Universal web development MCP gateway — proxy any dev server with live browser observability for AI agents
webdev-ai provides 10 tools with reasonable naming (verb_noun pattern) and descriptions. However, critical gaps exist: parameter descriptions are sparse or missing entirely (browser_connect, browser_eval lack detail on expected formats), output schemas are undocumented, and error handling guidance is absent. Tool descriptions average ~80 chars (below the 194-char baseline for A+ tools). The browser_eval tool accepts code as 'string|array' but provides no guidance on format, constraints, or error recovery. No pagination support documented for logs tool despite potentially large result sets. Security concerns: browser_eval allows arbitrary JavaScript execution with minimal guardrails.
Get accessibility tree snapshot of the connected browser. Useful for understanding page structure and finding elements.
Connect to a browser for this session. Locks the session to a specific server and browser. Required before using browser commands when multiple projects are registered.
Start or stop CDP debugging via the Chrome extension. When active, browser commands use Playwright for pixel-perfect screenshots and ref-based element targeting.
Disconnect from the current browser session. Clears server and browser locks.
Run JavaScript in the connected browser. Full DOM access, supports await. Persistent `state` object across calls. `browser.*` helpers available.
List all connected browsers, optionally filtered by server.
browser_eval lacks input validation and error recovery guidance. Accepts 'string|array' code but provides no format constraints, timeout limits, or guidance on handling execution errors. LLMs cannot determine valid code patterns or error recovery steps.
No output schemas documented for any tool. LLMs cannot plan downstream calls or extract required fields (e.g., browser_list returns what structure? Does it include browser_id for use in browser_connect?). Breaks tool composition.
Parameter descriptions missing or minimal. browser_connect 'project' param lacks format guidance (is it 'projectId:type' or just 'projectId'?). browser_eval 'code' param has no examples of array format or line-by-line semantics. browser_query 'selector' lacks XPath vs CSS selector guidance.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | C | 63 | 2026-07-28+ | v2 |
List all registered dev server projects.
Query the DOM using CSS selectors or XPath. Returns element references and properties.
Take a screenshot of the connected browser. Uses Playwright for pixel-perfect rendering when CDP debugging is active.
Query server logs and diagnostics. Supports filtering by level, time range, and search terms.
logs tool lacks pagination support. No limit parameter documented, no cursor/offset guidance. Large result sets could exhaust context window. Violates paginated-result pattern.
browser_eval allows arbitrary JavaScript execution with no sandboxing, timeout, or permission gates documented. Security risk: malicious agents could exfiltrate data, modify DOM, or trigger side effects. No confirmation pattern for destructive operations.