Chrome DevTools MCP

Gives an agent a live Chrome with DevTools, so it can record performance traces, read network and console output, and debug the page it just built.

Install

Claude Code (MCP only)
```
claude mcp add chrome-devtools --scope user npx chrome-devtools-mcp@latest
```
This is the vendor's command. Pin by swapping @latest for a fixed version (1.10.1 when reviewed). Add --no-usage-statistics to opt out of telemetry.
Claude Code (MCP + skills plugin)
```
/plugin marketplace add ChromeDevTools/chrome-devtools-mcp
```
Then /plugin install chrome-devtools-mcp@chrome-devtools-plugins and restart Claude Code.

The Chrome DevTools team’s MCP server. The agent gets a real Chrome: it can record and analyze performance traces, inspect network requests and console messages (with source-mapped stacks), take screenshots and automate the page through Puppeteer. The plugin adds skills for accessibility debugging, LCP optimization, memory leaks and cookies.

When to use it

“Why is this page slow?” The agent records a trace and names the actual LCP and CLS causes.
Checking a front-end change in a real browser before calling it done.
Accessibility passes with the a11y-debugging skill.

Before you install

Usage statistics are on by default. Pass --no-usage-statistics or set CHROME_DEVTOOLS_MCP_NO_USAGE_STATISTICS. Pass --no-performance-crux to stop trace URLs going to CrUX.
Don’t point it at a browser profile that’s logged into things you wouldn’t hand the agent.
--slim --headless gives a smaller tool set for basic browsing.

Official

Published by the platform or the maker of the thing itself.

Access: Changes things freely Can create, change or delete in your accounts without asking each time.
Review: Reviewed — install with care
Scan: 100/100 SkillSpector 2.12.0 said do not install at bd4ea27
Checked: Sep 25, 2026

I read all 25 HIGH findings. The .npmrc hit is the update checker running `npm config get registry` (execSync, 5s timeout) so it respects your registry. /etc/passwd is a path-traversal test input. `rm -rf ~/.npm/_npx` is a troubleshooting tip in the docs. The "typosquats" (gaxios, enquirer, commondir) are real, established packages. The troubleshooting and memory-leak skills read your MCP config files to diagnose setup problems, which is what they are for. Rated CAUTION because the agent can read and change anything in the browser, usage statistics go to Google by default, and performance tools can send trace URLs to the CrUX API.

Publisher: Google Chrome DevTools team
Source: github.com/ChromeDevTools/chrome-devtools-mcp
Works with: Claude Code, Claude apps, Cursor, Codex, Gemini, Any agent
Categories: Frontend, UX, UI & design systems, DevOps & observability, Testing & QA, Accessibility
License: Apache-2.0
Cost: Free

Curated by Andrew Borden-Chisholm. Notes on building with these tools are on the blog.