Browser Runtime Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Browser Runtime Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Give AI agents real-time access to browser runtime errors, console logs, and page diagnostics.
The problem: AI coding agents can read your source code but are blind to what actually happens in the browser — runtime errors, console warnings, failed API calls, CSS rendering issues. You end up copy-pasting DevTools output back and forth.
The solution: A Chrome Extension captures browser events and streams them to a local MCP server. Your AI agent (Claude Code, Cursor, etc.) can query errors, console logs, and page state directly through MCP tools.
Browser tab → Chrome Extension → localhost MCP server → AI agentpip install browser-runtime-mcpDownload the extension/ folder from this repo, then:
chrome://extensionsextension/ folderClaude Code — add to ~/.claude/settings.json:
{
"mcpServers": {
"browser-runtime-mcp": {
"command": "browser-runtime-mcp",
"args": []
}
}
}Other MCP clients — run the server in stdio mode:
browser-runtime-mcpBrowse any website. Ask your AI agent:
| Tool | Description |
|---|---|
get_browser_errors | Runtime errors with stack traces and DOM context |
get_console_logs | Console output (error/warn/log), filterable by level |
get_page_info | Tracked pages and buffer statistics |
clear_buffers | Clear all buffered data for a fresh start |
┌─────────────────┐ postMessage ┌──────────────────┐
│ content.js │ ──────────────────▶ │ content-bridge.js │
│ (MAIN world) │ │ (ISOLATED world) │
│ │ │ │
│ • window.onerror│ │ chrome.runtime │
│ • console patch │ │ .sendMessage() │
└─────────────────┘ └────────┬───────────┘
│
chrome.runtime.onMessage
▼
┌────────────────┐
│ background.js │
│ (service worker)│
│ │
│ fetch() to │
│ localhost:18790 │
└────────┬────────┘
│ HTTP POST
▼
┌────────────────┐
│ MCP Server │
│ (Python/stdio) │
│ │ MCP tools
│ • HTTP receiver ├──────────────▶ AI Agent
│ • Error buffer │
│ • Log buffer │
└────────────────┘The three-hop architecture (MAIN → ISOLATED → background) bypasses Chrome's Private Network Access policy, which blocks HTTPS pages from fetching to localhost directly.
For debugging without MCP, run the HTTP receiver only:
browser-runtime-mcp --http-onlyThen query:
GET http://127.0.0.1:18790/health — buffer statsGET http://127.0.0.1:18790/errors — all captured errorsGET http://127.0.0.1:18790/logs — all captured logsGET http://127.0.0.1:18790/pages — tracked pagesMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.