Chrome DevTools MCP server: setup & sharing

Live page debugging — console, network, performance — with page actions behind approval.

Run on your machine

Start the server on your host machine. Tools not listed in --allow are completely hidden from the agent.

Terminal · Host machine

npx -y @mcpwire/cli share \
  --name chrome-devtools \
  --allow "list_pages,select_page,new_page,navigate_page,close_page,resize_page,take_screenshot,take_snapshot,take_heapsnapshot,get_console_message,list_console_messages,get_network_request,list_network_requests,get_css_styles,performance_start_trace,performance_stop_trace,performance_analyze_insight,lighthouse_audit,screencast_start,screencast_stop,emulate" \
  --redact-secrets \
  -- npx -y chrome-devtools-mcp@1.12.0

Exposes 21 default tools with pattern-based secret redaction. Optionally set an expiry with --ttl 30m, prompt for approvals with --confirm, or limit calls with --max-calls 20.

Connect your teammate’s agent

MCPWire prints a unique wire://... ticket in your terminal. Send it privately to your teammate to paste into their MCP client:

Claude Desktop · Cursor · Windsurf config

{
  "mcpServers": {
    "chrome-devtools": {
      "command": "npx",
      "args": [
        "-y",
        "@mcpwire/cli",
        "join",
        "wire://<TICKET_FROM_HOST>"
      ]
    }
  }
}

Replace <TICKET_FROM_HOST> with the active session ticket. The agent can only discover and call the tools exposed above.

Scoped tool permissions

MCPWire acts as a Layer 7 JSON-RPC firewall. Requests for blocked tools are dropped on the wire before ever touching your machine.

Tool	Default Policy	Notes
`list_pages`	Allowed	Lists open tabs.
`select_page`	Allowed	Switches the active tab.
`new_page`	Allowed	Opens a new tab.
`navigate_page`	Allowed	Navigates to a URL.
`close_page`	Allowed	Closes a tab.
`resize_page`	Allowed	Resizes the viewport.
`take_screenshot`	Allowed	Captures the page.
`take_snapshot`	Allowed	Captures the accessibility tree.
`take_heapsnapshot`	Allowed	Captures a heap snapshot.
`get_console_message`	Allowed	Reads one console message.
`list_console_messages`	Allowed	Reads console output.
`get_network_request`	Allowed	Reads one network request — may include authenticated payloads.
`list_network_requests`	Allowed	Lists network activity.
`get_css_styles`	Allowed	Reads computed styles.
`performance_start_trace`	Allowed	Records a performance trace.
`performance_stop_trace`	Allowed	Stops the performance trace.
`performance_analyze_insight`	Allowed	Analyzes a trace insight.
`lighthouse_audit`	Allowed	Runs a Lighthouse audit.
`screencast_start`	Allowed	Starts a screen capture.
`screencast_stop`	Allowed	Stops the screen capture.
`emulate`	Allowed	Throttles CPU or network for the session.
`click`	Blocked (Review)	Clicks page elements — real actions on whatever page is open.
`fill`	Blocked (Review)	Types into form fields.
`fill_form`	Blocked (Review)	Fills multiple form fields.
`hover`	Blocked (Review)	Hovers page elements.
`drag`	Blocked (Review)	Drags page elements.
`press_key`	Blocked (Review)	Sends key presses to the page.
`type_text`	Blocked (Review)	Types text into the page.
`handle_dialog`	Blocked (Review)	Accepts or dismisses browser dialogs.
`evaluate_script`	Blocked (High risk)	Runs arbitrary JavaScript in the page context.

Test and verify

Try these recommended prompts to confirm the agent receives expected outputs and that restricted actions fail safely.

Try Chrome DevTools

No credentials needed — the server launches and drives a local Chrome. This is the official server from the Chrome DevTools team, and it is the natural pairing for MCPWire: a teammate can debug a bug on your machine as if they were sitting next to you.

Ask the agent to open your dev URL with navigate_page, then read list_console_messages and list_network_requests, capture with take_screenshot, or profile with performance_start_trace and lighthouse_audit. The browser session carries your cookies, so pages the guest opens see you logged in — navigate to your own dev server, not your production admin panel. Page interactions (click, fill, handle_dialog) and evaluate_script stay outside the default allowlist.

The generated command above contains the catalog’s explicit default allowlist. Check the guest’s tool list before making calls and use the server’s argument schema for required fields. See the CLI guide for guest configuration and session controls for approvals, redaction, and expiry.

Review the session in your browser: Add --record session.wirelog to your host command. Drop the resulting file into the Session Replay Viewer to inspect timestamps, latency, blocked attempts, and secret scrubbing.

← All server guides Open in command builder