Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Chrome DevTools MCP (2025)

developer.chrome.com

Post reply on HN
Print view View original

1–10 of 266 posts

Re: Chrome DevTools MCP (2025)

#2

Post by aadishv »

Someone already made a great agent skill for this, which I'm using daily, and it's been very cool!

https://github.com/pasky/chrome-cdp-skill

For example, I use codex to manage a local music library, and it was able to use the skill to open a YT Music tab in my browser, search for each album, and get the URL to pass to yt-dlp.

Do note that it only works for Chrome browsers rn, so you have to edit the script to point to a different Chromium browser's binary (e.g. I use Helium) but it's simple enough

Re: Chrome DevTools MCP (2025)

#3

Post by Etheryte »

aadishv wrote: post #2

Someone already made a great agent skill for this, which I'm using daily, and it's been very cool! https://github.com/pasky/chrome-cdp-skill For example, I use codex to manage a local music library, and it was able to use the skill to open a YT Music tab in my browser, search for each album, and get the URL to pass to yt-dlp. Do note that it only works for Chrome browsers rn, so you have to edit the script to point t…

On one hand, cool demo, on the other, this is horrifying in more ways than I can begin to describe. You're literally one prompt injection away from someone having unlimited access to all of your everything.

Re: Chrome DevTools MCP (2025)

#4

Post by aadishv »

Etheryte wrote: post #3
aadishv wrote: post #2

Someone already made a great agent skill for this, which I'm using daily, and it's been very cool! https://github.com/pasky/chrome-cdp-skill For example, I use codex to manage a local music library, and it was able to use the skill to open a YT Music tab in my browser, search for each album, and get the URL to pass to yt-dlp. Do note that it only works for Chrome browsers rn, so you have to edit the script to point t…

On one hand, cool demo, on the other, this is horrifying in more ways than I can begin to describe. You're literally one prompt injection away from someone having unlimited access to all of your everything.

Of course I still watch it and have my finger on the escape key at all times :)

Re: Chrome DevTools MCP (2025)

#7

Post by mh- »

Etheryte wrote: post #3
aadishv wrote: post #2

Someone already made a great agent skill for this, which I'm using daily, and it's been very cool! https://github.com/pasky/chrome-cdp-skill For example, I use codex to manage a local music library, and it was able to use the skill to open a YT Music tab in my browser, search for each album, and get the URL to pass to yt-dlp. Do note that it only works for Chrome browsers rn, so you have to edit the script to point t…

On one hand, cool demo, on the other, this is horrifying in more ways than I can begin to describe. You're literally one prompt injection away from someone having unlimited access to all of your everything.

Not the person you're replying to, but: I just use a separate, dedicated Chrome profile that isn't logged into anything except what I'm working on. Then I keep the persistence, but without commingling in a way that dramatically increases the risk.

edit: upon rereading, I now realize the (different) prompt injection risk you were calling out re: the handoff to yt-dlp. Separate profiles won't save you from that, though there are other approaches.

Re: Chrome DevTools MCP (2025)

#9

Post by speedgoose »

Interesting. MCP APIs can be useful for humans too.

Chrome's dev tools already had an API [1], but perhaps the new MCP one is more user friendly, as one main requirement of MCP APIs is to be understood and used correctly by current gen AI agents.

[1]: https://chromedevtools.github.io/devtools-protocol/

Post reply on HN