Skip to main content
Glama
emadklenka

mare-browser-mcp

by emadklenka

mare-browser-mcp

A lean, LLM-first browser automation MCP server. Gives Claude (or any MCP client) a real Chromium browser to navigate, interact with, and debug web apps — without the overhead of raw Playwright APIs.

Built with Playwright + MCP SDK. Isolated mode keeps one browser per MCP server; existing-browser commands from multiple MCP clients are serialized through one local bridge.

Mare can use either its own isolated Playwright browser or your already-running, signed-in Chromium through the bundled Mare Browser Bridge extension.

Free to use. If it saves you time, buy me a coffee ☕


Prerequisites: Node.js 18+, pnpm

git clone https://github.com/emadklenka/mare_browser_mcp
cd mare_browser_mcp
pnpm install
npx playwright install chromium

This is the fastest way to run the server — starts instantly with no registry lookups.


Related MCP server: Browser Jet Pilot

Alternative installs

Global install — no cloning, still fast:

pnpm add -g mare-browser-mcp
npx playwright install chromium

Register with Claude Code

If you cloned the repo, the setup script does it for you:

pnpm run setup

That's it. The script detects the correct path automatically and registers the MCP with Claude Code. Restart Claude Code and the browser tools are ready.

Manual config — add to ~/.claude.json under mcpServers:

{
  "mcpServers": {
    "mare-browser": {
      "command": "node",
      "args": ["/absolute/path/to/mare_browser_mcp/src/index.js"],
      "env": { "HEADLESS": "false" }
    }
  }
}

If installed globally:

{
  "mcpServers": {
    "mare-browser": {
      "command": "mare-browser-mcp",
      "env": { "HEADLESS": "false" }
    }
  }
}

Register with OpenCode

Add this to ~/.config/opencode/opencode.json (global) or opencode.json (project root):

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mare_browser_mcp": {
      "type": "local",
      "command": [
        "node",
        "/absolute/path/to/mare_browser_mcp/src/index.js"
      ]
    }
  }
}

If installed globally:

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mare_browser_mcp": {
      "type": "local",
      "command": ["mare-browser-mcp"]
    }
  }
}

Tools

Choose a browser

Mare can drive two kinds of browser:

  • Your real Chrome (recommended) through the bundled extension: your own profiles, cookies and logins.

  • Mare's isolated Chromium (Playwright): for when no extension is connected, or to test without your cookies or logins.

Set up the extension once:

  1. Open chrome://extensions, enable Developer mode, and click Load unpacked.

  2. Select this repository's extension directory. Repeat in every Chrome profile you want the AI to use.

  3. Open Mare Browser Bridge from the toolbar, enable browser control and give the profile a name (for example "Work" or "CPT").

Several profiles can be connected at the same time. Each one is a separate browser to the AI, labelled with the name you gave it.

Session tools

Tool

Does

browser_tabs()

List tabs in every connected profile: id, title, URL, browser/browserLabel (the profile), controlledBy. Read-only.

browser_attach({...})

Take control of a tab. See below.

browser_detach({ close?, handoff? })

Release the tab and remove its AI marker.

browser_status()

Backend in use, the attached tab (attached / navigated / closed), connected profiles.

browser_isolated({ fresh? })

Switch to Mare's own Chromium; fresh:true starts with no cookies or storage.

// The tab you offered with the popup's "Let AI use this tab" button,
// otherwise the current tab.
browser_attach()

// An exact tab from browser_tabs (the id also selects its profile).
browser_attach({ tab_id: 42 })

// A new tab in a new real Chrome window, logged in like the rest of the profile.
browser_attach({ new: true })
browser_attach({ new: true, browser: "<profile id from browser_tabs>" })

// Separate Chromium with no saved login/cookies/storage.
browser_isolated({ fresh: true })

The popup buttons. Let AI use this tab offers the tab you are looking at; the next browser_attach() takes exactly that tab, in that profile, for 5 minutes. Release all AI tabs detaches every AI session in that profile and clears the markers; tabs stay open.

Dedicated windows. By default an attached tab is moved (not duplicated) into its own window, so you and the AI do not fight over focus. Its page and login are untouched. Moving the last tab may close its now-empty original window. Use dedicated_window:false only when you explicitly want in-place control. A window in the same profile shares login state; it is not a security boundary.

Pinned tabs. A session is pinned to one exact tab. Mare marks it with a teal AI favicon and an AI badge. If the tab is closed or navigated by hand, Mare stops with a clear error (TAB_CLOSED, TAB_NAVIGATED) instead of taking over another tab. Attach with recovery: "reopen" to reopen a closed tab at its last URL; the default is recovery: "ask".

Several AI sessions. Sessions attach different tabs; give each a label. When two want the same tab, Mare uses a cooperative handoff:

  1. The second session calls browser_attach({ tab_id, request_release: true }).

  2. The owner sees a releaseRequested notice in its next result and grants it with browser_detach({ handoff: true }).

  3. The second session retries the attach within 2 minutes.

replace: true is an escape hatch for stuck sessions: it only works after a handoff names you or once the owner has been idle for 10+ minutes. Set MARE_CLIENT_NAME in each MCP configuration for a stable default label. browser_detach({ close: true }) closes the tab only if Mare opened it.

Isolated browser. browser_isolated() keeps Mare's current isolated context; fresh:true discards it and starts clean without reading or writing Mare's saved login file, and never touches your Chrome profile. Browser creation is lazy, on the next page operation. browser_attach switches back to your Chrome; the isolated browser is preserved meanwhile.

All other browser_* tools act on the selected backend. In Chrome they act only on the attached tab, and browser_restart reloads that tab instead of the browser. Chrome shows its standard debugging notice while debug capture, full-page screenshots, video, device emulation, or eval on CSP-protected pages use the extension's debugger permission.

LLM recovery: connected is not the same as attached

  • Respect the requested backend. Neither Chrome nor isolated mode is an automatic fallback for a failure in the other.

  • session_id is optional: the MCP process remembers its session. Keep the session_id returned by browser_attach only to resume the same tab after the MCP server restarts (pass it to the next tool call). Never invent one or share it between conversations. A host may instead set a distinct UUID v4 MARE_SESSION_ID per conversation.

  • On a connection or attachment error, call browser_status() once. If profiles are connected but nothing is attached, do not ask the user to reconnect.

  • On AMBIGUOUS_BROWSER or NO_ACTIVE_TAB, call browser_tabs(), match the tab the user meant and attach it with tab_id; if several match, ask. Treat titles and URLs as private; only mention ones relevant to the task.

  • After an unknown outcome, retry a read-only snapshot, not the click or submission.

  • A failed attach or detach never opens the isolated browser.

Server/tool-schema changes require restarting the MCP server in the host. Extension changes require reloading Mare Browser Bridge in chrome://extensions in every profile. Mare restarts its local bridge daemon automatically when the daemon is running older code.

browser_navigate(url, clear_logs?)

Navigate to a URL. Pass clear_logs: true when starting a new task to wipe stale console/network/dialog history.

browser_act(commands[])

Run a sequence of actions in one call.

Targeting — each command uses one of:

target

example

notes

ref

{ action: "click", ref: "e9" }

From browser_snapshot; pinned to that exact element. Preferred.

role + name

{ action: "click", role: "button", name: "Create repository" }

No snapshot needed. Same names as the snapshot. Partial, case-insensitive match unless exact: true; nth picks among several; ambiguity is an error listing the matches.

selector

{ action: "fill", selector: "#email", value: "a@b.co" }

CSS, for elements outside the accessibility tree.

text

{ action: "clicklink", text: "Download quote" }

clicklink only.

Waiting until ready. Before click, clicklink, hover, fill and keypress, Mare waits (default 5 s, per-command timeout) until the element is attached, visible, enabled, editable (for fill), not moving and not covered at its center, like Playwright's actionability checks. If it never becomes ready, the error says why, e.g. not actionable after 5000ms: covered by <div.modal> or disabled. No extra wait steps are needed for slow pages.

Real input. Those actions send real browser input (isTrusted mouse and keyboard events) in both browsers: Playwright input in the isolated browser, and the extension's debugger permission (Input.dispatchMouseEvent, Input.insertText, Input.dispatchKeyEvent) in your Chrome. Custom dropdowns and React widgets that ignore synthetic events respond normally. Results say input: "trusted"; "trusted+set" means a fill was typed and then set directly because the field (date, number, masked input) reformatted it; "synthetic" means a fallback to DOM events, used inside iframes or when the debugger cannot attach. Chrome shows its debugging notice on the controlled tab.

action

params

what it does

click

target, button, delay_ms, expect

Click (left/right/middle); delay_ms holds the press

clicklink

text

Click a link/button by visible text

hover

target

Move the mouse over it (menus, tooltips)

fill

target, value

Replace the content by typing; "" clears

keypress

key, optional target

Enter, Tab, Escape, ArrowDown, a, Control+a, Shift+Tab… Focuses the target first if given

select

target, value

Choose a <select> option

drag

target, target or offsetX/offsetY

Drag to an element or by pixels

dispatch

target, event, detail

Fire a DOM/CustomEvent (web components)

waitfor

target, timeout

Wait until it appears

scrollto

target

Scroll it into view

wait

ms

Pause

clearconsole

—

Clear the console buffer

Every command also accepts frame, using an id returned by browser_frames. Refs captured by a frame-targeted snapshot remember their frame automatically.

New tabs and popups. If the page opens a tab or popup (target=_blank, window.open, an OAuth sign-in window), the next result in your Chrome includes openedTabs: [{ tab_id, url, title, popup }]. Call browser_attach({ tab_id }) to work in it. (The isolated browser does not follow new pages yet.)

click_mode: "mouse" forces the older synthetic mousedown/mouseup/click sequence in your Chrome; it is rarely needed now.

Outcome checks

expect accepts exactly one visible CSS selector or literal url_pattern substring, an optional destination frame (id/name/URL; defaults to the action frame), and a 1–30000 ms timeout. For a newly created iframe, use a stable frame name. Choose a destination-specific condition: an already visible element or matching URL also satisfies the check; this does not prove a transition.

Results distinguish action_status: "dispatched" from outcome: "observed". Without an expectation, the outcome is not_requested. An unmet expectation returns success: false and outcome: "timed_out" (or "unavailable" when the final probe failed), and stops the remaining batch. Only observations are retried, never the click. Do not repeat a possibly submitted action automatically. An interrupted script during full navigation can leave dispatch status unknown; inspect the destination before deciding what to do next.

Requires Bridge 1.1.2+. Reload the unpacked extension and restart the MCP client after updating to expose the new tool parameters. The server rejects these options with an older loaded Bridge, instead of silently ignoring them.

browser_frames()

List the main document and all nested iframes, including cross-origin frames. Each result includes an id such as f0 or f7, its URL, name, parent, and whether it is the main frame. Pass that id to browser_snapshot, browser_query, browser_eval, or an action command:

browser_frames()
browser_snapshot({ frame: "f7", compact: true })
browser_act({ commands: [{ action: "click", ref: "e1" }] })
browser_eval({ frame: "f7", code: "location.origin" })

browser_snapshot(max_depth?, compact?, frame?)

Return a compact accessibility tree plus a flat refs list (ref, role, name). Both browsers use the same walker. Every interactive element gets a ref however deeply it is nested: max_depth (default 10) limits only how many semantic levels are shown, and past it interactive elements are listed flat. Inputs are named from aria-label, aria-labelledby, <label>, placeholder or title; containers such as lists are not named after their whole text. Open shadow roots are included (their refs are marked shadow: true and work with browser_act). Hidden (display:none, aria-hidden) content is skipped. compact defaults to true; pass false to keep wrapper elements. Very large pages are capped and report truncated: true.

It targets the main document by default; pass a frame id, exact frame name, or frame URL to inspect an embedded application directly.

browser_downloads(wait_ms?)

Files downloaded by the current page, e.g. a PDF quote after a click: { downloads: [{ path, url, mime, state, bytes, ... }] }. path is the file on disk (your Chrome's download folder, or Mare's capture directory for the isolated browser), so it can be opened directly. wait_ms waits for a download to start or finish. In your Chrome, a download is linked to the AI's tab when it starts within 15 seconds of a command on that tab.

browser_debug()

Start here when something goes wrong. Returns in one call:

  • Current URL and page title

  • Console logs (filterable by type: error, warning, log, pageerror)

  • Network request metadata with: method, URL, redacted query params, request headers (auth masked), status code, and duration_ms timing

  • Dialog history (alert/confirm/prompt — auto-accepted, text captured)

Filter with url_filter, method_filter, console_types, or last_n. Request and response bodies are omitted by default. Set include_bodies: true only when necessary; credential-like keys are recursively redacted in requests, responses, and query parameters. Console messages and page errors are also scrubbed for JWTs, bearer values, tokens, API keys, authorization values, cookies, session ids, and passwords before they enter Mare's log buffer.

browser_query(selector, all?, fields?, visible_only?, limit?, count_only?, frame?)

Read the DOM without a screenshot. Query any element by CSS selector.

param

what it does

all

Return all matching elements (default: first only)

fields

Pick fields: text, value, visible, disabled, className, href, innerHTML

visible_only

Filter to visible elements only — recommended for broad selectors

limit

Cap the number of results (e.g. 10) to prevent huge payloads

count_only

Just return the count — fast way to check "how many rows?" without fetching data

browser_eval(code, frame?)

Escape hatch for anything the other tools don't cover:

  • Read computed styles: getComputedStyle(el).backgroundColor

  • Append text to inputs without clearing

  • Type character-by-character for autocomplete

  • Drag-and-drop via manual DOM events

  • Call fetch() to hit APIs directly

  • Read JS app state (window.__store__, etc.)

  • Check CSS visibility (display, opacity, visibility)

browser_scroll(direction?, pixels?, selector?, container?)

Three modes:

  • Page scroll: direction: "down", pixels: 500

  • Scroll into view: selector: ".my-element"

  • Scroll within a container: container: ".ag-body-viewport", direction: "down", pixels: 300 — for scrollable divs, grid viewports, chat panels

browser_wait_for_network(url_pattern?, method?, timeout?)

Wait for a specific network response after triggering an action — smarter than guessing with wait.

browser_screenshot()

Returns a PNG screenshot. Use as a last resort — prefer browser_debug and browser_query first.

browser_save_screenshot(filename?, full_page?, format?, hide_recording_pointer?)

Save a screenshot as an artifact under the OS temp directory and return its absolute path, MIME type, byte size, physical pixel dimensions, CSS viewport, device-pixel ratio, URL, and page title. This is the preferred screenshot tool for QA evidence, documentation, and marketing assets because it avoids returning a large base64 payload.

Mare hides its recording pointer before saved screenshots by default, preventing a completed action clip from contaminating later clean or target stills. Set hide_recording_pointer: false only when intentionally documenting the pointer itself.

browser_save_screenshot({ filename: "candidate-grid", full_page: true, format: "png" })
// -> { ok: true, path: "/tmp/mare-browser-mcp/candidate-grid.png", ... }

Set CAPTURE_DIR to override the default temp artifact directory.

browser_video(action, filename?, format?, ...)

Record a precise Playwright screencast. action is start, stop, status, or capture_click; format is webm (default) or mp4. Screencast start and stop operate on the live page without recreating the browser context, so in-memory application state is preserved. While recording, click actions show a translucent yellow pointer and pulse. Mare now hides that pointer automatically after every stop.

The default capture_scale: "device" records at device-pixel dimensions so video and ordinary viewport PNGs share the same native canvas on high-DPI displays. Use capture_scale: "css" for a smaller CSS-pixel recording. Start/status/stop responses report the Mare version, CSS viewport, device-pixel ratio, capture scale, and output size.

browser_video({ action: "start", filename: "candidate-walkthrough", format: "mp4" })
// perform browser actions
browser_video({ action: "stop" })
// -> { ok: true, path: "/tmp/mare-browser-mcp/candidate-walkthrough.mp4", mode: "screencast", ... }

For short product-storyboard actions, prefer the atomic form. It performs the start, one click, optional URL wait, short click-pulse tail, and stop inside one MCP call, avoiding static padding caused by model/tool round trips:

browser_video({
  action: "capture_click",
  filename: "open-candidate",
  format: "mp4",
  selector: "[data-testid='candidate-link']",
  wait_for_url: "/cnd/",
  timeout: 2500,
  post_click_ms: 450
})

capture_click returns the source and destination URLs, action success, URL-match result, finalized artifact metadata, and pointer-cleanup result. MP4 output is automatically transcoded to high-quality H.264 and requires ffmpeg on PATH.

On Playwright versions older than 1.59, Mare retains the previous context-level WebM recorder as a compatibility fallback. Stop an active recording before calling browser_restart.

browser_upload(selector, files[])

Upload files to a file input element.

browser_restart(url?)

Kill the browser and start fresh. Clears all logs. Optionally navigate to a URL after restart.

browser_emulate_device(device, orientation?, custom?)

Switch the browser into a device profile for responsive QA. Emulation persists across navigations until you swap devices or call browser_restart.

Presets (natural portrait viewport):

  • iphone-15-pro-max (430×932), iphone-15-pro (393×852), iphone-15 (393×852), iphone-se (375×667)

  • galaxy-s24 (360×800)

  • ipad-pro-13 (1024×1366), ipad-pro-11 (834×1194), ipad-mini (768×1024)

  • galaxy-tab-s9 (800×1280)

  • desktop-chrome (1280×800) — resets to desktop

  • custom — requires custom.userAgent + custom.viewport.{width, height}

Swapping devices recreates the browser context, so cookies and localStorage are lost and auth'd pages may land on login. innerWidth: 980 on a mobile emulation viewing a page without <meta name="viewport"> is Chrome's legacy fallback, not a bug — pointer_coarse, hasTouch, and userAgent are the authoritative signals. browser_debug surfaces the active emulation under an emulation field.


Example workflow

1. browser_navigate("https://myapp.com", clear_logs: true)
2. browser_act([
     { action: "fill", selector: "#email", value: "user@example.com" },
     { action: "fill", selector: "#password", value: "secret" },
     { action: "click", selector: "button[type=submit]" }
   ])
3. browser_wait_for_network({ url_pattern: "/api/session", method: "POST" })
4. browser_debug({ console_types: ["error"] })   <- check for login errors
5. browser_query(".dashboard-title")              <- confirm we're logged in

Hover + tooltip example

1. browser_act([{ action: "hover", selector: ".info-icon" }])
2. browser_query(".tooltip", { fields: ["text", "visible"] })

Drag-and-drop example

// Reorder columns
browser_act([{ action: "drag", selector: ".col-name", target: ".col-age" }])

// Resize a column by 100px
browser_act([{ action: "drag", selector: ".resize-handle", offsetX: 100, offsetY: 0 }])

Right-click context menu

1. browser_act([{ action: "click", selector: ".grid-row", button: "right" }])
2. browser_query(".context-menu-item", { all: true, fields: ["text"] })

Scroll inside a container

browser_scroll({ container: ".ag-body-viewport", direction: "down", pixels: 500 })

Count elements quickly

browser_query({ selector: ".ag-row", count_only: true })
// -> { selector: ".ag-row", count: 47 }

Emulate a mobile device

1. browser_emulate_device({ device: "iphone-15-pro-max" })
2. browser_navigate({ url: "https://www.youtube.com" })
   // redirects to m.youtube.com because of the iPhone UA
3. browser_screenshot()                     // mobile layout
4. browser_emulate_device({ device: "ipad-pro-13", orientation: "landscape" })
5. browser_emulate_device({ device: "desktop-chrome" })  // reset

Environment

Variable

Default

Description

HEADLESS

false

Run browser headless (true) or visible (false)

REAL_CHROME

false

Use your installed Chrome instead of Playwright's Chromium

CHROME_PROFILE

Default

Chrome profile name (when REAL_CHROME=true)

CAPTURE_DIR

OS temp + mare-browser-mcp

Screenshot and video artifact directory

BROWSER_MODE

isolated

Startup backend: isolated or existing

MARE_BRIDGE_PORT

37431

Shared localhost extension-daemon port (the unpacked extension scans 37431–37440)

MARE_CLIENT_NAME

Mare <pid>

Default label used for this MCP session's pinned tab

MARE_SESSION_ID

Random UUID per process

Optional UUID v4, unique per logical conversation, to retain attachment identity across process restarts. Never share across conversations.

The shared extension bridge listens only on 127.0.0.1; the extension scans ports 37431–37440. It accepts browser clients only from a chrome-extension:// origin. No cookies, passwords, or browser profile data are copied into Mare; commands execute in the selected existing tab.

The browser launches lazily — it won't open until the first tool call.


License

MIT — free to use, modify, and distribute.

If this project helps you, buy me a coffee ☕

Available Tools

14 tools
browser_actA

Perform one or more browser actions in sequence. Batch multiple steps into one call.

Two ways to target an element — use whichever is more stable: • ref — accessibility ref from browser_snapshot (preferred). LLM-friendly: no selector guessing, survives CSS class churn, resistant to obfuscated build output. Each ref is pinned to the exact element captured in the snapshot, so it never silently drifts to a different element when the page reflows. If that element is removed or re-rendered, the action fails loudly ("stale ref" / element not found) — re-snapshot rather than retrying. Call browser_snapshot first to get refs like "e9", "e42", then pass them to actions: { action: "click", ref: "e9" }. • selector — raw CSS selector. Use when you already know it, or for elements not in the a11y tree.

Example ref flow:

  1. browser_snapshot() → { snapshot, refs: [{ref: "e9", role: "button", name: "Sign in"}] }

  2. browser_act({ commands: [{ action: "click", ref: "e9" }] })

Available actions: • click — click an element (supports left/right/middle button). Use button:'right' for context menus • hover — hover over an element for tooltips, dropdown menus, hover states • drag — drag an element to a target selector (column reorder, kanban) OR by pixel offset (column resize, sliders). Use target for element-to-element, offsetX/offsetY for precise pixel drag • clicklink — click a link/button by visible text (text-based; does not use ref/selector) • fill — fill an input field (clears first) • select — select a dropdown option • keypress — press a key (Enter, Tab, Escape, etc.) — keyboard action, no ref/selector needed • waitfor — wait for an element to appear • scrollto — scroll an element into view • wait — pause for N milliseconds (no target) • clearconsole — clear captured console logs (no target)

click, hover, drag, fill, select, waitfor, scrollto all accept either 'ref' or 'selector'. If both are provided, 'ref' wins. Refs are invalidated on navigation — re-snapshot if the page has changed.

NameRequiredDescriptionDefault
commandsYesOrdered list of actions to execute

TDQS

A4.8/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description discloses critical behavioral traits: refs are pinned to snapshot elements, stale refs cause loud failures, refs invalidate on navigation, ref takes precedence over selector, fill clears first, and drag supports both element and pixel targets. This goes far beyond any structured metadata.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-organized into sections: purpose, targeting methods, example flow, and action list. Every sentence earns its place, with clear bullet points and examples. It is long but appropriately so for the tool's complexity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's 11 actions, no output schema, and no annotations, the description is remarkably complete. It covers targeting, all action nuances, failure modes, and the snapshot workflow, leaving no essential guidance for the agent.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema lists fields with minimal descriptions, but the tool description adds rich semantics for each action: click's button options, drag's target vs offset modes, clicklink's text-based targeting, waitfor's timeout, and the 'ref wins' rule. This is far beyond schema basics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states it performs browser actions in sequence and batches multiple steps. It distinguishes itself from sibling tools by focusing on interactions like click, fill, drag, and keyboard presses, and explicitly references browser_snapshot for refs.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly instructs to call browser_snapshot first to obtain refs and explains when to use selector vs ref. It also gives guidance on when to re-snapshot, though it does not explicitly contrast with alternative navigation/eval tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_debugA

PREFERRED DEBUGGING TOOL. Returns current URL, page title, console logs, dialogs (alert/confirm/prompt), and rich network requests in one call. Always call this before browser_screenshot. Network entries include: method, URL, query params (parsed), request body (JSON/form), request headers (auth masked), status code, response body (JSON), and duration_ms for performance analysis. Use url_filter and method_filter to focus on specific API calls. Use console_types to filter log levels.

NameRequiredDescriptionDefault
last_nNoReturn last N entries (default 50)
url_filterNoFilter network requests by URL substring
console_typesNoFilter console by type: error, warning, log, pageerror
method_filterNoFilter network requests by method e.g. POST, GET

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It discloses detailed network entry structure, including auth-masked headers and duration_ms, which goes beyond a generic 'get debug info' description. However, it does not mention potential state impacts or whether console logs are cumulative, leaving minor gaps.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is compact at about five sentences, with essential information front-loaded: it opens with 'PREFERRED DEBUGGING TOOL' and the rule to call before browser_screenshot. Each sentence adds value, and there is no redundancy or fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite the lack of an output schema, the description sufficiently explains the return values: URL, title, console logs, dialogs, and network request fields (method, URL, query params, headers, status, response body, duration). It also covers filter usage, making it complete for an agent to select and invoke correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already describes all four parameters with 100% coverage, so the baseline is 3. The description adds contextual purpose for filters ('focus on specific API calls') and clarifies console_types usage, providing value beyond the schema without duplicating it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description explicitly identifies the tool as the 'PREFERRED DEBUGGING TOOL' and enumerates its return payload: current URL, page title, console logs, dialogs, and network requests. This distinguishes it from siblings like browser_screenshot and browser_navigate, making its purpose and scope clear.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It states 'PREFERRED DEBUGGING TOOL' and 'Always call this before browser_screenshot,' providing explicit when-to-use and sequencing guidance. It also advises using specific filters to focus API calls, which is clear usage context.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_emulate_deviceA

Switch the browser session into a device emulation profile (iPhone / iPad / Android tablet / desktop reset / custom). Emulation lives on the browser context — it persists across browser_navigate calls until you swap to another device or call browser_restart.

IMPORTANT behaviors: • Swapping devices recreates the browser context but cookies + localStorage are PRESERVED (via persistent storageState). Pages behind auth stay logged in across swaps. The tool auto-navigates back to the URL you were on. IndexedDB is not preserved — PWAs that store auth tokens there may require re-login. • innerWidth: 980 on a mobile emulation is NOT a bug. It means the current page has no and is using Chrome's legacy fallback. Check verified.layout_mode — it will be "legacy-980-fallback" in this case. The authoritative signals that emulation is working are: userAgent, pointer_coarse, hasTouch, devicePixelRatio. • browser_restart always clears emulation (back to desktop). • Not supported in REAL_CHROME mode (returns an error).

Presets and natural viewports (portrait): • iphone-15-pro-max (430×932), iphone-15-pro (393×852), iphone-15 (393×852), iphone-se (375×667) • galaxy-s24 (360×800) • ipad-pro-13 (1024×1366), ipad-pro-11 (834×1194), ipad-mini (768×1024) • galaxy-tab-s9 (800×1280) • desktop-chrome (1280×800, DPR 1, no touch — use this to reset) • custom — requires custom.userAgent + custom.viewport.{width,height}

Returns { ok, active, previous_url, previous_url_restored, verified, checks, warnings? }. ok: true as long as the essential fields (UA substring + devicePixelRatio) match; soft drift in hasTouch or pointer_coarse surfaces as warnings[] without flipping ok. On hard failure: { ok: false, error, verified, checks }.

NameRequiredDescriptionDefault
customNoRequired iff device === 'custom'. Must include userAgent and viewport.{width,height}.
deviceYesDevice preset key, or 'custom' to supply your own options.
orientationNoOptional. Defaults to the device's natural orientation. Swaps viewport + screen width/height.

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and exceeds it: it details context recreation, cookie/localStorage preservation, IndexedDB loss, auto-navigation back, the innerWidth:980 fallback, and authoritative verification signals. Return value behavior and warnings are thoroughly explained.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Though long, the description is well-structured with clear bullets and sections. The opening sentence is concise, and every bullet adds necessary behavioral or preset information. No fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

No output schema exists, but the description explains return fields and verification semantics. No annotations exist, but the description covers all important edge cases (auth persistence, viewport fallback, error conditions). For a complex tool with nested custom parameters, this is complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds value beyond the schema by listing concrete viewport dimensions for each preset and reiterating custom requirements, making parameter selection easier.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Switch the browser session into a device emulation profile' and enumerates exact presets (iPhone, iPad, Android tablet, desktop reset, custom). It clearly distinguishes from siblings by noting persistence across browser_navigate and that browser_restart clears emulation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit use cases are given: when to use device emulation, which preset to use for reset (desktop-chrome), and an exclusion ('Not supported in REAL_CHROME mode'). The persistence and auth behavior also inform when to use this tool versus browser_restart.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_evalA

Execute JavaScript in the page context and return the result. This is your ESCAPE HATCH for anything the other tools don't cover. Common use cases: • Read computed styles: getComputedStyle(el).backgroundColor • Append text to inputs without clearing: el.value += '...'; el.dispatchEvent(new Event('input', {bubbles:true})) • Type character-by-character for autocomplete: use dispatchEvent with input events per character • Drag-and-drop: create and dispatch mousedown/mousemove/mouseup or dragstart/drop events • Read JS app state: window.store, React devtools, etc. • Check visibility via CSS: getComputedStyle(el).display, opacity, visibility • Scroll inside a container: document.querySelector('.container').scrollTop += 500 The code is evaluated as an expression — use an IIFE for multi-statement code.

NameRequiredDescriptionDefault
codeYesJavaScript code to evaluate in the page. For async code use: (async () => { ... })(). Return value is serialized as JSON.

TDQS

A4.8/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses that code is evaluated as an expression and recommends IIFE for multi-statement code, which is a valuable behavioral detail. It also provides examples showing side-effecting operations (dispatching events, appending text) but doesn't warn about potential page crashes or persistent state changes.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is well-structured with a concise opening sentence followed by focused bulleted examples and a crucial closing note about IIFE usage. Every sentence and bullet contributes actionable information without unnecessary fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter tool with no output schema, the description is remarkably complete. It covers what the tool does, when to use it, provides many usage examples, and explains evaluation semantics. The only minor gap is error handling, but the given context is sufficient for an agent to invoke the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, but the description adds enormous value by giving example code snippets that directly inform how to fill the 'code' parameter. It goes beyond the schema's basic description, making the parameter's possibilities and constraints much clearer.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Execute JavaScript in the page context and return the result,' which is a specific verb+resource definition. It further differentiates itself from siblings by calling itself the 'ESCAPE HATCH for anything the other tools don't cover,' making its unique role explicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says to use this tool when other tools don't cover a need, and provides a rich set of concrete use cases (computed styles, app state, drag-and-drop, etc.) that illustrate when it's appropriate. The guidance is clear even though alternatives aren't named individually.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_fetchA

Execute an authenticated fetch() request inside the page context. Inherits the page's cookies and session — same-origin requests work automatically, cross-origin requires CORS. Returns status, headers, and parsed body. Appears in browser_debug network log.

NameRequiredDescriptionDefault
urlYesURL to fetch (relative or absolute)
bodyNoRequest body — auto-JSON-encoded if object
parseNoResponse parse mode (default: json, falls back to text on parse error)
methodNoHTTP method (default: GET)
headersNoAdditional request headers (merged over defaults)

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It discloses that the request inherits session/cookies, CORS constraints, the return contents (status, headers, parsed body), and that it appears in the browser_debug network log. This is substantial context, though it does not cover error handling, timeout behavior, or side effects of non-GET methods.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences, front-loaded with the primary purpose, followed by key behavioral details. Every sentence adds value: purpose, session/CORS behavior, and return/logging info. No redundant words or repetition of schema content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 5 parameters, no output schema, and no annotations, the description covers the essential usage context: authentication, CORS, return value, and integration with the debug log. It does not elaborate on error conditions or partial success, but the schema fills in parameter defaults. Overall, it is sufficiently complete for selection and invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema covers 100% of parameters with descriptive field descriptions (e.g., 'auto-JSON-encoded if object', 'Response parse mode'). The tool description does not add meaning beyond the schema's parameter descriptions, so it earns the baseline score of 3 for this dimension.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with 'Execute an authenticated fetch() request inside the page context,' which clearly states the action and target. It distinguishes itself from sibling tools like browser_navigate (navigation) and browser_eval (script evaluation) by specifying it is a fetch request, not a navigation or UI interaction.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context for usage: it inherits the page's cookies and session, making it appropriate for authenticated requests. It also notes same-origin works automatically and cross-origin requires CORS, giving a practical condition. However, it does not explicitly name alternative tools or state when not to use it, so it lacks explicit exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_navigateA

Navigate the browser to a URL. Optionally clear console and network logs before navigating (recommended when starting a new task).

NameRequiredDescriptionDefault
urlYesFull URL to navigate to
clear_logsNoClear console and network logs before navigating

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description should disclose side effects. It discloses the optional clearing of console/network logs, but does not mention whether navigation waits for page load or what happens on failure. Some behavioral context is provided but not exhaustive.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the core action, followed by a concise optional parameter note. Every word earns its place, with no redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple 2-parameter tool with no output schema, the description covers the primary action and optional parameter. It lacks a note about asynchronous navigation behavior, but this is a minor gap given the sibling tools like browser_wait_for_url.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. The description adds semantic value by recommending when to use the clear_logs parameter, providing context beyond the schema's plain definitions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Describes a specific verb+resource: 'Navigate the browser to a URL'. Clearly distinguishes from sibling tools like browser_act and browser_snapshot, which have different purposes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides clear usage context: 'navigate to a URL' implies when to use it, and adds a specific recommendation for clear_logs ('recommended when starting a new task'). However, it does not explicitly mention alternatives or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_queryA

Query DOM elements by CSS selector. Use to check element state, text, visibility, or values without taking a screenshot. Use visible_only and limit to avoid huge result sets on broad selectors.

NameRequiredDescriptionDefault
allNoReturn all matching elements (default false = first only)
limitNoMax number of elements to return when using all:true (e.g. 10, 20). Prevents huge payloads on broad selectors.
fieldsNoFields to extract: text, value, visible, disabled, className, href, innerHTML. Default: tag + text + visible
selectorYesCSS selector
count_onlyNoJust return the count of matching elements — no element data. Fast way to check 'how many rows?', 'how many errors?'. Combines with visible_only.
visible_onlyNoOnly return/count visible elements — filters out hidden/offscreen elements (default false). Recommended for broad selectors.

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden. It discloses the risk of large result sets and suggests mitigation, which is useful. However, it doesn't explicitly state that it's a read-only operation or describe the exact return structure, though the schema covers defaults.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the core purpose, no filler. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers purpose, usage, and a key tip, while the schema fully describes all parameters. Without an output schema, the description gives a sense of what to expect ('element state, text, visibility, values'). It's adequate for a 6-param tool with a detailed schema.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds brief context for visible_only and limit (avoid huge result sets), but doesn't add much beyond the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool queries DOM elements by CSS selector, which is a specific verb+resource. It also explains use cases (check state, text, visibility, values) and contrasts with screenshots, though it doesn't explicitly name alternative tools like browser_eval or browser_snapshot.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives clear context: use to check element state/text/visibility/values when a screenshot isn't needed. It also recommends using visible_only and limit for broad selectors, which is actionable guidance. However, it doesn't explicitly state when not to use it or name alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_restartA

Close and reopen the browser session. Use when the page is dead, crashed, or stuck after navigating to an external site. Optionally navigate to a URL immediately after restart.

NameRequiredDescriptionDefault
urlNoURL to navigate to after restart (optional)

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the burden. It discloses the core behavior of closing and reopening the browser session and adds context about when that is appropriate. It does not detail side effects like session state loss, but the action is unmistakable and the use case is described.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three short, purposeful sentences with no filler. It front-loads the core action, then adds usage guidance and parameter context, earning a top score for efficiency.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple tool with one optional parameter and no output schema, the description is largely complete: it explains the purpose, when to use it, and the optional URL behavior. A slight ambiguity remains around what happens after restart if no URL is given, but this is minor.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already documents the single optional url parameter with a clear description. The tool description reinforces it ('Optionally navigate to a URL immediately after restart') but does not add new semantic detail beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb-resource pair ('Close and reopen the browser session'), which clearly identifies the action and object. It also distinguishes itself from siblings by focusing on recovery from dead, crashed, or stuck pages rather than navigation or inspection.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states when to use the tool ('when the page is dead, crashed, or stuck after navigating to an external site') and mentions the optional navigation after restart. It does not explicitly list alternatives or when-not-to-use, but the context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_screenshotA

LAST RESORT. Returns a screenshot as base64. Expensive and unstructured. Only use when the problem is purely visual (layout, rendering glitch). Always try browser_debug and browser_query first.

NameRequiredDescriptionDefault
qualityNothumbnail: ~400px JPEG, small/fast. normal: full viewport PNG (default). fullres: full-page PNG.

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description must disclose behavioral traits itself. It does: 'Expensive and unstructured' warns about cost and output format. It could further note that it captures the current viewport (though the schema covers this via quality options), so a slight gap remains.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four short sentences, all essential: a warning, the core function, a usage condition, and an alternative directive. Front-loaded with 'LAST RESORT' to prevent misuse. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is simple (one optional param, no output schema), and the description covers its purpose, usage constraints, cost, and output format. The qualitative alternatives are explicitly named. This is complete for the tool's complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema covers the single 'quality' parameter 100% with detailed enum descriptions. The description adds no information about parameters, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Returns a screenshot as base64.' This is a specific verb and resource, and the explicit 'LAST RESORT' framing distinguishes it from sibling tools like browser_debug or browser_query.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides explicit when-to-use guidance ('Only use when the problem is purely visual') and when-not-to-use by naming alternatives ('Always try browser_debug and browser_query first'). This is exactly the kind of exclusionary context needed.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_scrollA

Scroll the page, scroll within a specific container element (e.g. AG-Grid viewport, chat panel, sidebar), or scroll an element into view. Use 'container' to scroll inside scrollable divs instead of the page.

NameRequiredDescriptionDefault
pixelsNoPixels to scroll (default: 500). Use large values like 99999 to scroll to top/bottom.
selectorNoCSS selector to scroll into view (overrides direction/pixels)
containerNoCSS selector of a scrollable container to scroll within (e.g. '.ag-body-viewport', '.chat-messages')
directionNoScroll direction (default: down)

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden of behavioral disclosure. It adds useful context about scrolling within containers versus the page, and mentions scrolling elements into view. However, it does not disclose potential side effects (e.g., whether scrolling is instant or smooth), precedence if multiple parameters are provided, or any limitations. The description is functional but not deeply transparent about edge-case behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences long and front-loaded with the primary action. Each sentence serves a purpose: the first enumerates the three scroll modes, the second explains when to use the container parameter. There is no wasted or redundant wording.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 4 optional parameters and no output schema, the description covers the three main use cases (page, container, element) well. It does not explain interactions between parameters (e.g., what happens if selector and container are both set), but the schema already describes individual parameter overrides. The description is sufficient for a browser scrolling tool, though a note about parameter precedence would make it more complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds value by clarifying the intended use of the 'container' parameter ('scroll inside scrollable divs instead of the page') and contextualizing the 'selector' parameter as 'scroll an element into view'. This enriches the schema's descriptions with real-world scenarios, particularly for container scrolling.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function with a specific verb ('scroll') and resource distinctions: page, container element (with examples), and element into view. It differentiates from sibling tools like browser_navigate and browser_act by focusing solely on scrolling behaviors. The scope is unambiguous and well-defined.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly says 'Use 'container' to scroll inside scrollable divs instead of the page,' giving clear guidance on when to use the container parameter. It does not explicitly name alternative tools like browser_eval for scrolling, but as the dedicated scroll tool, the appropriate context is implied. There is no exclusionary guidance, but the container-vs-page distinction provides actionable usage direction.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_snapshotA

Return the accessibility tree of the current page with refs attached to interactive elements (buttons, links, textboxes, checkboxes, etc.). Use this INSTEAD of guessing CSS selectors from a screenshot — selectors break on class-name churn, refs don't.

Returns { url, snapshot: [...tree], refs: [{ref, selector, role, name, testId}, ...] }.

Each ref like "e9" maps internally to a stable selector. Pass refs to browser_act: browser_act({ commands: [ { action: "fill", ref: "e42", value: "user@example.com" }, { action: "click", ref: "e9" } ]})

Every node includes testId when the element has data-testid, data-test, or data-qa — use these as additional stability anchors. Refs are invalidated automatically on navigation — re-snapshot after any browser_navigate or URL change.

Use compact: true to drop pure layout wrappers (divs/spans with no role, no testId) and return a flatter tree focused on interactive content. Recommended for noisy apps with deeply-nested div soup.

NameRequiredDescriptionDefault
compactNoDrop non-semantic wrapper elements (divs/spans without role or testId). Flattens noisy trees.
max_depthNoMax tree depth (default: 10)

TDQS

A4.9/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden and delivers. It discloses the return format, that refs map internally to stable selectors, that they invalidate on navigation, and that testId is included when present. It also explains the effect of compact:true on the tree. This is rich behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is structured with a clear purpose, return type, usage example, and edge-case notes (ref invalidation, compact). It is front-loaded with the key action and uses concise bullet-like prose; every sentence adds distinct value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

As there is no output schema, the description must and does explain the return shape, ref semantics, and the recommended companion tool (browser_act). It also covers navigation invalidation and parameter behavior, making it complete for a tool of this complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with both compact and max_depth described. The description adds practical guidance for compact—'to drop pure layout wrappers (divs/spans with no role, no testId)' and 'Recommended for noisy apps with deeply-nested div soup'—extending beyond the schema's descriptor. max_depth remains schema-only, but the additional compact context justifies a score above baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with 'Return the accessibility tree of the current page with refs attached to interactive elements,' a specific verb+resource that clearly states what the tool does. It also differentiates from siblings by explicitly advising to use it INSTEAD of guessing CSS selectors from a screenshot, distinguishing it from browser_screenshot.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states 'Use this INSTEAD of guessing CSS selectors from a screenshot' and explains that refs are stable while selectors break on class-name churn. It also instructs to pass refs to browser_act and notes that refs invalidate after navigation, providing clear when-to-use context. This is explicit guidance beyond simple purpose.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_uploadA

Upload one or more files to a file input element. Use the CSS selector to target the input and provide absolute file paths.

NameRequiredDescriptionDefault
filesYesAbsolute path(s) to the file(s) to upload
selectorYesCSS selector for the file input element

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must disclose behavior. It mentions multiple file support and absolute path requirements, adding useful context. However, it does not discuss side effects, error behavior, or whether the upload replaces existing files, leaving gaps.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the main action and clear instructions. Every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple two-parameter tool with no output schema, the description covers the essential usage. It could mention expected return values or asynchronous behavior, but it is generally complete for the tool's purpose.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema covers both parameters with descriptions, and the description reinforces the selector and file paths. It adds the 'absolute file paths' requirement and 'one or more files' context, which goes slightly beyond the schema. This provides added semantic value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool uploads files to a file input element, using a CSS selector and absolute file paths. This distinguishes it from sibling tools like browser_navigate and browser_act, as it specifically targets file uploads.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context: use when you need to upload files to a file input element. It instructs to use a CSS selector and provide absolute paths, but does not explicitly mention when not to use it or alternatives. This is solid but lacks explicit exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_wait_for_networkA

Wait for a specific network response matching URL pattern and/or method. Returns the response with status and JSON body. Use after triggering an action to wait for its API call to complete instead of guessing with wait times. url_pattern accepts a single substring OR an array of substrings (any-of match — resolves on the first matching response).

NameRequiredDescriptionDefault
methodNoHTTP method to match e.g. GET, POST
timeoutNoMax wait time in ms (default: 10000)
url_patternNoURL substring to match (e.g. '/api/documents'), or an array of substrings for any-of matching (e.g. ['/api/users', '/api/session'])

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses the any-of matching behavior for url_pattern, timeout default, and the return value (status and JSON body). It doesn't mention timeout error behavior, but the disclosed details are sufficient for a read-like wait operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the main purpose, then elaborates usage and parameter behavior. Every sentence earns its place with no redundancy or fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given three simple parameters, no output schema, and no annotations, the description covers purpose, usage, return value, and parameter semantics. It could mention error behavior on timeout, but for a straightforward wait tool, the coverage is solid.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so the baseline is 3. The description adds value beyond the schema by explaining the any-of match semantics for url_pattern arrays and confirming the timeout default, which the schema only lists without these nuances.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool waits for a network response matching URL pattern and/or method, and returns the response with status and JSON body. This specific verb+resource distinguishes it from sibling tools like browser_wait_for_url, which waits for URL navigation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It explicitly says to use after triggering an action 'instead of guessing with wait times', providing clear use context. It doesn't name alternative sibling tools explicitly, but the guidance is actionable and distinguishes from generic waiting.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_wait_for_urlA

Wait for the page URL to change and match a substring pattern. Use after actions that trigger redirects (JS redirects, auth redirects, SPA route changes). Returns current URL on timeout. Optionally chain a readiness gate via wait_for so you don't have to follow up with setTimeout/wait.

NameRequiredDescriptionDefault
exactNoIf true, match pattern as exact URL equality instead of substring (default false)
patternYesURL substring to match (or exact string if exact:true)
timeoutNoMax wait time in ms (default: 10000)
wait_forNoOptional readiness signal to wait for after the URL matches. 'load' = full load event, 'domcontentloaded' = DOM parsed, 'networkidle' = no network for 500ms. Omit for just the URL match.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses key behaviors: waits for URL change, matches substring, returns current URL on timeout (non-throwing), and optionally chains a readiness gate. It could be more explicit about whether it succeeds immediately if the URL already matches, but this is a minor gap given the usage context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four sentences, no redundant wording. Front-loaded with the core action, then usage context, timeout behavior, and optional chaining. Every sentence adds value, making it concise and well-structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the essential aspects for correct usage: what it does, when to use it, timeout behavior, and optional chaining. No output schema exists, so it doesn't need to explain return values, but it does mention the timeout return. It doesn't explicitly explain what happens on success (likely no return value), but that is a minor omission for a wait operation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% for all 4 parameters, so the baseline is 3. The description adds some contextual meaning to wait_for (readiness gate, avoiding follow-up), but doesn't add syntax or details beyond what the schema already provides for pattern, exact, timeout, and wait_for.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Wait') and resource ('page URL'), and clearly states the action: 'wait for the page URL to change and match a substring pattern.' It distinguishes itself from sibling tools like browser_wait_for_network by focusing on URL changes rather than network idle.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use: 'Use after actions that trigger redirects (JS redirects, auth redirects, SPA route changes).' This provides clear context and indicates it is a follow-up wait operation. It also suggests an alternative pattern ('so you don't have to follow up with setTimeout/wait') for chaining with wait_for, showing awareness of alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 14 tool updatesv1.5.2
    • First observedbrowser_act
    • First observedbrowser_debug
    • First observedbrowser_emulate_device
    • First observedbrowser_eval
    • First observedbrowser_fetch
    • First observedbrowser_navigate
    • First observedbrowser_query
    • First observedbrowser_restart
    • First observedbrowser_screenshot
    • First observedbrowser_scroll
    • First observedbrowser_snapshot
    • First observedbrowser_upload
    • First observedbrowser_wait_for_network
    • First observedbrowser_wait_for_url

TDQS

A4.4/5.0

Scored across 14 tools

Disambiguation5/5

Each tool has a clearly distinct purpose: navigation, action execution, debugging, DOM querying, snapshotting, waiting, screenshotting, JS eval, scrolling, restarting, uploading, network waiting, and device emulation. Even the inspection tools (debug, query, snapshot, eval) are well separated by what they return and when to use them.

Naming Consistency5/5

All 14 tools follow the consistent pattern of 'browser_' prefix followed by a lowercase verb (navigate, act, debug, query, fetch, snapshot, wait_for_url, screenshot, eval, scroll, restart, upload, wait_for_network, emulate_device). No mixing of camelCase or inconsistent verb styles.

Tool Count5/5

14 tools is within the ideal 3-15 range and each tool serves a distinct aspect of browser automation—navigation, interaction, inspection, waiting, debugging, device emulation, and file upload. The count is well-scoped for a comprehensive browser control server without being bloated.

Completeness4/5

The server covers the full lifecycle of browser interaction: navigate, act, inspect, wait, debug, screenshot, and emulate. Minor gaps exist such as no explicit dialog acceptance (alert/confirm/prompt) or tab management, but agents can work around these with browser_eval in most cases, so they are not critical dead ends.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers