bookmarks-mcp
Allows AI agents to search, browse, add, and delete bookmarks in Google Chrome by reading and modifying the local Chrome Bookmarks file.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@bookmarks-mcpsearch my bookmarks for python tutorials"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Bookmarks MCP
一个基于 FastMCP 的浏览器书签管理服务器,支持 Chrome 和 Edge 浏览器。通过 MCP 协议,让 AI 助手(如 Claude)可以搜索、浏览、添加和删除书签。
⚠️ 隐私安全警告:本项目会直接读取和修改你本地的浏览器书签文件。使用前请务必阅读下方的隐私与安全章节。
功能
工具 | 功能 |
| 按关键词搜索书签(匹配标题和 URL,不区分大小写) |
| 列出所有书签文件夹及包含的书签数量 |
| 列出指定文件夹下的书签 |
| 获取最近添加的书签 |
| 添加一条新书签 |
| 删除一条书签 |
Related MCP server: Chrome MCP Server
快速开始
安装
cd chrome-bookmanager
pip install -e .运行
# stdio 模式(Claude Desktop 默认使用此模式)
bookmarks-mcp
# 开发调试
python -m bookmarks_mcp.serverClaude Desktop 配置
编辑 claude_desktop_config.json,添加以下配置:
{
"mcpServers": {
"bookmarks-mcp": {
"command": "python",
"args": ["-m", "bookmarks_mcp.server"]
}
}
}项目结构
bookmarks-mcp/
├── pyproject.toml
├── README.md
├── src/
│ └── bookmarks_mcp/
│ ├── __init__.py
│ ├── server.py # FastMCP 入口 + 工具注册
│ ├── bookmarks/
│ │ ├── __init__.py
│ │ ├── manager.py # 通用 CRUD 操作(外观模式)
│ │ └── models.py # Pydantic 数据模型
│ ├── browsers/
│ │ ├── __init__.py
│ │ ├── base.py # 浏览器适配器基类(抽象接口)
│ │ ├── chrome.py # Chrome 适配器
│ │ └── edge.py # Edge 适配器(继承 Chrome)
│ └── utils/
│ ├── __init__.py
│ └── paths.py # 跨平台路径工具
└── tests/
├── __init__.py
└── test_chrome.py设计思路
适配器模式:
base.py定义抽象接口,chrome.py和edge.py分别实现。Edge 继承 Chrome(同为 Chromium 内核,书签格式一致),只覆盖路径和类型。外观模式:
BookmarkManager对外暴露简洁的 CRUD 接口,内部委托给具体浏览器适配器。数据模型分离:所有数据结构用 Pydantic 定义,保证类型安全。
只读优先:先从只读工具(搜索、列出)开始,稳定后再加写入功能。
支持的浏览器
浏览器 | 支持平台 | 书签文件路径 |
Google Chrome | Windows / macOS / Linux |
|
Microsoft Edge | Windows / macOS / Linux |
|
⚠️ 隐私与安全
已知隐私风险
该工具在提供便利的同时,也引入了以下隐私风险,请在使用前充分了解:
读取本地书签数据:工具会直接读取 Chrome/Edge 的书签文件(
Bookmarks),其中包含你所有保存的 URL、标题、文件夹结构和添加时间。这些数据可能包含敏感信息(如内部系统地址、个人账户页面、私密网站等)。修改书签文件:
add_bookmark和remove_bookmark工具会直接写入你的书签文件,可能导致书签数据被意外修改或删除。数据可能被发送至第三方:作为 MCP 服务器,书签数据通过 AI 客户端(如 Claude Desktop)处理后,可能会被发送到第三方 AI 服务商的服务器。你的书签 URL 和标题可能被用于模型训练或分析。
无用户确认机制:当前版本在操作书签前不会弹出确认提示,所有操作在 AI 调用时立即执行。
无访问控制:所有工具方法均可被任意调用,没有权限分级或限制机制。
安全建议
仅用于个人学习环境:建议只在本地开发和学习场景下使用,不要在生产环境或共享机器上运行。
避免在 AI 会话中搜索敏感书签:不要通过此工具搜索或浏览包含敏感信息的书签。
定期检查变更:如果启用了写入功能,建议定期检查书签文件是否被意外修改。
使用专用浏览器配置文件:考虑为 AI 工具使用单独的浏览器配置文件,与日常工作环境隔离。
阅读 AI 客户端的隐私政策:了解与你使用的 AI 客户端(如 Claude)相关的数据处理政策。
数据流说明
本地浏览器书签文件 (Bookmarks JSON)
↓ 读取
Bookmarks MCP Server (本地进程)
↓ 通过 MCP 协议 (stdio)
AI 客户端 (如 Claude Desktop)
↓ 可能发送至云端
AI 服务提供商服务器开发
# 安装开发依赖
pip install -e ".[dev]"
# 运行测试
pytest tests/ -v
# 代码检查
ruff check src/许可
MIT
Available Tools
5 toolsadd_bookmarkB
添加一条新书签。
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | 书签 URL | |
| title | Yes | 书签标题 | |
| browser | No | 目标浏览器,"chrome" 或 "edge" | chrome |
| parent_folder | No | 目标文件夹名称(留空则添加到根目录) |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden of behavioral disclosure. It only states the action without any side effects, permissions, or behavior with existing bookmarks. This is a significant gap for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single concise sentence with no wasted words. However, it is minimal to the point of under-specification, so it does not earn a 5.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With 4 parameters and a creation tool, the description is too sparse. It does not mention default folder placement, browser targeting, or any side effects. The output schema exists but does not cover behavioral context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the baseline is 3. The description adds no parameter-level detail, but each parameter has a descriptive schema entry. The description does not compensate or enhance beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description '添加一条新书签' (Add a new bookmark) clearly states the verb (add) and resource (bookmark). It is distinct from sibling tools like search_bookmarks, list_bookmarks, and recent_bookmarks, which perform different actions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description does not explicitly state when to use this tool versus alternatives, but the action is self-evident given the sibling tool names. It implies usage for creating bookmarks but lacks any exclusion or alternative guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_bookmarksB
列出指定文件夹下的书签。
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | 最多返回多少条 | |
| browser | No | 浏览器类型,"chrome" 或 "edge" | chrome |
| folder_path | No | 文件夹路径,留空则列出所有书签 |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are present, so the description carries the full burden. It does not disclose read-only behavior, whether subfolders are included recursively, how limit interacts with many bookmarks, or what happens when folder_path is null (though the schema does). The description only restates the core purpose, adding minimal behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that immediately conveys the tool's function. Every word is purposeful, and it is well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The schema and output schema cover the parameter and return details, so the description is not required to repeat them. However, the tool sits among several bookmark-related siblings, and the description fails to provide context about when this listing approach is preferred over searching or browsing recent bookmarks. It is minimally complete but lacks sibling differentiation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so the schema already documents all parameters. The description mentions 'specified folder' which aligns with folder_path but adds no additional meaning or syntax tips beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('list') and the resource ('bookmarks'), with a specific scoping condition ('under specified folder'). It distinguishes itself from siblings like search_bookmarks, recent_bookmarks, and list_folders by focusing on folder-filtered listing.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is given on when to use this tool versus alternatives. It does not mention that search_bookmarks might be better for keyword filtering, or that list_folders can be used to discover valid folder paths. The context is implied but not explicitly stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_foldersA
列出所有书签文件夹。
| Name | Required | Description | Default |
|---|---|---|---|
| browser | No | 浏览器类型,"chrome" 或 "edge" | chrome |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden of behavioral disclosure. It only states the basic action and does not mention that the browser parameter selects the browser to list folders from, nor any other behavioral traits like ordering, filtering, or side effects. This is a clear gap for a parameterized tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single clear sentence with no redundancy or filler. It is front-loaded and wastes no words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's low complexity, one optional parameter, and an existing output schema, the description is minimally adequate. However, it lacks usage guidance and behavioral context beyond the literal action, so it is not fully complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter 'browser' has a full description in the schema ('chrome' or 'edge'), providing 100% schema coverage. The description adds no additional parameter semantics, so the baseline of 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool's action: 'List all bookmark folders.' It uses a specific verb (list) and resource (bookmark folders), and it distinguishes itself from sibling tools like list_bookmarks by targeting folders specifically.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies when to use this tool (when you need bookmark folders rather than bookmarks), but it does not explicitly name alternatives or provide exclusion criteria. The context of sibling tools helps, but the description itself offers no direct guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
recent_bookmarksA
获取最近添加的书签。
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | 返回数量上限 | |
| browser | No | 浏览器类型,"chrome" 或 "edge" | chrome |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden but fails to disclose behavioral traits such as read-only nature, ordering, pagination, or any side effects. It only states what the tool does, not how it behaves.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence that is front-loaded and contains no superfluous information. Perfectly concise.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is simple and schema covers parameters, but with no annotations, the description lacks behavioral context and alternative guidance. Adequate but with clear gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with limit and browser both described. The description adds no additional semantic meaning beyond the schema, so baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description '获取最近添加的书签' (get recently added bookmarks) uses a specific verb and resource, clearly distinguishing it from siblings like list_bookmarks (all bookmarks) and search_bookmarks (search).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The context implies use for retrieving recent bookmarks, but no explicit guidance is given about when to choose this over list_bookmarks or search_bookmarks. The usage is inferred rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_bookmarksA
按关键词搜索书签,匹配标题和 URL(不区分大小写)。
| Name | Required | Description | Default |
|---|---|---|---|
| browser | No | 浏览器类型,"chrome" 或 "edge" | chrome |
| keyword | Yes | 搜索关键词 |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden. It discloses that matching is case-insensitive and covers title and URL, which is useful behavioral detail. However, it does not mention the read-only nature (though obvious for search), default browser behavior, or any potential side effects, leaving some gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, concise sentence that front-loads the verb and object. Every word contributes meaning; there is no redundancy or irrelevant content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter search tool, the description is adequately complete. It covers the core behavior, and the presence of an output schema presumably handles return-value details. A minor gap is the lack of explicit mention of the browser parameter, but this is covered in the schema.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with descriptions for both keyword and browser, setting a baseline of 3. The description adds semantic value to the keyword parameter by explaining how it is used (matching title and URL case-insensitively), going beyond the schema's simple 'search keyword'.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states a specific verb ('search') and resource ('bookmarks'), and further specifies that it matches title and URL case-insensitively. This distinguishes it from sibling tools like list_bookmarks and add_bookmark, which have different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage is implied: this is the tool to use when you need to find bookmarks by keyword. However, there are no explicit exclusions or comparisons to alternatives (e.g., when to use list_bookmarks instead). The sibling names provide context, but the description itself does not offer explicit guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v0.1.0- First observed
add_bookmark - First observed
list_bookmarks - First observed
list_folders - First observed
recent_bookmarks - First observed
search_bookmarks
TDQS
Scored across 5 tools
Each tool has a clearly distinct purpose: search across all bookmarks, list folders, list bookmarks by folder, get recent bookmarks, and add a bookmark. There is no functional overlap between them.
Most tools follow a consistent verb_noun pattern (search_bookmarks, list_folders, list_bookmarks, add_bookmark), but recent_bookmarks deviates from this pattern, as it uses an adjective rather than a verb prefix.
Five tools is well within the ideal 3-15 range for a focused server and covers the essential bookmark operations without unnecessary bloat.
The tool set supports searching, listing, and adding bookmarks, but lacks update and delete operations, as well as any folder management beyond listing. This leaves obvious lifecycle gaps for a bookmark management domain.
Maintenance
Related MCP Connectors
A comprehensive Model Context Protocol (MCP) server that enables AI assistants to interact with yo…
Search your AI chat history (ChatGPT, Claude, Codex) from any MCP client. Remote, private, read-only
Live browser debugging for AI assistants — DOM, console, network via MCP.
Your memory, everywhere AI goes. Build knowledge once, access it via MCP anywhere.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceAn MCP Server that enables AI assistants to interact with your local browsers.1,843 npm53MIT
- AlicenseNot gradedqualityDmaintenanceAn extension-based MCP server that enables AI assistants to control your browser, leveraging existing sessions and login states for automation and content analysis. It provides over 20 tools for semantic tab search, interactive element manipulation, and network monitoring directly within your daily Chrome environment.MIT
- AlicenseNot gradedqualityNot gradedmaintenanceAn extension-based MCP server that enables AI assistants to control your existing Chrome browser, leveraging your active login states and settings for automation. It provides over 20 tools for tasks like semantic tab search, screen capture, network monitoring, and direct element interaction.-
- AlicenseNot gradedqualityDmaintenanceA Model Context Protocol (MCP) server implementation that provides seamless integration between Chrome bookmarks and AI assistants. This server enables AI models to access, search, analyze, and manage Chrome bookmarks through a standardized protocol.2MIT