Skip to main content
Glama
vKongv

Chrome Browser Control

by vKongv

Chrome Browser Control

npm version Node.js License: MIT

Local Chrome-profile control for stdio MCP hosts.

This project exposes browser-control MCP tools through a Manifest V3 Chrome extension connected to a loopback WebSocket broker. Configure your MCP host to launch the stdio adapter with the same pairing token you enter in the extension.

Repository: https://github.com/vkongv/chrome-browser-control

Prerequisites

  • Node.js 20+

  • Google Chrome

Related MCP server: Real Browser MCP

Install and Setup

Preferred path: install the CLI, then run setup.

npm install -g chrome-browser-control
# or, without a global install:
npx -y chrome-browser-control setup

The CLI installs as cbctl (preferred short name) and also as chrome-browser-control.

cbctl setup
cbctl start
cbctl doctor

setup writes ~/.chrome-browser-control/config.env (pairing token + port), copies the unpacked extension to ~/.chrome-browser-control/extension, and prints MCP host snippets. Do not commit that directory.

Agent skill (separate from npm)

The runtime agent skill under skills/chrome-browser-control/ is not shipped inside the npm package. After installing the CLI, obtain the skill from this repository (or skills.sh) if your agent host uses skills.

CLI commands (cbctl or chrome-browser-control):

Command

Purpose

cbctl setup

Create user config and install the extension copy

cbctl start

Start the shared loopback broker

cbctl stop

Stop the broker

cbctl status

Show broker / config status

cbctl doctor

Local setup checker

cbctl mcp

Stdio MCP adapter (attach-only by default)

cbctl mcp-config

Print host-specific MCP snippets

cbctl broker

Run the broker in the foreground (dev)

From a git checkout (contributors):

git clone https://github.com/vkongv/chrome-browser-control.git
cd chrome-browser-control
npm install
npm run build
node dist/cli/main.js setup

Repo-local npm run broker / npm run mcp remain available for development against TypeScript sources (with optional repo .env.local).

Environment Variables

  • CHROME_BROWSER_CONTROL_TOKEN — Required. High-entropy pairing token shared by the broker, MCP adapter, and extension popup.

  • CHROME_BROWSER_CONTROL_PORT — WebSocket broker port (default 8765).

  • CHROME_BROWSER_CONTROL_HOST — Loopback host for the broker (default 127.0.0.1).

  • CHROME_BROWSER_CONTROL_EXTENSION_ID — Optional. Pins the broker to one installed extension ID.

  • CHROME_BROWSER_CONTROL_AUTOLOAD — Optional. Set to 1 so mcp may spawn a broker if none is reachable (recovery). Prefer cbctl start for normal use.

  • CHROME_BROWSER_CONTROL_DISABLE_LOCAL_ENV — Optional. Set to 1 to skip loading repo .env.local.

User config lives under ~/.chrome-browser-control/ and is loaded before any repo .env.local. Process env always wins.

MCP attach-only default: cbctl mcp connects to an already-running broker. Start the broker with cbctl start first. For recovery, use cbctl mcp --autoload or CHROME_BROWSER_CONTROL_AUTOLOAD=1.

Load The Extension

  1. Open Chrome with the profile you want the MCP tools to control.

  2. Go to chrome://extensions.

  3. Enable Developer mode.

  4. Click "Load unpacked".

  5. Select ~/.chrome-browser-control/extension (printed by setup). Contributors editing sources may load extension/ from the repo instead.

  6. Open the Chrome Browser Control extension popup.

  7. Keep the bridge URL at ws://127.0.0.1:8765 unless you changed the local port.

  8. Paste the generated pairing token.

  9. Add allowed origins such as https://example.com, http://localhost:3000, or * for all normal http:// and https:// pages.

  10. Click "Save and reconnect".

The extension may ask for host permission for the allowed origins. Denying that request prevents page actions for those origins.

Using * is convenient for local development, but it exposes every normal web page in the current Chrome profile to MCP tools. Prefer explicit origins when you only need a few sites. Wildcard mode also asks for the optional <all_urls> host permission so Chrome allows visible-viewport screenshots through chrome.tabs.captureVisibleTab; the background still blocks non-http(s) URLs and disallowed origins before capture.

MCP Host Configuration

Paste a snippet from cbctl setup (or mcp-config) into Cursor, Claude Desktop, Codex, or another stdio MCP host. To print host-specific config again later:

cbctl mcp-config --host cursor
cbctl mcp-config --host claude
cbctl mcp-config --host codex
cbctl mcp-config --host yaml

The MCP server key is chrome_browser_control. The adapter command is the installable CLI (cbctl preferred) with args: ["mcp"] — not tsx against server/index.ts.

YAML-style example:

mcp_servers:
  chrome_browser_control:
    command: "cbctl"
    args: ["mcp"]
    env:
      CHROME_BROWSER_CONTROL_TOKEN: "<generated-token>"
      CHROME_BROWSER_CONTROL_PORT: "8765"
    timeout: 60
    connect_timeout: 30

JSON-style example:

{
  "mcpServers": {
    "chrome_browser_control": {
      "command": "cbctl",
      "args": ["mcp"],
      "env": {
        "CHROME_BROWSER_CONTROL_TOKEN": "<generated-token>",
        "CHROME_BROWSER_CONTROL_PORT": "8765"
      }
    }
  }
}

If the CLI is not on PATH, use the NPX fallback printed by setup: npx with args: ["-y", "chrome-browser-control", "mcp"].

If your MCP host uses a config file, keep it private and outside the repository.

Verify

  1. Start the broker: cbctl start

  2. Run the setup checker: cbctl doctor

  3. Confirm from your MCP host by calling the browser_status tool. When ready, extension.status and ping.status should reflect a live bridge connection, and extension.allowedOrigins should show your configured scope.

Tools

  • browser_status: checks whether the MCP adapter can reach the broker and whether the Chrome extension answers ping. When ready, extension.status and ping.status reflect the live bridge connection (not a stale disconnected default), extension.allowedOrigins shows the configured scope (including * (all http/https web origins) when wildcard mode is enabled), extension.session shows session name/claimed tabs, extension.cdpEnabled / extension.attachedTabs report the trusted-input tier, and protocolVersion / features confirm the loaded unpacked extension code. Protocol version 7 includes the cdp-trusted-input feature marker.

  • name_session: sets a human-readable session name for status/debugging.

  • list_tabs: lists tabs whose URL origin is allowed in the extension popup. When every open tab is filtered out, returns { tabs: [], detail, hiddenTabCount, allowedOrigins? } instead of a bare []. Wildcard mode is labeled clearly in allowedOrigins.

  • list_frames: lists current frame documents for an allowed tab using Chrome's frame registry. Operable active HTTP(S) documents include a documentId; policy-blocked, host-permission-denied, unsupported, fenced, and non-active rows retain hierarchy/status only and redact URL and document identity.

  • claim_tab: claims an allowed tab for this browser-control session and returns a sessionTabId. Claims are routing state, not exclusive browser locks.

  • release_tab: releases a claim by sessionTabId or tabId without closing the tab.

  • finalize_tabs: releases claim state for the session without closing tabs. Pass keep entries to preserve handoff/deliverable claims. Also detaches CDP attachments on every claimed tab, including kept claims.

  • cdp_attach: attaches trusted input to a claimed tab (sessionTabId required). Off by default until the popup enableCdp checkbox is on. The debugger permission is required in the manifest; Chrome shows a warning at load. Chrome shows a persistent debugging banner on the attached tab. While attached, click, type, keypress, click_at, and matching perform_actions steps use CDP. Calling cdp_attach again on the same tab refreshes the TTL without tearing down the live socket. Cross-origin iframe clicks fail with CDP_CROSS_ORIGIN_FRAME; detach or use a same-origin/top document.

  • cdp_detach: detaches trusted input and returns those tools to the content-script path without releasing the claim.

  • cdp_network_watch: enables Network on an attached tab and keeps an in-memory metadata index (requestId, url, method, status, mimeType, size, timestamp). No bodies are stored. Restricted-category origins never enter the index.

  • cdp_network_requests: returns that index.

  • cdp_response_body: reads one body by requestId after an allowlist and denylist check. Binary bodies are refused. Bodies over the size cap return an error, never a truncated body. Token-shaped fields receive best-effort masking, which is not a guarantee. Treat every body as credential-bearing. Response headers, Set-Cookie, and request post data are never returned.

  • snapshot: returns a simplified DOM snapshot for an allowed document. By default this is a compact automation snapshot that includes concise actionable elements, a text preview (500 chars), omitted counts, and region summaries. Compact defaults to main-landmark scope when present; a visible modal dialog (aria-modal="true" or <dialog> opened with showModal()) takes that scope instead. Other visible role="dialog" nodes are included in the current scope and do not steal it. Hidden or closed dialogs have no effect. Pass scope: "document" for the full body (including the page behind a modal), ignoreRoles: ["dialog"] or ["alertdialog"] to hide both dialog and alertdialog, ignoreRoles: [] to include them in the current scope, or mode: "full" for the unscoped legacy snapshot. Pass mode: "visible" for viewport/intersection-aware elements with bounds and scroll metadata. Pass textLimit (up to 100000) when you need more page body text — check textBytesOmitted to see if content was truncated.

  • visible_snapshot: convenience tool for snapshot({ mode: "visible" }).

  • navigate: navigates the active tab or a specified tabId to an allowed URL, then waits for the tab to finish loading when possible. By default focus is unchanged (background tabs stay in the background; the focused tab is not deactivated). Pass active: true only when the tab must become visible. If loading times out, the result includes pending: true and a warning. Supports after observations after the load wait.

  • activate_tab: focuses an allowed tab and its Chrome window without changing the URL. It waits until the document reports visibilityState: "visible" or a short timeout elapses, then returns visibilityState and visible along with active and focused. When visible is false, the result also includes reason (hidden, unknown, host_permission_denied, or document_unavailable). focused is not a success signal — a window can stay unfocused on macOS while the document still becomes visible. Use this when click/type/keypress fail with DOCUMENT_HIDDEN, or when the tab is already active in an unfocused window. Pass allowHidden: true only when visibilityState is hidden. If reason is host_permission_denied or document_unavailable, grant host permission or reload the tab; allowHidden will not help. screenshot.activated only reports whether the tab was made active in its window — not whether the window was focused or the document became visible.

  • click: clicks an element by snapshot ref on an allowed tab. Fails with DOCUMENT_HIDDEN when the document is hidden unless allowHidden: true. Supports after observations.

  • type: types into an element by snapshot ref on an allowed tab. Password-like fields are blocked unless force=true. Fails with DOCUMENT_HIDDEN when the document is hidden unless allowHidden: true. Supports after observations.

  • scroll: scrolls an allowed tab by deltaX and deltaY. Optional x/y viewport coordinates scroll a scrollable element under that point when one is found. Scrolling does not paginate snapshot text — snapshots use full document.body innerText. Raise textLimit on snapshot instead of scroll-stitching unless the page lazy-loads content. Supports after observations.

  • query_elements: returns bounded refs/roles/labels/bounds for elements filtered by CSS selector, role, text, and visibility.

  • extract_elements: extracts bounded text/html/links/time data from a CSS selector. HTML extraction redacts password/OTP/hidden-token attribute values and marks sensitive items instead of leaking secret values. This is the supported alternative to raw JavaScript evaluation.

  • screenshot: captures the visible viewport of an allowed tab as a data URL. Optional ref or bounds (+ padding) crop after capture; empty crops fail before captureVisibleTab. Uncropped responses omit crop fields. MV3 capture is viewport-only; inactive target tabs may be activated before capture. Chrome requires <all_urls> or activeTab for captureVisibleTab; this extension requests optional <all_urls> only in wildcard (*) mode, so wildcard screenshots need that popup grant.

  • keypress: dispatches common DOM keyboard events to the page. Browser/OS-level shortcuts are not guaranteed under MV3. Fails with DOCUMENT_HIDDEN when the document is hidden unless allowHidden: true. Supports after observations.

  • click_at: dispatches mouse events at viewport coordinates. Fails with DOCUMENT_HIDDEN when the document is hidden unless allowHidden: true. Supports after observations.

  • wait_for: waits for bounded selector/text/URL-substring conditions and returns match/timeout evidence.

  • page_status: returns title, URL, ready/visibility state, viewport/scroll state, and resource counts by initiator type. It does not expose request headers or response bodies.

  • console_logs: returns bounded console logs captured after the content script was injected. It cannot see older page console history.

  • collect_scroll: scrolls a bounded number of steps (hard ceiling when until is set), extracts selected elements each step, optionally targets a nested scroll container via scroll, applies an aggregate item cap (maxItems, default 100), and optionally dedupes by text or href for lazy feeds. Optional until.noNewItemsForSteps / until.stopBeforeDatetime (ISO-8601; requires includeTimes) set stoppedReason. Results include omitted/truncated counts. Supports after observations.

  • perform_actions: runs up to 10 sequential page actions (click, type, scroll, keypress) in one broker round-trip. Fail-fast on the first step error; terminal after observations run only when every step succeeds. Click, type, and keypress steps fail with DOCUMENT_HIDDEN on hidden documents unless that step sets allowHidden: true. Scroll steps stay unguarded. Coordinate clicks stay on single-tool click_at. Steps cannot carry after, tabId, or sessionTabId.

Frame document targeting

DOM/content tools accept an optional documentId returned by list_frames. Omitting it preserves existing behavior and targets the current top document for each operation. Supplying it selects that exact document: if the iframe navigates, disappears, moves to another tab, becomes unsupported, or loses access, the operation fails instead of falling back to the top frame or a replacement using the same frameId.

Every content result carries background-attested documentId, frameId, isTopFrame, and coordinateSpace. Top-frame coordinates use tabViewport; iframe visible_snapshot bounds, click_at, and coordinate scrolling use frameViewport. Iframe-local bounds cannot be passed to screenshot cropping because screenshot remains a tab-viewport-only tool. navigate, activate_tab, screenshot, and list_frames accept tab targets only; perform_actions.documentId applies to the whole batch and cannot be overridden by a step.

Document failures preserve one of these prefixes, including inside batch step errors and after failures: DOCUMENT_STALE:, DOCUMENT_POLICY_DENIED:, DOCUMENT_HOST_PERMISSION_DENIED:, or DOCUMENT_UNSUPPORTED:. V1 supports only active HTTP(S) outermost/subframe documents. It intentionally excludes about:blank, about:srcdoc, blob:, data:, origin-fallback frames, iframe navigation, and iframe-to-tab screenshot coordinate translation.

Act Then Observe

The action tools navigate, click, type, scroll, keypress, click_at, collect_scroll, and perform_actions accept an optional after object. The extension removes after before sending the base action to the content script, then runs requested observations in this fixed order: waitFor, snapshot, pageStatus. The response is the base action result plus an after object with the observation results.

For perform_actions, after applies to the whole batch only: individual steps cannot include after, and terminal observations are skipped when any step fails. Partial batch failures return structured step results with failedIndex and completedCount while preserving bridge-level success so agents can inspect the payload.

{
  "ref": "h12",
  "after": {
    "waitFor": { "selector": ".results", "timeoutMs": 5000 },
    "snapshot": { "mode": "visible", "limit": 40 },
    "pageStatus": true
  }
}

after.waitFor must include at least one of text, selector, or urlIncludes; timeoutMs is optional and capped at 20000 so the full act-then-observe chain stays within the default broker request timeout. after.snapshot may be true for default snapshot options or an object with mode, textLimit, and/or limit. Invalid after requests are rejected before the base action runs.

If the base action succeeds but an after observation fails, the response still includes the base action result and sets after to { "ok": false, "error": "..." }.

Snapshot Modes And Refs

Default compact snapshots are designed to reduce model-context usage while preserving browser automation. A compact snapshot looks like:

{
  "title": "Example Domain",
  "url": "https://example.com/",
  "mode": "compact",
  "elements": [{ "ref": "h1", "role": "link", "label": "Learn more" }],
  "omittedElements": 0,
  "textPreview": "Example Domain ...",
  "textBytesOmitted": 0,
  "regions": []
}

Use full mode only when you need the legacy verbose element metadata:

{ "mode": "full", "tabId": 123 }

Use visible mode for viewport-bound work, virtualized pages, and click-coordinate planning:

{ "mode": "visible", "sessionTabId": "tab-1" }

To read long page content (for example API docs), raise textLimit instead of using broker scripts or CDP workarounds:

{ "mode": "full", "textLimit": 100000, "tabId": 123 }

Compact mode honors textLimit too; body text is returned in textPreview (there is no text field in compact mode). When textBytesOmitted is greater than zero, increase textLimit or scroll the page and snapshot again only if content is lazy-loaded below the fold.

When a visible genuinely-modal dialog is open (aria-modal="true", or a <dialog> shown with showModal() — the open attribute alone is not enough), compact snapshots set scopeApplied to dialog and read that dialog instead of the page behind it. role="alertdialog" uses the same modal predicate; without aria-modal or :modal it does not take scope. A top-document snapshot does not see a modal inside an iframe — pass that frame's documentId. The same scope, ignoreRoles, and mode escape hatches listed on snapshot still apply.

Refs are per-document in-memory IDs (h...) assigned from element identity, not output order. They remain stable across DOM insertion/reorder in the same document, and click / type resolve through the content script's ref store. Refs can collide between frame documents, so retain the result's documentId and pass it with later iframe actions. Navigating to a different page loads a new document, so old refs are expected to fail cleanly; take a fresh snapshot after navigation or major page changes. The ref store prunes disconnected, expired, and over-cap entries, and removes stale data-cbc-ref attributes so pruned refs cannot be reused accidentally.

Tab Sessions

Prefer claim_tab before multi-step browser work:

{ "tabId": 123 }

The returned sessionTabId can be passed to snapshot, navigate, activate_tab, click, type, scroll, query_elements, extract_elements, screenshot, wait_for, and related page tools. If a session has a current claim, page actions without an explicit tabId or sessionTabId route to that claim. If no claim exists, legacy active-tab fallback remains.

Claims are advisory MCP routing state only. They do not stop the user from changing, closing, or navigating a tab. Use release_tab or finalize_tabs when a task is complete; neither tool closes browser tabs.

Development Checks

npm test
npm run build
cbctl doctor
# or: node dist/cli/main.js doctor
npm run benchmark:compact-snapshots
npm audit

npm run benchmark:snapshots is an alias for the same compact-vs-full benchmark. The benchmark prints compact bytes, full bytes, and reduction percentage; compact mode should stay at least 50% smaller on the dense fixture.

After editing files under extension/, run npm run build, run cbctl setup, then reload the unpacked extension on chrome://extensions before running browser e2e checks. After adapter/server changes, rebuild and restart the MCP host too. A stale loaded background service worker or tool catalog can keep serving older behavior; browser_status should report adapter.registeredToolCount: 30, extension protocol version 7, and the cdp-trusted-input feature marker when both sides are current.

Limitations

  • This is a prototype with a shared local token, not multi-user authentication.

  • Browser tool calls are serialized globally at the broker.

  • Content scripts use DOM snapshots, not the full Chrome accessibility tree.

  • Refs are document-scoped in-memory handles. Run snapshot again after navigation, reloads, major DOM changes, or stale-ref errors.

  • Visible screenshots are viewport-only. Capturing an inactive tab may activate it because Chrome MV3 captures the visible tab in a window.

  • Chrome screenshot capture requires <all_urls> or activeTab. This project requests optional <all_urls> as a host permission only for wildcard screenshots. If screenshot reports that this permission is missing, reload the extension after manifest updates, open the popup, save settings, and grant the prompt.

  • keypress and click_at use DOM events unless the tab is CDP-attached. After cdp_attach, they use trusted CDP input (isTrusted: true). They still do not guarantee privileged browser or OS shortcuts.

  • Console logs are captured only after content script injection and are bounded.

  • Resource summaries are counts from the Performance API only; request headers, cookies, storage, history, bookmarks, and downloads are intentionally not exposed. Response bodies are not available through page_status.

  • Browser history, bookmark, download, and cookie tools are intentionally not exposed.

Security

  • No default token is accepted. Set CHROME_BROWSER_CONTROL_TOKEN to a high-entropy URL-safe value for both the broker and MCP adapter, then paste the same value into the extension popup.

  • The broker binds only to loopback hosts: 127.0.0.1, localhost, or ::1.

  • The extension only connects to ws://127.0.0.1, ws://localhost, or ws://[::1] with an optional port.

  • Page access is limited by allowed origins configured in the popup. Use explicit entries such as https://example.com, or enter * to allow all normal http:// and https:// web pages. Tabs and page actions outside the configured scope are blocked.

  • Allowed-origin checks happen in the extension background before content actions, screenshots, and tab claims.

  • Password-like and OTP fields are detected by input type, autocomplete, names, IDs, labels, and placeholders. type blocks them unless force=true.

  • Optional CHROME_BROWSER_CONTROL_EXTENSION_ID pins the broker to one installed extension ID.

  • Trusted CDP input is opt-in and off by default. The debugger permission is required in the manifest, so Chrome shows a warning when the extension loads. The extension always holds debugger capability; it cannot be revoked without uninstalling. Enable the popup enableCdp toggle, claim the tab, then call cdp_attach. The debugging banner on attached tabs is expected. Attach is gated by that stored flag plus a claimed tab plus the existing allowed-origins list; the method allowlist is Input.dispatchMouseEvent, Input.dispatchKeyEvent, Network.enable, Network.disable, and Network.getResponseBody. Response-body reads are a separate deny-by-default allowlist in the popup; that list does not accept *. Restricted categories (banking, wallet, password manager) are refused even when listed. This is an opt-in debugging tier for someone who understands what they pointed it at. It is not safe to switch on and leave on. The socket fails closed on service-worker suspension, navigation away from an allowed origin, DevTools eviction, the popup toggle turning off, and Allowed Origins changes that leave the tab outside the list. Hydration never treats another debugger's attached target as this extension. The MCP adapter does not open a raw CDP socket.

Never bind the broker to a non-loopback interface or commit tokens, local config files, logs, or personal setup notes.

Maintainer publish

First public npm releases are manual. Maintainers follow docs/publish-checklist.md. Do not add auto-publish-on-push or long-lived npm tokens in CI for the default release path.

Available Tools

30 tools
activate_tabActivate Chrome tabA

Focus an allowed tab and its window without navigating. Waits until the document reports visibilityState visible or a short timeout elapses. Returns visibilityState and visible; reason is present only when visible is false. focused is not success. Use this when click/type fail with DOCUMENT_HIDDEN. Pass allowHidden=true only when visibilityState is hidden. If reason is host_permission_denied or document_unavailable, grant permission or reload; allowHidden will not help. Does not change the page URL.

ParametersJSON Schema
NameRequiredDescriptionDefault
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden and does so thoroughly. It discloses the waiting behavior (timeout), the return fields (visibilityState, visible, reason), the fact that 'focused is not success', and that it does not change the URL. It also covers permission-denied and document-unavailable scenarios.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, well-structured paragraph that front-loads the core purpose, then covers conditions, usage, and caveats. Every sentence adds value and there is no redundancy. It is concise while being comprehensive.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Despite no output schema and no annotations, the description covers the essential behavior, return values, error reasoning, and usage constraints. It leaves no critical gap for an agent to call the tool correctly, given the tool's moderate complexity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters (tabId and sessionTabId) are already documented in the schema, including the default resolution order. The description does not add parameter-specific detail beyond the schema, so a baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Focus') and resource ('an allowed tab and its window') and explicitly distinguishes from navigation ('without navigating'). It also mentions the context of failure (DOCUMENT_HIDDEN), making it clear what the tool does and how it differs from siblings like navigate.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit when-to-use guidance ('Use this when click/type fail with DOCUMENT_HIDDEN') and when-not-to-use allowHidden ('Pass allowHidden=true only when visibilityState is hidden'), plus troubleshooting for specific reason codes. It clearly tells the agent when to choose this tool over alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

browser_statusBrowser bridge statusA

Check whether the MCP adapter can reach the local broker and whether the Chrome extension answers ping. Read nextAction for onboarding coaching. When the extension answers, also read cdpEnabled and attachedTabs for the trusted-input tier.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.9/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description itself carries the transparency burden. It clearly frames the operation as a read-only status/check action: 'check whether', 'read nextAction', and 'read cdpEnabled and attachedTabs'. It does not go into failure details or permissions, but the behavioral intent is transparent and not misleading.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three short sentences with no filler. The first sentence states the core purpose, and the next two sentences add useful read-field context. The content is front-loaded and every sentence contributes to the agent's decision to invoke the tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a low-complexity, no-parameter status tool with a straightforward goal. The description covers the purpose and names the key response fields to inspect (nextAction, cdpEnabled, attachedTabs), which respects the lack of an output schema. It does not mention failure modes or field types, but those are not critical at this complexity level.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has zero parameters and the schema description coverage is 100%, so there are no hidden parameters to document. Baseline for zero-parameter tools is 4, and the description adds no malformed parameter claims. It instead hints at response fields rather than input field, which is appropriate here.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a concrete action: checking adapter-to-broker connectivity and whether the Chrome extension answers a ping. It names the specific resource (browser bridge status) clearly. It does not explicitly differentiate itself from sibling tools like page_status, but the broker/extension focus makes the purpose distinct enough.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides some usage context: use it for broker/extension readiness and read nextAction for onboarding coaching. It also gives a conditional instruction to read cdpEnabled and attachedTabs when the extension responds. However, it does not explicitly say when to prefer this tool over siblings such as page_status or list_tabs, nor does it give exclusion guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

cdp_attachAttach trusted CDP inputA

Attach trusted CDP input to a claimed tab. While attached, click, type, keypress, click_at, and matching perform_actions steps use trusted CDP input. Requires the popup enableCdp toggle, a claimed tab, and an allowed origin. The debugger permission is required in the manifest. Chrome shows a debugging banner on the tab. Repeating attach on the same tab refreshes the TTL without tearing down the socket.

ParametersJSON Schema
NameRequiredDescriptionDefault
ttlMsNoAuto-detach TTL in milliseconds. Defaults to 600000 (10 minutes).
sessionTabIdYesClaimed tab session id returned by claim_tab.

TDQS

A4.5/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries full behavioral burden. It discloses multiple operational details: required popup toggle, claimed tab, allowed origin, debugger permission in manifest, Chrome debugging banner, and that repeating attach refreshes TTL without socket teardown. This goes well beyond the schema and gives the agent a realistic expectation of side effects.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is four sentences, each adding value: the action, prerequisites, permission/banner, and TTL refresh behavior. It is front-loaded with the core purpose and avoids redundancy. No filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (requires multiple prerequisites, has permissions and side effects), the description covers all necessary context: what it does, when it's valid, required permissions, and behavior on repeat. It doesn't cover error cases or return values, but there's no output schema, and the description is sufficient for an agent to decide when and how to invoke it.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so both parameters (ttlMs and sessionTabId) are already well-documented with meanings and defaults. The description adds the TTL refresh behavior on repeat attach, which is useful but is more of a behavioral note than parameter semantics. It doesn't add new meaning to the parameters themselves, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('attach') and resource ('trusted CDP input') to a claimed tab, clearly distinguishing it from siblings like cdp_detach (detach) and claim_tab (claim). It also states the effect: while attached, certain steps use trusted CDP input. This is unambiguous and non-tautological.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives explicit prerequisites (popup enableCdp toggle, claimed tab, allowed origin) and notes the debugger permission and Chrome banner. It does not explicitly name alternatives or state when not to use it, but the context is clear enough that an agent can infer this is the tool to attach CDP input, versus cdp_detach for detaching. It's more than implied but lacks explicit when-not guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

cdp_detachDetach trusted CDP inputB

Detach trusted CDP input from a claimed tab and return click/type/keypress to the content-script path. release_tab and finalize_tabs also detach, including kept finalize claims.

ParametersJSON Schema
NameRequiredDescriptionDefault
tabIdNo
sessionTabIdNo

TDQS

B3.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It explains the transformation (input returns to content-script path) and a notable nuance about finalize_tabs and kept claims. It doesn't mention preconditions like whether the tab must be claimed, or failure states, but the core behavior is transparent.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two terse sentences. The first gets straight to the action; the second adds necessary sibling context without redundancy. No filler, and the key concept is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has no annotations and no output schema, so the description must supply most of the context. It is thin on parameters, prerequisites, return values, failure behavior, and assumes prior knowledge of internal concepts like 'trusted CDP input', 'claimed tab', and 'finalize claims'.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 0% and the description never mentions tabId or sessionTabId. 'Claimed tab' hints at tabId's role, but sessionTabId is entirely unexplained, and there is no guidance on which parameter is needed or how they interact.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear verb ('Detach'), resource ('trusted CDP input'), and effect ('return click/type/keypress to the content-script path'). It also names sibling detaching tools, helping distinguish them, though it doesn't articulate the exact selection difference between them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when this tool is relevant (when detaching trusted CDP input while preserving the content-script path) and notes that release_tab and finalize_tabs also detach. However, it gives no explicit conditions for choosing one over the other, nor any 'when not to use' guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

cdp_network_requestsList watched network requestsA

Return the in-memory network request index for an attached tab. Rows are metadata only. Response headers, Set-Cookie, and request post data are never included.

ParametersJSON Schema
NameRequiredDescriptionDefault
sessionTabIdYesClaimed tab session id returned by claim_tab.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden, and it delivers: 'in-memory' signals ephemerality, 'Rows are metadata only' sets expectations about data richness, and the explicit exclusions prevent the agent from assuming headers or bodies are present. It does not cover failure modes or whether an active watch is required, but the disclosed traits are genuinely useful beyond the schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences totaling roughly 27 words, with the primary action front-loaded and the exclusions following logically. Every sentence earns its place; there is no filler or repetition of the title.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple one-parameter list tool, the core behavior and data boundaries are well covered. The main gap is that with no output schema, the description does not specify which metadata fields each row contains (URL, status, timing), leaving the agent to guess at the row structure.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% — sessionTabId is fully documented as 'Claimed tab session id returned by claim_tab.' The description adds nothing about the parameter itself, but the schema is doing the heavy lifting, so the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific verb ('Return'), resource ('in-memory network request index'), and scope ('for an attached tab'), which is further reinforced by the title 'List watched network requests'. The explicit exclusions ('Response headers, Set-Cookie, and request post data are never included') delineate it from cdp_response_body, so an agent can distinguish it from siblings without opening any schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context: use it to retrieve the metadata-level network request index for an attached tab. The 'never included' phrasing acts as a when-not boundary (do not use if you need headers, cookies, or post data), but it does not explicitly name an alternative tool like cdp_response_body or note the prerequisite of cdp_network_watch.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

cdp_network_watchWatch network requestsA

Enable the Network domain on an attached tab and keep an in-memory index of metadata rows only (requestId, url, method, status, mimeType, size, timestamp). No response body is read or stored. Restricted-category origins never enter the index. Requires cdp_attach. Optional patterns narrow which URLs are indexed.

ParametersJSON Schema
NameRequiredDescriptionDefault
patternsNoOptional URL prefixes or globs. Omitted means every non-denylisted request is indexed.
sessionTabIdYesClaimed tab session id returned by claim_tab.

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations exist, so the description carries the transparency burden. It discloses that only metadata is indexed, that no response body is read/stored, and that restricted-category origins never enter the index. This covers the key safety- and privacy-relevant behaviors. It does not mention whether the watch persists across navigations or how to stop it, but the disclosed traits are substantial.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Five sentences, each earning its place: purpose, exclusions, behavioral constraints, prerequisite, and optional parameters. The key purpose is front-loaded and clarifies scope immediately. Slightly longer than the terse 2-sentence examples but not padded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

This is a moderately complex tool with no output schema or annotations. The description explains the intended lifecycle, captures safety behavior, and names the prerequisite (cdp_attach). It doesn't describe its return value or how to stop/clear the index, but the core invocation rules and constraints are present and sufficient for correct use.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and the description adds no new parameter-level semantics beyond what the schema already provides. The description repeats that optional patterns narrow URLs but does not add format details, defaults, or interaction rules; thus the baseline of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names the specific verb ('Enable the Network domain') and the resource ('an attached tab') and states it keeps an in-memory index of metadata. It also explicitly says 'No response body is read or stored', which distinguishes it immediately from cdp_response_body and cdp_network_requests.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description states 'Requires cdp_attach' and explains optional patterns narrow indexing, but does not explicitly say 'use cdp_network_requests to retrieve this index' or 'do not use when you need response bodies'. Since the sibling tools make the relationship inferable, this is clear context without full alternatives.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

cdp_response_bodyRead one response bodyA

Read one response body by requestId from an attached tab. Deny by default: the request origin must be in the popup body-capture allowlist, which does not accept *. Restricted-category origins are refused even when listed. Binary bodies (base64Encoded) are refused. Bodies over the size cap return an error, never a truncated body. Token-shaped JSON fields receive best-effort masking of obvious token-shaped fields, not a guarantee — treat any response body as if it contains credentials. Response headers, Set-Cookie, and Network.getRequestPostData are never exposed. Each successful read is recorded to an append-only metadata log; body content is never written there.

ParametersJSON Schema
NameRequiredDescriptionDefault
requestIdYesrequestId from cdp_network_requests.
sessionTabIdYesClaimed tab session id returned by claim_tab.

TDQS

A4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It thoroughly covers allowlist denials, restricted-origin refusal, binary-body refusal, size caps, token-mask limitations, header/non-body data never being exposed, and the append-only metadata log. This goes far beyond a simple mutation warning and gives the agent a realistic security model.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense and front-loaded with the core purpose, then enumerates every consequential constraint. Every sentence adds a meaning, such as allowlist, binary limits, size cap, masking, and metadata logging. It is longer than minimal but justifies its length given the tool's security-critical behavior.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema and a non-trivial CDP response body tool, the description should explain what the agent will receive on success and failure. It details many error/denial behaviors but never tells the shape of a successful body (e.g., text content, JSON object, or raw bytes). There is enough behavioral context for safe invocation, but the missing return contract is a real gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already describes both parameters completely: requestId is from cdp_network_requests and sessionTabId is a Claimed tab session id returned by claim_tab. With 100% schema coverage, the description adds no additional parameter-specific detail, so the baseline of 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific action and resource: 'Read one response body by requestId from an attached tab.' This clearly differentiates it from siblings like cdp_network_requests and cdp_network_watch, and the title 'Read one response body' reinforces the exact scope.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies when to use the tool by stating it operates on a requestId from an attached tab and under an explicit allowlist, but it does not directly compare to sibling tools or state when not to use it. There is no explicit routing such as 'use cdp_network_requests first' or 'prefer this over cdp_network_watch for single body reads.' Use is inferable but not explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

claim_tabClaim Chrome tabA

Claim an allowed Chrome tab for this browser-control session. Advisory claims are default. Use exclusive=true with ttlMs for fail-fast tab leases across parallel agents.

ParametersJSON Schema
NameRequiredDescriptionDefault
ownerNoOptional human-readable owner label for conflict diagnostics.
tabIdYes
ttlMsNoExclusive lease TTL in milliseconds. Defaults to 300000 (5 minutes).
exclusiveNoWhen true, acquire an exclusive lease on this tab until expiry or release.

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure. It adds context about advisory default and exclusive lease behavior with TTL, which is valuable. However, it does not mention side effects, failure modes (e.g., what happens if the tab is already exclusively claimed), or the non-destructive nature of claiming. The description gives partial insight but leaves important operational details unspecified.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the primary purpose and immediately followed by the most important usage decision (advisory vs exclusive). No filler or redundancy. Every word contributes to comprehension.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a claim tool with 4 params and no output schema, the description covers the critical decision point (exclusive vs advisory) and TTL semantics. It does not explain return values or error conditions, but given the simplicity and the presence of sibling tools like list_tabs and release_tab, this is largely sufficient. A minor gap is the lack of information about contention or failure when an exclusive claim is already held.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 75% (tabId lacks a description). The description adds semantic meaning beyond the schema by explaining the advisory/exclusive distinction and linking exclusive=true with ttlMs for lease semantics. It also implies that tabId must refer to an 'allowed' tab, which is a constraint not stated in the schema. This meaningfully helps an agent select correct parameter values.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear verb ('claim') and resource ('Chrome tab') with a specific scope ('for this browser-control session'). It distinguishes itself from siblings like release_tab and list_tabs by defining the claim action precisely. The wording leaves no ambiguity about what the tool does.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides explicit guidance on when to use exclusive mode versus advisory claims, mentioning 'fail-fast tab leases across parallel agents'. It does not explicitly name alternative tools or exclusions, but the context of advisory vs exclusive gives actionable decision-making. Slight gap: doesn't state when to prefer this over release_tab, but that is inferred from the verb.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

clickClick page elementA

Click an element by snapshot ref in the current top document or an exact documentId from list_frames. Fails with DOCUMENT_HIDDEN when the document is hidden unless allowHidden=true.

ParametersJSON Schema
NameRequiredDescriptionDefault
refYes
afterNoOptional act-then-observe requests, run after the page action in waitFor, snapshot, pageStatus order.
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
allowHiddenNoWhen true, click/type on a hidden document. Default fails with DOCUMENT_HIDDEN and names activate_tab as the remedy.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden. It discloses important error behavior (fails with DOCUMENT_HIDDEN unless allowHidden=true) which is useful context. However, it does not mention other behavioral aspects such as potential navigation, scroll behavior, or return values. The disclosed error is beneficial but the overall behavioral coverage is minimal, so a 3 is appropriate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences efficiently describe the core capability and a critical error condition. The key information is front-loaded, with no redundant text. Every word earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has a rich nested 'after' object with waitFor, snapshot, and pageStatus options, but the description does not mention that these abilities exist or guide when to use them. Nor does it describe the return value. While the schema covers parameter details, the description lacks guidance on optional post-action observations, leaving an agent to discover that from schema alone. This is a moderate gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 83%, so the schema documents most parameters. The description adds little beyond what schema descriptions already provide (e.g., documentId's 'returned by list_frames' is duplicated). It clarifies that ref is from a snapshot and that documentId is exact, but these are already implied. A baseline 3 fits given the high schema coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's action ('Click an element'), the resource ('by snapshot ref'), and the scope ('current top document or an exact documentId from list_frames'). It distinguishes from click_at by specifying the input type, making the tool's purpose unambiguous even among siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage (when you have a snapshot ref) but does not explicitly contrast with alternatives like click_at (for coordinate clicks) or type (for keyboard input). It mentions the DOCUMENT_HIDDEN condition and allowHidden workaround, but no explicit 'when not to use' guidance or alternative tools are cited.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

click_atClick viewport coordinatesA

Click at tabViewport coordinates in the top document or frameViewport coordinates in an exact iframe documentId. Fails with DOCUMENT_HIDDEN when the document is hidden unless allowHidden=true.

ParametersJSON Schema
NameRequiredDescriptionDefault
xYes
yYes
afterNoOptional act-then-observe requests, run after the page action in waitFor, snapshot, pageStatus order.
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
allowHiddenNoWhen true, click/type on a hidden document. Default fails with DOCUMENT_HIDDEN and names activate_tab as the remedy.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the behavioral disclosure burden. It does disclose the DOCUMENT_HIDDEN failure mode and the allowHidden=true override, which is useful. However, it does not describe return values, navigation side effects, or any post-click behavior, so the transparency is adequate but incomplete.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with the action and target, and no filler. Every clause earns its place: top document vs iframe, coordinate space, and hidden-document failure behavior.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a 7-parameter tool with a nested 'after' object and no output schema, the description covers the core invocation details: coordinates, document targeting, and hidden-document handling. Optional wait/snapshot behavior is documented in the schema, so the description is mostly complete for correct tool selection and basic invocation, though return behavior is not addressed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema leaves x and y as bare numbers, but the description adds crucial meaning by distinguishing tabViewport coordinates from frameViewport coordinates and linking the latter to an exact iframe documentId. With 71% schema description coverage, this is meaningful compensation beyond the structured schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Click'), a precise resource ('tabViewport coordinates' or 'frameViewport coordinates'), and the exact targeting context (top document vs iframe documentId). It clearly distinguishes click_at from the sibling click tool by emphasizing coordinate-based targeting rather than element/selector-based clicking.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context for when to use it: click in the top document, or in an exact iframe by documentId. It also explains the hidden-document failure and allowHidden override. It does not explicitly name an alternative tool or say 'do not use when a selector is available,' but the coordinate-space wording makes the intended use clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

collect_scrollCollect while scrollingA

Scroll a bounded number of steps (hard ceiling when until is set), extract selected elements each step, optionally target a nested scroll container, and optionally stop early via until conditions. Results include stoppedReason.

ParametersJSON Schema
NameRequiredDescriptionDefault
afterNoOptional act-then-observe requests, run after the page action in waitFor, snapshot, pageStatus order.
stepsYesMaximum scroll/extract steps. Hard ceiling when until is set.
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
untilNo
deltaYNoLegacy window scroll deltaY when scroll is omitted.
scrollNoScroll target for each step. When set, overrides top-level deltaY. Pass x/y to scroll a nested overflow container under that point.
delayMsNo
extractYes
dedupeByNo
maxItemsNo
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations available, the description carries the burden of behavioral disclosure. It reveals the hard ceiling on steps, optional nested scroll targeting, early-stop conditions, and stoppedReason in results. This goes beyond a tautology, though it does not detail tab defaults or the exact result structure.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

A single sentence that front-loads the core behavior and packs in the bounded-step ceiling, per-step extraction, nested container option, and early-stop condition. Every clause adds value and there is no wasted wording.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool is complex with 12 parameters, nested objects, and no output schema. The description explains the main flow but omits the full result contract beyond stoppedReason, noNewItemsForSteps semantics, and guidance on dedupeBy or maxItems. It is adequate but not complete for fully correct invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is only 58%, and the description adds useful relational meaning for steps, until, extract, and scroll (e.g., 'hard ceiling when until is set'). However, many parameters such as dedupeBy, maxItems, after, tabId, delayMs, documentId, and sessionTabId are left to the schema or remain undocumented by the description.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific composite verb phrase: scroll bounded steps, extract selected elements each step, optionally target a nested scroll container, and stop early via until conditions. This makes the tool's purpose clear and distinguishes it from simpler siblings like scroll or extract_elements.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description clearly implies the use case: repeatedly scrolling a page while collecting matching elements across steps, with bounded steps and optional early termination. It does not explicitly name alternatives or exclusion criteria, but the context is clear enough for an agent to decide when this composite tool fits.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

console_logsConsole logsC

Return bounded console logs captured after the content script was injected in the target tab.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNo
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
levelsNo
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

C2.8/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure. It discloses only that logs are 'bounded' and captured after injection, but does not state whether reading logs clears them, what the bound means, how filtering works, or what happens when no logs exist. There is no annotation contradiction because none are provided.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, focused sentence with no filler. It front-loads the core action and the additional injection-context clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given no output schema and no annotations, the description is too sparse for an agent to invoke the tool confidently. Missing details include the shape of returned log entries, how 'bounded' is determined, accepted levels values, and any stateful effects of calling the tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 60%; the 'limit' and 'levels' parameters have no schema descriptions, and the tool description does not clarify them. 'Bounded' weakly hints at the limit parameter but does not explain default or maximum behavior, and valid values for 'levels' are entirely left to inference.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a specific verb and resource: 'Return bounded console logs.' The temporal scope ('captured after the content script was injected in the target tab') adds useful specificity. However, it does not explicitly differentiate from sibling inspection tools, though none are log-specific.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given on when to use this tool versus alternatives, nor are any exclusions or sibling references provided. The only contextual hint is the mention of content-script injection and target tab, which implies a use case but does not make it explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

extract_elementsExtract page elementsB

Extract bounded structured data from elements selected by CSS selector. Safer alternative to raw JavaScript evaluation.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNo
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
visibleNo
selectorYes
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
includeHtmlNo
includeTextNo
includeLinksNo
includeTimesNo
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

B3.2/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It only says 'safer alternative' and 'bounded structured data,' hinting at safety and structure but not explicitly stating read-only behavior, side effects, or permissions. It does not disclose what happens with the extracted data, whether mutations are possible, or any constraints like rate limits. This is insufficient for a data-extraction tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, efficient sentence that front-loads the core purpose and the safety differentiator. There is no redundancy or filler. While it is brief, conciseness itself is a strength; the lack of depth is penalized under other dimensions, not this one.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (10 parameters, no output schema, no annotations), the description is severely incomplete. An agent cannot infer the return format, how to handle pagination or limits, what the include* flags control, or any side effects. The description provides only a high-level overview and leaves critical operational details undefined, making it inadequate for reliable invocation.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters2/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is only 30%, so the description must compensate by explaining parameter meanings. It only clarifies that the selector is a CSS selector and that extraction yields structured data, which relates to the selector and output but not to flags like includeHtml, includeText, limit, or visible. The description adds minimal value over the schema and fails to cover the majority of parameters that the schema leaves undocumented.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Extract'), a resource ('elements selected by CSS selector'), and a clear scope ('bounded structured data'). It also distinguishes itself from raw JavaScript evaluation by claiming to be a safer alternative, which separates it from a generic scripting tool. Even without naming a sibling explicitly, the purpose is unambiguous and easily differentiated from other tools like query_elements.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies a usage context: use this instead of raw JavaScript evaluation for safer data extraction. However, it does not explicitly state when to use it versus other extraction tools (e.g., query_elements), nor does it mention exclusions or prerequisites. The single alternative mention provides only weak guidance, leaving the agent to infer the rest from sibling names.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

extract_feed_postsExtract feed postsB

Extract structured feed/post records (author, text, times, live flags) from a scoped feed region without site-specific selectors.

ParametersJSON Schema
NameRequiredDescriptionDefault
scopeNoContent root for text and elements. Compact defaults to main when a main landmark exists, or to a visible modal dialog (aria-modal=true or <dialog> opened with showModal()). Use document for the page behind a modal; pass ignoreRoles: ["dialog"] or ["alertdialog"] to hide both dialog and alertdialog.
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
maxPostsNoMaximum posts to return. Defaults to 10.
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
ignoreRolesNoComputed roles to exclude from scoped snapshots. Compact/main defaults to ["dialog"] when no visible dialog is open. A visible non-modal dialog is included without taking scope; a visible modal takes scope. Pass ["dialog"] or ["alertdialog"] to hide both roles, or [] to include them in the current scope.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.
excludeSelectorsNoCSS selectors for subtrees removed from the scoped snapshot.

TDQS

B3.1/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must fully disclose behavioral traits. It mentions that it extracts structured records, but it does not describe important behaviors such as pagination handling, limits, whether it mutates the page, or what happens if no feed is found. The description is also silent on permission requirements (e.g., claiming tabs) even though related tools exist. This is a significant gap for a tool that likely interacts with the browser state.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is very concise, a single sentence that captures the core purpose. It front-loads the key output and differentiator. However, it could be more structured by separating purpose from usage hints, but it is adequately sized for a tool with a rich schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 7 parameters, no output schema, and no annotations, the description is too minimal. It does not explain how the extraction behaves with respect to the scope parameter, or any side effects. It doesn't clarify what happens with 'live flags' or how times are formatted. An agent would need to guess many details from the schema alone, making it incomplete for a full understanding.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema has 100% description coverage, so each parameter is documented. The tool description adds minimal extra meaning beyond 'structured feed/post records'. The schema covers the semantics of each parameter, so the description does not need to repeat it)Skip. However, the description could add context on how parameters like 'scope' interact with feed extraction, but that is not present, so it is at baseline.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: to extract structured feed/post records (author, text, times, live flags) from a scoped feed region. It also distinguishes it from other extraction tools like extract_elements by mentioning 'without site-specific selectors' and 'structured feed/post records'. However, it does not name a specific sibling to differentiate from, and the purpose is somewhat narrow to feeds, which is clear but not maximally distinctive.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for feed extraction, but it does not provide explicit when-to-use or when-not-to-use guidance. It does not mention alternatives like extract_elements or visible_snapshot for cases where site-specific selectors are needed. The context of 'without site-specific selectors' hints at the use case but does not fully explain the trade-offs.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

finalize_tabsFinalize claimed tabsA

Release browser-control ownership state for claimed tabs. This does not close user tabs; pass keep entries to preserve handoff/deliverable claims. Detaches CDP attachments on every claimed tab, including kept claims.

ParametersJSON Schema
NameRequiredDescriptionDefault
keepNo

TDQS

A3.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It states that the tool releases ownership, does not close tabs, and detaches CDP attachments on all claimed tabs, including kept claims. It also clarifies that 'keep' entries preserve handoff/deliverable claims. This is transparent and covers key side effects, though it could mention reversibility or permission requirements.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loading the primary action. It is compact and each sentence adds relevant information: the main effect, a critical exception (no tab close), and a behavioral detail (CDP detach). No fluff or repetition, though it could be slightly more structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (one optional parameter, no output schema), the description covers the essential operational details: what it does, what it preserves, and what it detaches. It does not specify the scope of 'claimed tabs' (e.g., session-wide), but sibling tools like 'claim_tab' provide context. The absence of output schema is acceptable since no return value is defined.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema description coverage is 0%, so the description must compensate. It explains that 'keep' preserves handoff/deliverable claims, which adds meaning beyond the schema. However, it does not elaborate on the 'status' enum values or the significance of 'sessionTabId', nor does it specify that 'keep' is optional. While it partially compensates, some parameter semantics remain implicit.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's action: releasing browser-control ownership state for claimed tabs. It also specifies what it does NOT do (does not close user tabs) and that it detaches CDP attachments. However, it does not explicitly differentiate from the sibling tool 'release_tab', so an agent may need to infer the difference. Still, the core purpose is unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given on when to use finalize_tabs versus release_tab or cdp_detach. The description does not mention typical scenarios, prerequisites, or conditions that would lead an agent to choose this tool over alternatives. It only describes the mechanism, not the context of use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

keypressPress page keysB

Dispatch common DOM keyboard events in the target page. Browser/OS shortcuts are not guaranteed under MV3. Fails with DOCUMENT_HIDDEN when the document is hidden unless allowHidden=true.

ParametersJSON Schema
NameRequiredDescriptionDefault
keysYes
afterNoOptional act-then-observe requests, run after the page action in waitFor, snapshot, pageStatus order.
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
allowHiddenNoWhen true, click/type on a hidden document. Default fails with DOCUMENT_HIDDEN and names activate_tab as the remedy.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

B3.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the burden of behavioral disclosure. It mentions that browser/OS shortcuts are not guaranteed under MV3 and that it fails with DOCUMENT_HIDDEN unless allowHidden=true, which adds useful context. However, it does not describe the return value, side effects, or whether the action is destructive, leaving significant gaps for a mutation tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no waste, front-loading the primary action and then providing key behavioral caveats. It is appropriately concise and efficient for an agent to parse.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description omits critical context for correct usage: it does not explain the 'after' parameter for act-then-observe, how to specify key combinations or modifiers, or when to prefer this over sibling input tools. Given the tool's complexity and the absence of an output schema, the description leaves agents under-informed about its full capabilities and edge cases.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 83%, so most parameters are documented in the schema. The description adds minimal parameter insight—only the allowHidden behavior is echoed in the error mention. Since the schema already explains allowHidden in detail, the description does not meaningfully enhance parameter understanding beyond the structured data.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool dispatches common DOM keyboard events in the target page, which is a specific verb and resource. It distinguishes from sibling tools like click and type because it focuses on keyboard events, but it does not explicitly name alternatives or differentiate further. Thus, it is clear but lacks sibling differentiation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

No guidance is given on when to use this tool versus alternatives like type or click. The only usage-related note is about the DOCUMENT_HIDDEN failure condition, which is a behavior, not a decision rule for tool selection. There is no mention of scenarios that favor keypress over other input tools.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_framesList frame documentsA

List current frame documents for an allowed target tab. Blocked or unsupported frames are redacted and cannot be targeted.

ParametersJSON Schema
NameRequiredDescriptionDefault
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full transparency burden. It does disclose a useful behavioral trait: blocked or unsupported frames are redacted and cannot be targeted, and 'current' implies a snapshot-style read. However, it leaves 'allowed target tab' undefined and does not explain failure modes, authorization prerequisites, or what side effects (if any) occur, which are notable gaps for a no-annotation tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is extremely efficient: two sentences, the action comes first, and the second sentence adds the only redaction detail an agent needs. There is no redundant padding; every clause contributes a distinct aspect of the tool's behavior.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has only two optional parameters and full schema coverage, so it does not need exhaustive explanation of inputs, but it leaves important operational details unaddressed: it does not describe the expected return shape of 'frame documents', the meaning of 'allowed target tab', or error behavior when no tabs are allowed. These gaps are moderate for a seemingly simple listing tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is the 100% and each parameter's meaning and default behavior is already documented in the schema. The description adds no further parameter-level detail beyond the notion of an 'allowed target tab', which stays aligned with the schema but does not enhance it.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('List') on a concrete resource ('current frame documents') and scopes it to 'an allowed target tab', which clearly distinguishes it from tab-level tools like list_tabs. The added note that blocked/unsupported frames are redacted further clarifies what the tool exposes.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives context about targeting tabs through the phrases 'allowed target tab' and 'redacted... cannot be targeted', but it never explicitly says when to prefer this tool over alternatives like list_tabs or snapshots. Usage is implied rather than direct, with no exclusion criteria or sibling comparisons.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_tabsList Chrome tabsA

List tabs visible to the Chrome Browser Control extension in the current Chrome profile.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A3.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden of behavioral disclosure. It only states the scope ('visible to extension') but does not disclose whether the operation is read-only, what the output format looks like (e.g., tab IDs, URLs, titles), or any side effects. An agent cannot infer if this is safe to call repeatedly or what data it returns.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no filler. It immediately states the action and scope, and every word adds value. This is a model of conciseness for a simple tool.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (no params, no output schema), the description is somewhat adequate but leaves a key gap: it does not specify what the returned list contains (e.g., tab IDs, URLs, titles). Since there is no output schema, the description should at least hint at the return format for the agent to use the results effectively. Additionally, it could mention common use cases (e.g., enumerating tabs before claiming one) to improve decision-making among many siblings.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters and the schema has no properties, so there is nothing to describe. Per the baseline for 0-parameter tools, a score of 4 is appropriate since the description is not required to explain parameters. However, it does not add any supplementary detail about parameters because none exist.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb 'List' and the resource 'tabs', and adds useful scope constraints ('visible to the Chrome Browser Control extension', 'current Chrome profile'). This differentiates it from siblings like list_frames (frames vs tabs) and claim_tab/release_tab (management actions). An agent can immediately know the tool's core function without ambiguity.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies the tool is used to enumerate tabs within the extension's visibility, but it does not explicitly state when to use this over alternatives like snapshot, visible_snapshot, or page_status. It lacks guidance on prerequisites (e.g., whether a session must be named) or complementary usage (e.g., before claiming a tab). The context is clear but exclusions are absent.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

name_sessionName browser sessionA

Set a human-readable browser-control session name for status, logs, and debugging.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYes

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It states that the name is used for status, logs, and debugging, which gives some side-effect insight beyond the parameter value. However, it does not state whether the name is persisted, overwritten, or how it appears in fragmented contexts, leaving some behavioral uncertainty.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single highly readable sentence that front-loads verb the object and purpose. No wasted words or filler, and maximum clarity per word.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a very simple tool with a single parameter and no output schema, the description is adequate to let an agent know what the tool does and what the parameter means. It doesn't discuss response-derived behavior, but the absence of output schema and the trivial complexity make the description almost complete, only revealing no details about overwriting or querying the current session name.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema provides no property descriptions (0% coverage), so the description must compensate. It does clarify that the 'name' is a human-readable identifier used for logs/status/debugging, and the parameter name 'name' aligns with this. Yet it does not explain any formatting constraints or examples in detail beyond the schema's min/max length.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('Set') and resource ('browser-control session name'), and states the purpose ('for status, logs, and debugging'). It clearly distinguishes from sibling tools like browser_status or navigate by identifying the action of naming a session, with no ambiguity that it is a setter rather than a getter or mutating action.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit when/where comparison to sibling tools. The description implies use 'for status, logs, and debugging', which faintly guides context, but no exclusions are provided. An agent may infer to use this when a readable label is needed, but it does not force or avoid any alternative.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

page_statusPage statusC

Return lightweight page status, viewport/scroll state, and resource summary counts for an allowed target tab.

ParametersJSON Schema
NameRequiredDescriptionDefault
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

C2.9/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description must carry all behavioral disclosure. It mentions 'lightweight' and 'allowed target tab' but does not clarify permission requirements, whether the operation is read-only, failure modes, or any side effects. The brevity leaves significant behavioral uncertainty.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence that front-loads the primary purpose and then lists the returned elements. It is concise and free of fluff, though it could arguably include a bit more contextual detail without losing efficiency.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the absence of annotations and an output schema, the description is incomplete for an agent to confidently call the tool. It does not explain the return format, prerequisites like claiming a tab, or error conditions, leaving important operational details unspecified.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and each parameter (tabId, documentId, sessionTabId) has a descriptive string in the schema. The tool description adds no additional parameter meaning beyond what the schema already provides, so the baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific action ('Return lightweight page status') and names the specific data included (viewport/scroll state, resource summary counts) for an allowed target tab. This is clear and distinguishes it from general snapshot tools, though it doesn't explicitly contrast with browser_status.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no guidance on when to use this tool versus siblings like browser_status or snapshot. It does not mention prerequisites (e.g., needing a claimed tab) or scenarios where this tool is preferred, leaving the agent to infer usage from the name alone.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

perform_actionsPerform sequential page actionsA

Run up to 10 sequential page actions in one document target. An explicit batch-level documentId is revalidated before every step and after observation; steps cannot override it. Fail-fast on the first step error. Click, type, and keypress steps fail with DOCUMENT_HIDDEN on hidden documents unless that step sets allowHidden=true.

ParametersJSON Schema
NameRequiredDescriptionDefault
afterNoOptional act-then-observe requests, run after the page action in waitFor, snapshot, pageStatus order.
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
actionsYesOrdered action steps. Each step is a flat object with action plus action-specific fields.
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses fail-fast behavior, DOCUMENT_HIDDEN failure for click/type/keypress unless allowHidden=true, and documentId revalidation before every step and after observation. This is substantive behavioral context beyond the schema, though it does not cover scroll-specific behavior or return values.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences with zero redundancy. The main purpose is front-loaded, and each subsequent sentence adds a critical behavioral constraint. It is compact and well-structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers the core behavior (batch execution, fail-fast, hidden handling) but does not mention the 'after' observation feature or other parameters like tabId/sessionTabId. However, those are fully described in the schema, and the description provides enough high-level context for an agent to understand the tool's primary function and constraints.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so baseline is 3. The description adds meaning beyond the schema by explaining documentId revalidation (steps cannot override it) and the allowHidden exception for hidden documents. These nuances are not present in the parameter descriptions themselves.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'Run up to 10 sequential page actions in one document target.' It clearly distinguishes this from sibling tools like click/type/scroll by emphasizing batch execution and the single-document constraint. The mention of fail-fast and DOCUMENT_HIDDEN behavior further clarifies its role.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies this is for batching multiple actions, but it does not explicitly contrast with single-action siblings (click, type, scroll) or state when to prefer this tool over them. The documentId revalidation and hidden-document notes give some context, but no explicit 'use this for multiple actions; use click for a single action' guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

query_elementsQuery page elementsB

Find elements by selector, role, text, and visibility without returning full page text.

ParametersJSON Schema
NameRequiredDescriptionDefault
roleNo
textNo
limitNo
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
visibleNo
selectorNo
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

B3.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations are absent, so the description carries the full disclosure burden. It does add one useful behavioral trait by explaining the tool does not return full page text, which prevents a reasonable misunderstanding. However, it does not state whether the tool is strictly read-only, what the return shape is, whether it waits for page content, or how it handles pages with no matching elements, leaving the agent to infer important behavioral traits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is one short sentence with no filler, and the meaningful behavioral constraint 'without returning full page text' is included. It loses one point for restating the title's basic purpose before adding the new information, but it is still concise and front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 8 mostly optional parameters and no annotations or output schema, the description is minimal and does not fully define how the tool behaves at the boundaries. It does not explain how selector, role, text, and visibility relate to one another, what the returned elements look like, or what constraints exist around tab/session/frame addressing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is only 38%, so the description should compensate for undocumented parameters. It covers four of them by listing 'selector, role, text, and visibility', which gives semantic meaning to `selector`, `role`, `text`, and `visible`. It does not explain how multiple criteria interact (e.g., AND or OR) and says nothing about `limit` semantics, so parameter behavior is only partially defined.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Find'), a specific resource ('elements'), and explicit search dimensions: 'selector, role, text, and visibility'. It also adds a discriminating constraint, 'without returning full page text'. It is clear what the tool does, though it does not name a sibling tool (e.g., extract_elements or visible_snapshot) so an agent must infer the exact boundary.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

There is no explicit guidance about when to use this tool versus alternatives such as extract_elements, visible_snapshot, or wait_for. No usage condition, prerequisite, or 'use this when X' is provided. The only hint is the negative 'without returning full page text', but no direct comparison or sibling differentiation is offered.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

release_tabRelease claimed tabA

Release a previously claimed tab by sessionTabId or tabId without closing the browser tab.

ParametersJSON Schema
NameRequiredDescriptionDefault
tabIdNo
sessionTabIdNo

TDQS

A3.7/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Without any annotations, the description carries full responsibility for disclosing behavior. It mentions that the tab is not closed, which is a useful side-effect, but it does not explain what 'release' does to the claim state, whether the operation is idempotent, or any other implications. This is a minimal disclosure given the absence of structured behavioral hints.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no waste. It states the action, the resource, the identifiers, and the key behavioral qualifier, all efficiently without redundancy.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with no annotations and no output schema, the description is bare-bones. It covers the main action and identifier options, but omits preconditions, detailed side effects, and error behavior. While the tool is simple, an agent might need more detail to act safely and correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

With 0% schema description coverage, the description adds meaning by stating that the tab can be identified by sessionTabId or tabId, clarifying that these are alternative selectors. It does not explain each parameter's exact role or priority, but it provides more than the schema alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb-resource pair, 'Release a previously claimed tab', distinguishing it from claim_tab and other tab management tools. It also specifies the identifiers used (sessionTabId or tabId) and the critical side-effect constraint that the browser tab is not closed, clearly conveying the tool's function.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The phrase 'previously claimed tab' implies the tool is used after a tab has been claimed via claim_tab, but it does not explicitly state this condition or compare with alternatives. No explicit when-not-to-use or alternative routing is provided, leaving usage to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

screenshotCapture visible screenshotA

Capture the visible tab viewport. This tool is tab-target only; iframe frameViewport bounds are not valid crop coordinates. Optionally crop to a top-document snapshot ref or tabViewport bounds.

ParametersJSON Schema
NameRequiredDescriptionDefault
refNoSnapshot ref to crop to (mutually exclusive with bounds).
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
boundsNoViewport CSS-pixel crop rect (mutually exclusive with ref).
formatNo
paddingNoOptional non-negative CSS pixels to expand the crop rect before viewport intersection.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden of behavioral disclosure. It explicitly states that the tool only captures the visible tab viewport and that iframe frameViewport bounds are invalid, which are key behavioral traits. It also mentions cropping options. While it does not state permissions or side effects, for a screenshot tool these are less critical. The description adds meaningful context beyond the schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences, each with a clear purpose: the core action, a critical constraint, and cropping options. It is front-loaded with the main purpose and avoids redundancy. Every sentence earns its place, making it highly efficient and easy to parse.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool has 6 parameters, a nested object, and no output schema, the description covers the main behavior, the iframe limitation, and the cropping options. It does not explicitly state the output format, but that is implied by the tool name and the schema. It also does not mention what happens when no ref or bounds are provided, but 'Capture the visible tab viewport' implies a full viewport capture. The description is sufficient for an agent to call the tool correctly in most scenarios.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 83%, so most parameters are already documented. The description adds value by clarifying the semantics of ref and bounds: 'top-document snapshot ref' and 'tabViewport bounds' explain the coordinate system and cropping targets. It also reinforces the mutual exclusivity of ref and bounds by presenting them as alternatives. This goes beyond the schema's terse descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: 'Capture the visible tab viewport.' It also includes a scoping constraint ('tab-target only') and a caveat about iframe coordinates, which clearly distinguishes it from potential sibling tools that handle full-page or iframe captures. This is not a tautology and provides a precise purpose.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives clear context for when to use the tool: it is tab-target only and iframe frameViewport bounds are not valid crop coordinates. This implicitly tells the agent not to use it for iframe captures, and it suggests using it with a top-document snapshot ref or tabViewport bounds for cropping. However, it does not explicitly name alternative tools like snapshot or visible_snapshot, so the guidance is strong but not exhaustive.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

scrollScroll pageA

Scroll the current top document or an exact documentId by pixel deltas. x/y are tabViewport coordinates for the top document and frameViewport coordinates for an iframe. Use textLimit on snapshot to capture more text; scroll only helps when the page lazy-loads content.

ParametersJSON Schema
NameRequiredDescriptionDefault
xNoOptional viewport x coordinate to scroll a nested element under this point. Defaults to window scroll.
yNoOptional viewport y coordinate to scroll a nested element under this point. Defaults to window scroll.
afterNoOptional act-then-observe requests, run after the page action in waitFor, snapshot, pageStatus order.
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
deltaXNo
deltaYNo
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full behavioral burden. It discloses coordinate frame semantics, iframe targeting, and the lazy-load limitation, which is meaningful. It does not mention side effects, scroll-triggered events, permissions, or what the tool returns after execution.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three dense sentences with no filler. The primary action and target are front-loaded, and the follow-up sentences add high-value coordinate and lazy-load caveats. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description plus the rich schema cover target selection, coordinate spaces, snapshot options, wait conditions, and the key lazy-load caveat. The main gap is the absence of an output schema and no explicit contrast with collect_scroll, but the agent has enough to invoke the tool correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 75%, so the baseline is already moderate. The description adds important semantic detail beyond the schema, especially that x/y are tabViewport coordinates for the top document and frameViewport coordinates for an iframe, and clarifies documentId targeting. Remaining parameters are already well described in the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Scroll') and the resource ('current top document or an exact documentId') with pixel-delta detail. It doesn't explicitly differentiate from sibling collect_scroll, but the target and coordinate nuance make the purpose unambiguous.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives a useful condition for effectiveness: 'scroll only helps when the page lazy-loads content' and suggests using textLimit on snapshots to capture more text. However, it does not name specific alternatives or give explicit guidance on when another tool like collect_scroll would be more appropriate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

snapshotSnapshot active pageA

Return a simplified DOM snapshot for the current top document or an exact documentId from list_frames. Compact mode (default) returns textPreview only — not text. Full mode returns text. Compact defaults to main-landmark scope when present; a visible modal dialog (aria-modal=true or opened with showModal()) takes scope instead. Pass scope: "document" for legacy full-body text including the page behind a modal, ignoreRoles: ["dialog"] or ["alertdialog"] to hide both dialog and alertdialog, or mode: "full" for the unscoped legacy snapshot. Defaults truncate at 500 (compact) or 4000 (full) chars; pass textLimit (up to 100000) for long page content such as API docs. Response includes authoritative document identity and coordinate space.

ParametersJSON Schema
NameRequiredDescriptionDefault
modeNoSnapshot detail mode. Defaults to compact. Use full for text and verbose metadata, or visible for viewport-only refs, bounds, and labels.
scopeNoContent root for text and elements. Compact defaults to main when a main landmark exists, or to a visible modal dialog (aria-modal=true or <dialog> opened with showModal()). Use document for the page behind a modal; pass ignoreRoles: ["dialog"] or ["alertdialog"] to hide both dialog and alertdialog.
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
textLimitNoMax body text characters. Optional; defaults to 500 (compact) or 4000 (full). Not a hard cap — maximum 100000.
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
ignoreRolesNoComputed roles to exclude from scoped snapshots. Compact/main defaults to ["dialog"] when no visible dialog is open. A visible non-modal dialog is included without taking scope; a visible modal takes scope. Pass ["dialog"] or ["alertdialog"] to hide both roles, or [] to include them in the current scope.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.
excludeSelectorsNoCSS selectors for subtrees removed from the scoped snapshot.

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It does well: it explains default scoping behavior (main landmark vs visible modal), default truncation limits (500/4000), the fact that textLimit is not a hard cap, and that the response includes 'authoritative document identity and coordinate space.' It also discloses that compact mode returns textPreview only, not text. The only minor gap is not describing the exact response shape or error conditions, but the description covers the most important behavioral traits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is dense but well-organized, front-loading the core purpose and then layering mode, scope, and limits. Every sentence adds information, and the structure mirrors the parameter hierarchy (mode → scope → textLimit → documentId). It is long, but the complexity of the tool (8 parameters, modal scoping rules) justifies the length. A slight trim could improve scannability, but it is not bloated.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (8 parameters, modal scoping, truncation, frame targeting), the description is remarkably complete. It covers defaults, edge cases (modal dialogs, legacy document scope), and the source of key identifiers (list_frames, claim_tab). There is no output schema, so the description's mention of 'authoritative document identity and coordinate space' gives a useful hint about the return value. It could mention error cases or the exact response structure, but for an agent deciding whether and how to call this tool, the description is sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the baseline is 3. The description adds value beyond the schema by explaining the interaction between scope and ignoreRoles (e.g., 'A visible non-modal dialog is included without taking scope; a visible modal takes scope'), and by clarifying that textLimit defaults differ by mode. It also explains the relationship between documentId and list_frames. This goes beyond the schema's per-parameter descriptions, so a 4 is warranted.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description opens with a specific verb and resource: 'Return a simplified DOM snapshot for the current top document or an exact documentId from list_frames.' It clearly distinguishes the tool from siblings like visible_snapshot and query_elements by describing the snapshot's purpose and modes. The title 'Snapshot active page' is also expanded with concrete detail about what the snapshot contains.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly explains when to use compact vs full mode, when to pass scope: 'document' for legacy full-body text behind a modal, and when to use ignoreRoles to hide dialogs. It also names list_frames as the source for documentId and claim_tab for sessionTabId, giving clear context for when those parameters are needed. This is strong routing guidance that helps an agent choose the right invocation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

typeType into page elementA

Type text into an element by snapshot ref. Password-like fields are blocked unless force=true. Fails with DOCUMENT_HIDDEN when the document is hidden unless allowHidden=true.

ParametersJSON Schema
NameRequiredDescriptionDefault
refYes
textYes
afterNoOptional act-then-observe requests, run after the page action in waitFor, snapshot, pageStatus order.
forceNo
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
allowHiddenNoWhen true, click/type on a hidden document. Default fails with DOCUMENT_HIDDEN and names activate_tab as the remedy.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden. It discloses two important failure modes (password fields blocked unless force=true; DOCUMENT_HIDDEN unless allowHidden=true) and names activate_tab as a remedy. It does not mention other behaviors like whether the text replaces existing content or appends, but the disclosed constraints are valuable and specific.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences with zero waste. The core action is stated first, followed by the two most important behavioral constraints. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with 8 parameters and no output schema, the description is reasonably complete. It covers the core action and the two main failure modes. It does not explain the 'after' observation block or the tab/frame targeting semantics, but the schema provides descriptions for those. The description is adequate for an agent to invoke the tool correctly in most cases.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 63%, so the schema already documents many parameters. The description adds meaning for 'ref' (snapshot ref) and 'force' (bypass password blocking), but does not explain 'after', 'tabId', 'documentId', or 'sessionTabId' beyond what the schema provides. The description adds some value but does not fully compensate for the undocumented parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb ('Type'), a resource ('text into an element by snapshot ref'), and two key behavioral constraints (password fields blocked unless force=true; DOCUMENT_HIDDEN unless allowHidden=true). It clearly distinguishes this from sibling tools like click, keypress, and click_at, which involve different interaction mechanisms.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage context: it is for typing text into an element, and it explicitly mentions when it fails (password fields, hidden documents) and the remedy (activate_tab). It does not explicitly name alternatives like keypress for keyboard events, but the context is clear enough for an agent to select this tool for text entry.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

visible_snapshotVisible page snapshotB

Return a viewport-aware snapshot with visible/intersecting elements, refs, labels, roles, bounds, and scroll metadata. Iframe bounds use frameViewport coordinates.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNo
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
sessionTabIdNoOptional claimed tab session id returned by claim_tab.

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description must disclose behavioral traits. It adds useful context about viewport-awareness and that iframe bounds use frameViewport coordinates, which is a specific coordinate system note. However, it does not mention read-only nature (though implied), potential performance costs, pagination, or what happens when no visible elements exist. It is not misleading, but it leaves some behavior unspecified.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences with no wasted words. The primary function is front-loaded in the first sentence, and the coordinate detail is a concise second sentence. Every word adds value, making it an efficient and well-structured description.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has four optional parameters and no output schema, so the description must explain what the agent receives and any constraints. It lists the returned content types and notes the coordinate system, which is helpful. However, it lacks usage context (when to prefer this over 'snapshot'), does not mention any limits or pagination, and does not describe the response format. Given the moderate complexity and lack of output schema, the description is adequate but not fully complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 75% (three of four parameters have descriptions; 'limit' does not). The description itself adds no parameter-specific meaning, but it is not required to since most parameters are already documented in the schema. The missing 'limit' description is a gap, but the description does not attempt to compensate. Given moderate coverage, the baseline is a 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool returns a viewport-aware snapshot and enumerates its contents (visible/intersecting elements, refs, labels, roles, bounds, scroll metadata). The verb 'Return' and resource 'viewport-aware snapshot' are specific. It distinguishes itself from a generic 'snapshot' by emphasizing viewport-awareness, though it does not explicitly name the sibling 'snapshot' tool or contrast them.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives like 'snapshot', 'query_elements', or 'extract_elements'. It does not mention use cases, exclusions, or conditions that would select this tool over others. An agent would have to infer usage from the tool name and description alone, which is insufficient given the sibling list.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

wait_forWait for page conditionB

Wait for text, selector, URL substring, selector absence, scoped text, or bounded content stability in the target page.

ParametersJSON Schema
NameRequiredDescriptionDefault
textNo
scopeNoScope for textInScope and contentStableMs waits.
tabIdNoOptional Chrome tab id. Defaults to the claimed session tab, then the active tab.
selectorNo
timeoutMsNo
documentIdNoExact frame document id returned by list_frames. Omit to target the current top document.
ignoreRolesNoComputed roles to exclude from scoped snapshots. Compact/main defaults to ["dialog"] when no visible dialog is open. A visible non-modal dialog is included without taking scope; a visible modal takes scope. Pass ["dialog"] or ["alertdialog"] to hide both roles, or [] to include them in the current scope.
textInScopeNoWait for substring in scoped page text.
urlIncludesNo
sessionTabIdNoOptional claimed tab session id returned by claim_tab.
selectorAbsentNoWait until selector is absent from the document.
contentStableMsNoWait until scoped text length is stable for this many milliseconds.
excludeSelectorsNoCSS selectors for subtrees removed from the scoped snapshot.

TDQS

B3.4/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It does not state what happens on timeout, whether the tool throws or returns a value, whether it blocks or polls, or any side effects. The phrase 'bounded content stability' is opaque without further explanation. This is a significant gap for a waiting tool where agents need to know failure behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single sentence that front-loads the full list of wait conditions. It is efficient and information-dense, with no filler. Every word contributes to the core purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The tool has 13 parameters, many with complex interplay (e.g., scope, ignoreRoles, excludeSelectors), yet the description only summarizes the wait types. It does not explain return behavior, timeout semantics, or how parameters interact. Without an output schema, the agent lacks crucial information to call this correctly in diverse scenarios.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 69%, with several parameters lacking descriptions (text, selector, timeoutMs, urlIncludes, documentId). The description provides a high-level summary of the wait conditions, which partially aligns with parameters, but it does not elaborate on parameter meanings or combinations beyond the schema. It adds some value by grouping conditions but does not fully compensate for the uncovered parameters.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a clear verb ('wait for') and enumerates the specific conditions it handles: text, selector, URL substring, selector absence, scoped text, and bounded content stability. It is specific and unambiguous, and since no sibling tool performs waiting, it distinguishes itself effectively.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for waiting on page conditions but does not explicitly state when to prefer this tool over alternatives or when not to use it. It also lacks guidance on which parameter combinations are valid (e.g., can text and selector be used together?). The context is clear but exclusions and selection criteria are absent.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 3 tool updates
    • Addedcdp_network_requests
    • Addedcdp_network_watch
    • Addedcdp_response_body
  2. 27 tool updatesv0.4.0
    • First observedactivate_tab
    • First observedbrowser_status
    • First observedcdp_attach
    • First observedcdp_detach
    • First observedclaim_tab
    • First observedclick
    • First observedclick_at
    • First observedcollect_scroll
    • First observedconsole_logs
    • First observedextract_elements
    • First observedextract_feed_posts
    • First observedfinalize_tabs
    • First observedkeypress
    • First observedlist_frames
    • First observedlist_tabs
    • First observedname_session
    • First observednavigate
    • First observedpage_status
    • First observedperform_actions
    • First observedquery_elements
    • First observedrelease_tab
    • First observedscreenshot
    • First observedscroll
    • First observedsnapshot
    • First observedtype
    • First observedvisible_snapshot
    • First observedwait_for

TDQS

B3.2/5.0

Scored across 30 tools

Disambiguation2/5

Several tools overlap significantly: snapshot, visible_snapshot, query_elements, extract_elements, and page_status all provide ways to inspect page content/state; click, click_at, and perform_actions (with click steps) overlap in interaction; browser_status and page_status both report status but with different focus. The descriptions are detailed but the high-level purposes blur together.

Naming Consistency3/5

Tool names are predominantly verb_noun (e.g., list_tabs, navigate, click_at), but there is inconsistency in verb style: some use explicit verbs like 'browser_status' (noun-only), 'cdp_attach' (abbreviation), 'snapshot' (noun-only), and 'keypress' (verb-noun but single word). Also 'extract_feed_posts' is more domain-specific than the rest.

Tool Count2/5

30 tools is on the high end for a browser control server. While the domain is complex, many tools feel like slight variations of each other (e.g., snapshot vs visible_snapshot), making the count feel bloated. The server could be consolidated to around 20 tools without losing functionality.

Completeness4/5

The tool set covers well the lifecycle of controlling a browser: claiming tabs, navigating, interacting, snapshotting, waiting, extracting, and CDP network inspection. Missing basic operations like page reload, back/forward, or download management are minor gaps that agents can work around.

Maintenance

ActivityActive
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    D
    maintenance
    Enables AI agents to control the Google Chrome browser through a Node.js WebSocket bridge and a dedicated browser extension. It provides tools for capturing screenshots, executing JavaScript, managing tabs, and extracting page content via the MCP protocol.
    2
    -
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables browser automation over MCP using a real Chrome browser with existing profile, supporting real tabs, downloads, cookies, and RPA workflows.
    44
    MIT
  • F
    license
    Not graded
    quality
    C
    maintenance
    Drive your real, signed-in Chrome browser from any MCP client, enabling browser automation such as navigation, clicking, typing, and screenshots through standard MCP tools.
    1
    -
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables local opencode agents to control a live Chrome browser via MCP tools, including tab management, JavaScript execution, clicking, form filling, page reading, screenshots, and console log retrieval.
    MIT