MCP server and native host bridge for controlling Chrome through the Codex Chrome extension.
16 tools with explicit registration and Zod schemas. Naming is consistent (chrome_* prefix, verb-noun pattern). Descriptions are present but brief (avg 60 chars, well below 194-char baseline). All tools have input schemas with type constraints. Critical gaps: parameter descriptions are almost entirely missing (LLM cannot infer what tabId, method, params mean beyond the name); output schemas are undocumented (LLMs don't know what fields to expect); error handling is absent from tool definitions. chrome_cdp_send and chrome_evaluate are high-risk tools with minimal guidance on safe usage.
Attach Chrome debugger to a claimed tab.
Ask the active Codex Control Chrome MCP bridge for status.
Send a raw CDP command to a claimed and attached tab.
Claim an existing Chrome tab by numeric tab id.
Create a new background tab and claim it for this MCP session.
Detach Chrome debugger from a claimed tab.
Evaluate JavaScript in a claimed tab using Runtime.evaluate.
Parameter descriptions are missing or minimal. LLMs cannot infer what 'method', 'params', 'tabId', 'expression', 'awaitPromise' mean beyond the name. Rubric requires every parameter to have a non-empty description explaining its purpose, format, and constraints.
Output schemas are not documented. Tool descriptions do not specify what fields the response contains (e.g., chrome_status returns {manifestPath, manifestPaths, sockets} but this is not declared in the tool definition). LLMs cannot plan downstream calls without knowing response structure.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 64 | 2026-07-28+ | v2 |
Finalize claimed tabs. Use status handoff or deliverable.
Get connected Codex Chrome extension backend info.
Set the Chrome tab group/session name.
Navigate a claimed tab to a URL using CDP Page.navigate.
Read and clear CDP/download notifications buffered by this MCP process.
Capture a screenshot from a claimed tab. Returns base64 PNG.
List tabs currently claimed by this MCP browser session.
Show native host manifest paths and discovered bridge sockets.
List user Chrome tabs visible to the extension.
High-risk tools (chrome_cdp_send, chrome_evaluate) lack error handling guidance and safety warnings. These tools execute arbitrary code/commands in Chrome, descriptions should warn about injection risks, include examples of safe usage, and document failure modes.
Tool descriptions are too brief (avg 50 chars vs 194-char baseline). Many lack context on WHEN to use the tool vs similar ones. E.g., chrome_user_tabs vs chrome_session_tabs distinction is unclear from descriptions alone.
chrome_cdp_send accepts a free-form 'method' string (minLength=1 only). No enum of valid CDP methods, no validation, no guidance on format. LLMs will hallucinate invalid method names.