record values of non-sensitive fields instead of {{field}} placeholders", + "type": "boolean" +}
- Removed
set_zoom - Changed
tab_action2 fields changed- changed
Input schema / properties / action / descriptionPrevious value: -"close cannot be undone; discard frees memory, the tab reloads on focus; reload drops injected CSS and hooks"New value: +"close cannot be undone; discard frees memory (reloads on focus); reload drops injected CSS and hooks" - changed
Input schema / properties / action / enumPrevious value: -[ - "close", - "activate", - "reload", - "back", - "forward", - "discard", - "mute", - "unmute", - "duplicate" -]New value: +[ + "close", + "activate", + "reload", + "back", + "forward", + "discard", + "mute", + "unmute", + "duplicate", + "close_session" +]
- Added
track_events - Removed
unused_css - Changed
viewport_resize1 field changed- added
Input schema / properties / zoomAdded value: +{ + "description": "Page zoom for this origin, 1 = 100%; applied after the resize", + "type": "number" +}
- Added
watch - Removed
web_vitals
8 tool updates
v1.15.0- Changed
create_tab5 fields changed- added
Input schema / properties / heightAdded value: +{ + "description": "Window height px (new_window)", + "type": "number" +} - added
Input schema / properties / leftAdded value: +{ + "description": "Window x on the virtual desktop (new_window)", + "type": "number" +} - added
Input schema / properties / new_windowAdded value: +{ + "default": false, + "description": "Open in a fresh window instead of a tab; with left/top it lands on the chosen monitor", + "type": "boolean" +} - added
Input schema / properties / topAdded value: +{ + "description": "Window y (new_window)", + "type": "number" +} - added
Input schema / properties / widthAdded value: +{ + "description": "Window width px (new_window)", + "type": "number" +}
- Changed
get_tabs1 field changed- added
Input schema / properties / include_windowsAdded value: +{ + "default": false, + "description": "Also return the windows with bounds, state, type and tab count", + "type": "boolean" +}
- Changed
manage_downloads4 fields changed- changed
Input schema / properties / action / descriptionPrevious value: -"wait_for_complete blocks until the newest download finishes or times out"New value: +"download fetches with the browser cookie jar and reports the real state; wait_for_complete blocks until the newest finishes" - changed
Input schema / properties / action / enumPrevious value: -[ - "list", - "wait_for_complete" -]New value: +[ + "list", + "wait_for_complete", + "download" +] - added
Input schema / properties / filenameAdded value: +{ + "description": "Relative path inside the Downloads folder (action=download)", + "type": "string" +} - added
Input schema / properties / urlAdded value: +{ + "description": "What to download (action=download); sent with the session cookies of its origin", + "type": "string" +}
- Changed
move_tab7 fields changed- added
Input schema / properties / heightAdded value: +{ + "description": "New window height px (new_window)", + "type": "number" +} - added
Input schema / properties / leftAdded value: +{ + "description": "New window x (new_window)", + "type": "number" +} - added
Input schema / properties / new_windowAdded value: +{ + "default": false, + "description": "Extract the tab into a fresh window instead — tabs.move needs an existing window, this does not", + "type": "boolean" +} - added
Input schema / properties / topAdded value: +{ + "description": "New window y (new_window)", + "type": "number" +} - added
Input schema / properties / widthAdded value: +{ + "description": "New window width px (new_window)", + "type": "number" +} - added
Input schema / properties / window_typeAdded value: +{ + "default": "normal", + "description": "new_window only: popup has no tab strip and no omnibox — the terminal-window look for detached chrome-untrusted://terminal tabs", + "enum": [ + "normal", + "popup" + ], + "type": "string" +} - changed
Input schema / requiredPrevious value: -[ - "tab_id", - "window_id" -]New value: +[ + "tab_id" +]
- Changed
tab_action2 fields changed- changed
Input schema / properties / action / descriptionPrevious value: -"close cannot be undone; reload drops injected CSS and page hooks"New value: +"close cannot be undone; discard frees memory, the tab reloads on focus; reload drops injected CSS and hooks" - changed
Input schema / properties / action / enumPrevious value: -[ - "close", - "activate", - "reload", - "back", - "forward" -]New value: +[ + "close", + "activate", + "reload", + "back", + "forward", + "discard", + "mute", + "unmute", + "duplicate" +]
- Added
tile_windows - Changed
viewport_resize3 fields changed- added
Input schema / properties / leftAdded value: +{ + "description": "Window x on the virtual desktop; on multi-monitor this is what picks the screen", + "type": "number" +} - added
Input schema / properties / stateAdded value: +{ + "description": "Applied before bounds: a maximized window accepts left/top/width/height and ignores them", + "enum": [ + "normal", + "maximized", + "fullscreen", + "minimized" + ], + "type": "string" +} - added
Input schema / properties / topAdded value: +{ + "description": "Window y on the virtual desktop", + "type": "number" +}
- Added
window_layout
1 tool update
v1.12.0- Added
move_tab
6 tool updates
v1.11.0- Changed
click2 fields changed- added
Input schema / properties / buttonAdded value: +{ + "default": "left", + "description": "right opens the page context menu instead of activating the element", + "enum": [ + "left", + "right" + ], + "type": "string" +} - added
Input schema / properties / countAdded value: +{ + "default": 1, + "description": "2 emits dblclick after the two clicks, which is what selects a word or opens an editor", + "type": "number" +}
- Changed
extract1 field changed- added
Input schema / properties / save_toAdded value: +{ + "description": "Absolute path: write the records as JSON there and return the path instead of the content", + "type": "string" +}
- Changed
read_page3 fields changed- changed
Input schema / properties / mode / descriptionPrevious value: -"text strips markup, html keeps it (costly), accessibility returns the a11y tree"New value: +"text strips markup, markdown keeps headings/links/tables far cheaper than html, accessibility returns the a11y tree" - changed
Input schema / properties / mode / enumPrevious value: -[ - "text", - "html", - "accessibility" -]New value: +[ + "text", + "markdown", + "html", + "accessibility" +] - added
Input schema / properties / save_toAdded value: +{ + "description": "Absolute path: write the page there and return the path instead of the content", + "type": "string" +}
- Changed
screenshot1 field changed- added
Input schema / properties / save_toAdded value: +{ + "description": "Absolute path: write the PNG there and return the path instead of the content", + "type": "string" +}
- Changed
viewport_resize1 field changed- added
Input schema / properties / actionAdded value: +{ + "default": "set", + "description": "get reports the current viewport without resizing anything", + "enum": [ + "set", + "get" + ], + "type": "string" +}
- Changed
wait_for4 fields changed- changed
Input schema / properties / condition / descriptionPrevious value: -"function needs expression; element needs selector"New value: +"element and text need selector or text; function needs expression" - changed
Input schema / properties / condition / enumPrevious value: -[ - "element", - "function", - "navigation", - "network_idle" -]New value: +[ + "element", + "text", + "function", + "navigation", + "network_idle" +] - changed
Input schema / properties / selector / descriptionPrevious value: -"condition=element"New value: +"condition=element; with condition=text it narrows the search to that subtree" - added
Input schema / properties / textAdded value: +{ + "description": "Literal text to wait for (condition=text), matched case-insensitively", + "type": "string" +}
58 tool updates
v1.10.0- Changed
accessibility_audit2 fields changed- added
Input schema / properties / checks / descriptionAdded value: +"Subset to run; fewer checks means a shorter answer" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
assert4 fields changed- added
Input schema / properties / selector / descriptionAdded value: +"Element the assertion is about; \">>>\" pierces shadow DOM" - added
Input schema / properties / state / descriptionAdded value: +"attached means present in the DOM, visible also requires a rendered box" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one" - added
Input schema / properties / timeout / descriptionAdded value: +"Max ms to wait for the condition before failing"
- Changed
check_links5 fields changed- added
Input schema / properties / format / descriptionAdded value: +"lines is compact; json keeps per-link status and timing" - added
Input schema / properties / max_links / descriptionAdded value: +"Cap on links fetched: each one is a real HTTP request" - added
Input schema / properties / scope / descriptionAdded value: +"same-origin skips third-party links, which are the slow ones" - added
Input schema / properties / selector / descriptionAdded value: +"CSS selector; \">>>\" pierces shadow DOM. Restricts which links are collected" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
click4 fields changed- added
Input schema / properties / frame_id / descriptionAdded value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / selector / descriptionAdded value: +"CSS selector; \">>>\" pierces shadow DOM. Ignored when ref is given" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one" - added
Input schema / properties / wait_after / descriptionAdded value: +"Settle before returning: navigation waits for a page load, networkidle for quiet traffic"
- Changed
clipboard2 fields changed- added
Input schema / properties / action / descriptionAdded value: +"write takes text; read returns the current clipboard contents" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
create_tab1 field changed- added
Input schema / properties / active / descriptionAdded value: +"false opens the tab in the background, leaving the current one focused"
- Changed
dismiss_overlays1 field changed- added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
drag_and_drop5 fields changed- added
Input schema / properties / frame_id / descriptionAdded value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / mode / descriptionAdded value: +"Which event family to emit, since libraries listen to different ones" - added
Input schema / properties / source_selector / descriptionAdded value: +"Element to drag; \">>>\" pierces shadow DOM" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one" - added
Input schema / properties / target_selector / descriptionAdded value: +"Drop target; \">>>\" pierces shadow DOM"
- Changed
element_screenshot2 fields changed- added
Input schema / properties / selector / descriptionAdded value: +"CSS selector; \">>>\" pierces shadow DOM. The element is scrolled into view first" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
emulate_media4 fields changed- added
Input schema / properties / colorScheme / descriptionAdded value: +"Value reported to prefers-color-scheme queries" - added
Input schema / properties / printMode / descriptionAdded value: +"Make print media queries match, without opening a print dialog" - added
Input schema / properties / reducedMotion / descriptionAdded value: +"Value reported to prefers-reduced-motion queries" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
execute_js3 fields changed- added
Input schema / properties / code / descriptionAdded value: +"JS evaluated in the page; the value of the last expression is returned" - added
Input schema / properties / frame_id / descriptionAdded value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
extract3 fields changed- added
Input schema / properties / format / descriptionAdded value: +"lines is compact; json keeps one object per record" - added
Input schema / properties / max_items / descriptionAdded value: +"Cap on records returned, in document order" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
extract_table4 fields changed- added
Input schema / properties / index / descriptionAdded value: +"Which table to take when the selector matches several, 0-based" - added
Input schema / properties / selector / descriptionAdded value: +"The table to read; \">>>\" pierces shadow DOM" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one" - changed
Input schema / properties / where / descriptionPrevious value: -"Keep only rows where each {column: substring} matches (case-insensitive contains). Use key \"any\" (or when the table has no headers) to match against any cell."New value: +"{column: substring} rows must match, case-insensitive contains. Key \"any\" matches any cell."
- Changed
fill_form3 fields changed- added
Input schema / properties / frame_id / descriptionAdded value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one" - added
Input schema / properties / wait_after / descriptionAdded value: +"Settle before returning: navigation waits for a page load, networkidle for quiet traffic"
- Changed
find_text4 fields changed- added
Input schema / properties / case_sensitive / descriptionAdded value: +"Match case exactly" - added
Input schema / properties / max_results / descriptionAdded value: +"Cap on matches returned, in document order" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one" - added
Input schema / properties / text / descriptionAdded value: +"Literal text to find, not a regex"
- Changed
full_page_screenshot2 fields changed- added
Input schema / properties / max_scrolls / descriptionAdded value: +"Cap on scroll steps: a taller page is captured only up to here" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
get_frames1 field changed- added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
get_interactives5 fields changed- added
Input schema / properties / format / descriptionAdded value: +"lines is compact; json adds full attributes per element" - added
Input schema / properties / frame_id / descriptionAdded value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / limit / descriptionAdded value: +"Max elements returned; raise it on a dense page" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one" - added
Input schema / properties / visible_only / descriptionAdded value: +"false also lists elements hidden or scrolled out of view"
- Changed
get_page_info2 fields changed- added
Input schema / properties / frame_id / descriptionAdded value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
get_performance1 field changed- added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
get_storage2 fields changed- added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one" - added
Input schema / properties / type / descriptionAdded value: +"all returns the three together"
- Changed
handle_dialogs2 fields changed- added
Input schema / properties / action / descriptionAdded value: +"accept/dismiss auto-answer future dialogs; reset restores native behaviour" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
highlight_elements5 fields changed- added
Input schema / properties / border / descriptionAdded value: +"CSS border shorthand, e.g. \"2px solid red\"" - added
Input schema / properties / color / descriptionAdded value: +"Any CSS color for the overlay label" - added
Input schema / properties / remove / descriptionAdded value: +"Remove previously injected highlights instead of adding" - added
Input schema / properties / selector / descriptionAdded value: +"CSS selector; \">>>\" pierces shadow DOM. Every match is outlined" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
hover3 fields changed- added
Input schema / properties / frame_id / descriptionAdded value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / selector / descriptionAdded value: +"CSS selector; \">>>\" pierces shadow DOM. Triggers CSS and JS hover handlers" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
http_auth3 fields changed- added
Input schema / properties / action / descriptionAdded value: +"set installs credentials for HTTP auth prompts; clear removes them" - added
Input schema / properties / password / descriptionAdded value: +"Required for action=set; kept in memory, never written to disk" - added
Input schema / properties / username / descriptionAdded value: +"Required for action=set"
- Changed
http_request1 field changed- added
Input schema / properties / method / descriptionAdded value: +"HEAD fetches headers only, without the body"
- Changed
inject_css2 fields changed- added
Input schema / properties / css / descriptionAdded value: +"One or more CSS rules, as they would appear in a stylesheet" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
list_event_listeners2 fields changed- added
Input schema / properties / limit / descriptionAdded value: +"Max listeners returned, from the top of the match list" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
manage_downloads2 fields changed- added
Input schema / properties / action / descriptionAdded value: +"wait_for_complete blocks until the newest download finishes or times out" - added
Input schema / properties / limit / descriptionAdded value: +"Max download entries returned, newest first"
- Changed
measure_spacing3 fields changed- added
Input schema / properties / selector1 / descriptionAdded value: +"First element; distances are measured from its box" - added
Input schema / properties / selector2 / descriptionAdded value: +"Second element; \">>>\" pierces shadow DOM" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
modify_dom6 fields changed- added
Input schema / properties / action / descriptionAdded value: +"setStyle takes a CSS declaration in value; addClass/removeClass take className" - added
Input schema / properties / className / descriptionAdded value: +"Class to add or remove (addClass/removeClass)" - added
Input schema / properties / frame_id / descriptionAdded value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / selector / descriptionAdded value: +"CSS selector; \">>>\" pierces shadow DOM. Only the first match is changed" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one" - added
Input schema / properties / value / descriptionAdded value: +"Attribute value, style declaration, or text, per action"
- Changed
monitor_network3 fields changed- added
Input schema / properties / format / descriptionAdded value: +"har exports HAR 1.2 for external tooling" - added
Input schema / properties / source / descriptionAdded value: +"page sees XHR/fetch only; browser also sees static assets" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
monitor_websocket1 field changed- added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
navigate2 fields changed- added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one" - added
Input schema / properties / url / descriptionAdded value: +"Absolute URL, or a path resolved against the current page"
- Changed
network_rules4 fields changed- added
Input schema / properties / action / descriptionAdded value: +"list and clear inspect and drop the rules already installed" - added
Input schema / properties / header / descriptionAdded value: +"Header name for action=modify_header, e.g. \"User-Agent\"" - added
Input schema / properties / redirect_url / descriptionAdded value: +"Destination for action=redirect" - added
Input schema / properties / resource_types / descriptionAdded value: +"Limit the rule to these request types; omitted = all of them"
- Changed
press_key6 fields changed- added
Input schema / properties / alt / descriptionAdded value: +"Hold Alt" - added
Input schema / properties / ctrl / descriptionAdded value: +"Hold Control" - added
Input schema / properties / frame_id / descriptionAdded value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / meta / descriptionAdded value: +"Hold Meta (Command/Windows)" - added
Input schema / properties / shift / descriptionAdded value: +"Hold Shift" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
query_dom4 fields changed- added
Input schema / properties / frame_id / descriptionAdded value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / limit / descriptionAdded value: +"Max elements returned, from the top of the match list" - added
Input schema / properties / selector / descriptionAdded value: +"CSS selector; \">>>\" pierces shadow DOM. Matches all, not just the first" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
read_console3 fields changed- added
Input schema / properties / format / descriptionAdded value: +"lines is compact; json keeps timestamps and stack traces" - added
Input schema / properties / level / descriptionAdded value: +"all merges every level in one chronological list" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
read_page3 fields changed- added
Input schema / properties / frame_id / descriptionAdded value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / mode / descriptionAdded value: +"text strips markup, html keeps it (costly), accessibility returns the a11y tree" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
save_page1 field changed- added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
screenshot1 field changed- added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
screenshot_diff3 fields changed- added
Input schema / properties / action / descriptionAdded value: +"baseline stores, compare measures against it, clear drops baselines" - added
Input schema / properties / name / descriptionAdded value: +"Baseline id: reuse the same one to compare across runs" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
scroll8 fields changed- added
Input schema / properties / action / descriptionAdded value: +"to jumps to a position or element; until scrolls repeatedly to load more" - added
Input schema / properties / behavior / descriptionAdded value: +"instant avoids waiting for smooth-scroll animations" - changed
Input schema / properties / frame_id / descriptionPrevious value: -"action=to only"New value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / max_scrolls / descriptionAdded value: +"Cap on scroll steps, so an infinite feed terminates" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one" - added
Input schema / properties / until / descriptionAdded value: +"no_new_content stops when the page height stops growing" - added
Input schema / properties / x / descriptionAdded value: +"Absolute horizontal position in px (action=to, without selector)" - added
Input schema / properties / y / descriptionAdded value: +"Absolute vertical position in px (action=to, without selector)"
- Changed
security_headers1 field changed- added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
seo_audit1 field changed- added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
session_fixture2 fields changed- added
Input schema / properties / action / descriptionAdded value: +"save snapshots the current origin; restore writes it back" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
session_record1 field changed- added
Input schema / properties / action / descriptionAdded value: +"start begins recording, stop writes the file and returns its path"
- Changed
set_geolocation4 fields changed- added
Input schema / properties / latitude / descriptionAdded value: +"Decimal degrees, -90 to 90" - added
Input schema / properties / longitude / descriptionAdded value: +"Decimal degrees, -180 to 180" - added
Input schema / properties / reset / descriptionAdded value: +"Restore the real position and stop overriding" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
set_storage7 fields changed- added
Input schema / properties / action / descriptionAdded value: +"clear ignores key and wipes every entry of that type" - added
Input schema / properties / http_only / descriptionAdded value: +"Cookie hidden from page JS" - added
Input schema / properties / sameSite / descriptionAdded value: +"None requires secure=true" - added
Input schema / properties / secure / descriptionAdded value: +"Cookie sent over HTTPS only" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one" - added
Input schema / properties / type / descriptionAdded value: +"cookie writes a real cookie, not a storage key" - added
Input schema / properties / value / descriptionAdded value: +"Required for action=set"
- Changed
set_zoom2 fields changed- added
Input schema / properties / reset / descriptionAdded value: +"Restore the default zoom for this origin" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
tab_action2 fields changed- added
Input schema / properties / action / descriptionAdded value: +"close cannot be undone; reload drops injected CSS and page hooks" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
type_text5 fields changed- added
Input schema / properties / frame_id / descriptionAdded value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / selector / descriptionAdded value: +"CSS selector; \">>>\" pierces shadow DOM. Ignored when ref is given" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one" - added
Input schema / properties / text / descriptionAdded value: +"Value to type; empty string clears the field" - added
Input schema / properties / wait_after / descriptionAdded value: +"Settle before returning: navigation waits for a page load, networkidle for quiet traffic"
- Changed
unused_css2 fields changed- added
Input schema / properties / max_selectors / descriptionAdded value: +"Cap on unused selectors reported: a large stylesheet has thousands" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
upload_file2 fields changed- added
Input schema / properties / selector / descriptionAdded value: +"The file input to fill; \">>>\" pierces shadow DOM" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
viewport_resize1 field changed- added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
wait_for3 fields changed- added
Input schema / properties / condition / descriptionAdded value: +"function needs expression; element needs selector" - added
Input schema / properties / frame_id / descriptionAdded value: +"Target iframe id from get_frames; omitted = main frame" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
watch_dom6 fields changed- added
Input schema / properties / attributes / descriptionAdded value: +"Report attribute changes" - added
Input schema / properties / characterData / descriptionAdded value: +"Report text content changes" - added
Input schema / properties / childList / descriptionAdded value: +"Report added and removed children" - added
Input schema / properties / selector / descriptionAdded value: +"Subtree to observe; \">>>\" pierces shadow DOM" - added
Input schema / properties / subtree / descriptionAdded value: +"Observe descendants too, not just the matched node" - added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
- Changed
web_vitals1 field changed- added
Input schema / properties / tab_id / descriptionAdded value: +"Target tab; omitted = last tab navigated in this session, else the active one"
2 tool updates
v1.9.0- Changed
emulate_media1 field changed- added
Input schema / properties / user_agentAdded value: +{ + "description": "Overrides navigator.userAgent and appVersion in the page (not the HTTP header)", + "type": "string" +}
- Added
http_request
59 tool updates
v1.8.0- First observed
accessibility_audit - First observed
assert - First observed
check_links - First observed
click - First observed
clipboard - First observed
create_tab - First observed
dismiss_overlays - First observed
drag_and_drop - First observed
element_screenshot - First observed
emulate_media - First observed
execute_js - First observed
extract - First observed
extract_table - First observed
fill_form - First observed
find_text - First observed
full_page_screenshot - First observed
get_frames - First observed
get_interactives - First observed
get_page_info - First observed
get_performance - First observed
get_status - First observed
get_storage - First observed
get_tabs - First observed
handle_dialogs - First observed
highlight_elements - First observed
hover - First observed
http_auth - First observed
inject_css - First observed
list_event_listeners - First observed
manage_downloads - First observed
measure_spacing - First observed
modify_dom - First observed
monitor_network - First observed
monitor_websocket - First observed
navigate - First observed
network_rules - First observed
press_key - First observed
query_dom - First observed
read_console - First observed
read_page - First observed
save_page - First observed
screenshot - First observed
screenshot_diff - First observed
scroll - First observed
security_headers - First observed
seo_audit - First observed
session_fixture - First observed
session_record - First observed
set_geolocation - First observed
set_storage - First observed
set_zoom - First observed
tab_action - First observed
type_text - First observed
unused_css - First observed
upload_file - First observed
viewport_resize - First observed
wait_for - First observed
watch_dom - First observed
web_vitals
TDQS
Scored across 59 tools
Most tools have clear, distinct purposes. Overlap exists among reading tools (read_page, extract, extract_table, find_text, query_dom) but each targets a different structure or use case, so ambiguity is limited. A few similar-sounding pairs (watch vs watch_dom, screenshot vs element_screenshot) are still distinct enough.
The naming convention is mostly verb_noun (e.g., navigate, get_page_info, type_text, extract_table), but there are many variations: bare verbs (click, scroll, hover, watch), noun-style names (cookie_audit, session_fixture, handoff), and mixed prefixes (get_, set_, find_, read_, create_, manage_). This inconsistency makes the API slightly less predictable.
With 59 tools, the count is well above the typical MCP range (3–15) and feels heavy for a single server. While the breadth covers many browser automation features, several tools could be consolidated (e.g., get_page_info/query_dom/read_page), suggesting the set is larger than necessary.
The surface is exceptionally comprehensive, covering navigation, DOM interaction, forms, screenshots, file handling, dialogs, storage, cookies, performance/accessibility audits, session recording, network interception, and even human handoff. No significant gaps for a browser automation use case.
Maintenance
Related MCP Connectors
Hosted real Google Chrome MCP with per-user persistent state. Navigate, click, type, screenshot.
Browser MCP for logged-in tasks. Uses your Chrome — credentials stay local. Zero-token replay.
Live browser debugging for AI assistants — DOM, console, network via MCP.
MCP server for visual regression testing: triage a PR's UI diffs from your coding agent.
Related MCP Servers
- AlicenseNot gradedqualityAmaintenancesingle-binary MCP server that gives AI agents a browser. 66 tools for navigation, form filling, data extraction, screenshots, and DOM diffing — built on pure Chrome DevTools Protocol.13MIT
- AlicenseNot gradedqualityBmaintenanceMCP server that lets agents drive your real Chrome browser with existing logins and sessions via an outbound-only WebSocket extension. It exposes Playwright-compatible browser tools for navigation, clicking, typing, and snapshots.1Apache 2.0
- AlicenseAqualityAmaintenanceMCP server that drives your real Chrome/Edge/Opera browser through a Chrome extension and DevTools Protocol, preserving logins and session state, and can also perform OS-level mouse and keyboard input behind approval.51203 PyPI1MIT
- AlicenseNot gradedqualityAmaintenanceA native MCP server that gives AI assistants full Chrome control via the DevTools Protocol and an unpacked extension, including semantic element refs, real input, screenshots, and browser/tab/window management. It exposes 43 callable tools with a visible control overlay and an optional read-only security profile.1MIT