MCP tool reference
All 84 tools, generated from the extension's registry. This list and the store listing cannot disagree — both are produced from the same source.
browser_healthbrowser_list_tabsbrowser_navigatebrowser_close_tabbrowser_switch_tabbrowser_backbrowser_forwardbrowser_reloadbrowser_waitbrowser_read_pagebrowser_snapshotbrowser_clickbrowser_fillbrowser_hoverbrowser_typebrowser_pressbrowser_selectbrowser_scrollbrowser_screenshotbrowser_evaluatebrowser_network_startbrowser_network_stopbrowser_network_listbrowser_console_startbrowser_console_stopbrowser_console_listbrowser_pdfbrowser_uploadbrowser_detect_editorbrowser_history_searchbrowser_bookmarks_searchbrowser_downloads_listbrowser_download_cancelbrowser_auditbrowser_check_linksbrowser_check_spellingbrowser_visual_capture_baselinebrowser_visual_comparebrowser_visual_diffbrowser_record_startbrowser_record_stopbrowser_record_listbrowser_record_eventsbrowser_record_replaybrowser_css_scanbrowser_css_copybrowser_css_editbrowser_css_extractbrowser_css_unusedbrowser_inspect_startbrowser_inspect_stopbrowser_inspect_modebrowser_inspect_statusbrowser_fullpage_capturebrowser_screenshot_annotatebrowser_screenshot_cropbrowser_screenshot_exportbrowser_screenshot_historybrowser_md_viewbrowser_md_diffbrowser_vault_savebrowser_vault_loadbrowser_vault_listbrowser_vault_deletebrowser_codegen_startbrowser_codegen_stopbrowser_codegen_exportbrowser_codegen_statusbrowser_dom_compressbrowser_dom_deltabrowser_firewall_set_policybrowser_firewall_checkbrowser_firewall_get_policybrowser_shadow_startbrowser_shadow_stopbrowser_shadow_comparebrowser_license_checkbrowser_license_activatebrowser_timetravel_snapshotbrowser_timetravel_listbrowser_timetravel_inspectbrowser_timetravel_exportbrowser_manifest_generatebrowser_manifest_validate
Risk tiers
Every tool carries a risk classification that drives the approval gate.
| Tier | Examples | Default behaviour for an MCP caller |
|---|---|---|
| Low | Reading a page, snapshots, CSS inspection, screenshots, navigation | Runs |
| Medium | Closing a tab, starting capture, editing styles live | Runs; gated when you set the policy to ask for everything |
| High | Clicking, filling, typing, evaluating JavaScript, uploading, all vault operations | Stops and asks |
An unrecognised tool name is treated as high risk. Defaulting an unknown capability to "safe" is how a gate quietly stops being one.