# Chrome DevTools MCP

> Chrome DevTools MCP is an officially published MCP server from Google. Anomity scores its risk at 10 out of 100 (low).

- **Canonical URL:** https://catalog.anomity.ai/mcp/chrome-devtools-mcp
- **Kind:** MCP server
- **Publisher:** Google
- **Trust level:** official
- **Risk score:** 10/100 (low)
- **Website:** https://developer.chrome.com/blog/chrome-devtools-mcp
- **Repository:** https://github.com/ChromeDevTools/chrome-devtools-mcp
- **Last updated:** 2026-09-02
- **JSON:** https://catalog.anomity.ai/api/entries/mcp/chrome-devtools-mcp

## Description

An MCP server that connects an agent to a live Chrome instance through the DevTools protocol — inspecting the DOM, reading console output and network requests, evaluating expressions, and profiling performance. It is the debugging counterpart to Playwright's automation focus.

DevTools access is close to total control of the page: script evaluation in a live tab can read anything the page can read, including tokens held in memory and storage. The server declares browser control and outbound network access. The safe pattern is a browser instance started specifically for the agent with no logged-in sessions attached; the dangerous one is attaching it to the browser where you are signed into your cloud console.

## Why it scored 10

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |

Clamped result: **10/100**, band **low**.

## Capabilities

| Capability | Name | Security implication |
| --- | --- | --- |
| `browser:control` | Browser control | Drives a browser session. Combined with credential access can impersonate the user on web services. |
| `network:outbound` | Outbound network | Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access. |

## Related MCP servers

- [Playwright MCP](https://catalog.anomity.ai/mcp/playwright-mcp) — risk 20 (low)
- [Puppeteer](https://catalog.anomity.ai/mcp/puppeteer) — risk 20 (low)
- [Browserbase MCP Server](https://catalog.anomity.ai/mcp/browserbase-mcp-server) — risk 10 (low)
- [Blender MCP](https://catalog.anomity.ai/mcp/blender-mcp) — risk 100 (critical)
- [Airtable MCP Server](https://catalog.anomity.ai/mcp/airtable-mcp-server) — risk 45 (medium)
- [Cloudflare MCP Server](https://catalog.anomity.ai/mcp/cloudflare-mcp-server) — risk 45 (medium)

---

Source: Anomity Catalog (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json