Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
git clone --depth 1 https://github.com/triuzzi/brave-devtools-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/plugins/triuzzi/brave-devtools-mcp/gemini-extension)<a href="https://agentmods.dev/plugins/triuzzi/brave-devtools-mcp/gemini-extension"><img src="https://agentmods.dev/badge/plugins/triuzzi/brave-devtools-mcp/gemini-extension/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/plugins/triuzzi/brave-devtools-mcp/gemini-extension"><img src="https://agentmods.dev/badge/plugins/triuzzi/brave-devtools-mcp/gemini-extension.svg" alt="Reviewed on agentmods" width="80" height="20"></a>Grade A, and why
brave-devtools-mcp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
{
"name": "brave-devtools-mcp",
"version": "1.11.0",
"mcpServers": {
"brave-devtools": {
"command": "npx",
"args": [
"[email protected]"
]
}
}
}
What ships with it
60 files beside gemini-extension.json in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- scripts/append-lighthouse-notices.ts 799 B runs code
- scripts/clean-submodules.ts 998 B runs code
- scripts/count_tokens.ts 906 B runs code
- scripts/eslint_rules/check-license-rule.js 2.4 KB runs code
- scripts/eslint_rules/enforce-using-rule.js 2.8 KB runs code
- scripts/eslint_rules/enforce-zod-schema-rule.js 1.6 KB runs code
- scripts/eslint_rules/local-plugin.js 719 B runs code
- scripts/eslint_rules/no-direct-third-party-imports-rule.js 4.1 KB runs code
- scripts/eslint_rules/require-parsed-arguments-rule.js 4.1 KB runs code
- scripts/eval_gemini.ts 7.7 KB runs code
- scripts/eval_result.ts 3.4 KB runs code
- scripts/eval_scenarios/console_test.ts 759 B runs code
- scripts/eval_scenarios/cookie_banner_conformance_test.ts 1.6 KB runs code
- scripts/eval_scenarios/cookie_debugging_test.ts 1.1 KB runs code
- scripts/eval_scenarios/cookie_httponly_trigger_test.ts 769 B runs code
- scripts/eval_scenarios/cookie_issues_audit_test.ts 801 B runs code
- scripts/eval_scenarios/css_cascade_layer_override_test.ts 1.8 KB runs code
- scripts/eval_scenarios/css_custom_property_resolution_test.ts 1.9 KB runs code
- scripts/eval_scenarios/css_descendant_specificity_test.ts 1.9 KB runs code
- scripts/eval_scenarios/css_important_vs_specificity_test.ts 1.5 KB runs code
- scripts/eval_scenarios/css_inline_style_override_test.ts 1.7 KB runs code
- scripts/eval_scenarios/emulation_test.ts 547 B runs code
- scripts/eval_scenarios/emulation_userAgent_test.ts 798 B runs code
- scripts/eval_scenarios/emulation_viewport_test.ts 674 B runs code
- scripts/eval_scenarios/fill_select_and_checkboxes_test.ts 3.0 KB runs code
- scripts/eval_scenarios/fix_webpage_issues_test.ts 1.9 KB runs code
- scripts/eval_scenarios/frontend_snapshot_test.ts 853 B runs code
- scripts/eval_scenarios/input_parallel_test.ts 1.0 KB runs code
- scripts/eval_scenarios/input_test.ts 944 B runs code
- scripts/eval_scenarios/isolated_context_test.ts 633 B runs code
- scripts/eval_scenarios/lighthouse_a11y_test.ts 884 B runs code
- scripts/eval_scenarios/lighthouse_best_practices_test.ts 891 B runs code
- scripts/eval_scenarios/navigation_test.ts 656 B runs code
- scripts/eval_scenarios/network_test.ts 775 B runs code
- scripts/eval_scenarios/page_focus_keyboard_test.ts 2.5 KB runs code
- scripts/eval_scenarios/page_id_routing_concurrent_form_test.ts 2.7 KB runs code
- scripts/eval_scenarios/page_id_routing_cross_page_state_test.ts 3.1 KB runs code
- scripts/eval_scenarios/page_id_routing_test.ts 1.8 KB runs code
- scripts/eval_scenarios/performance_test.ts 559 B runs code
- scripts/eval_scenarios/select_page_test.ts 695 B runs code
- scripts/eval_scenarios/snapshot_test.ts 639 B runs code
- scripts/generate-cli.ts 5.7 KB runs code
- scripts/generate-docs.ts 14 KB runs code
- scripts/post-build.ts 5.9 KB runs code
- scripts/prepare.ts 3.6 KB runs code
- scripts/profile/inspector.ts 4.2 KB runs code
- scripts/profile/profile_mcp.ts 11 KB runs code
- scripts/profile/scenarios/get_console_messages.ts 710 B runs code
- scripts/profile/scenarios/get_css_styles.ts 1.5 KB runs code
- scripts/profile/scenarios/navigation.ts 893 B runs code
- scripts/profile/scenarios/page_churn.ts 1.0 KB runs code
- scripts/profile/scenarios/performance_trace.ts 1.3 KB runs code
- scripts/profile/source_map_server.ts 4.7 KB runs code
- scripts/profile/types.ts 777 B runs code
- scripts/profile/utils.ts 3.3 KB runs code
- scripts/test.js 2.6 KB runs code
- scripts/tsconfig.json 622 B
- scripts/update_metrics.ts 3.8 KB runs code
- scripts/update-lighthouse.ts 1.4 KB runs code
- scripts/verify-live-brave.mjs 5.3 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed 30f6a89f98f4
- 10d ago Changed 9ae216b13b33
- 1mo ago First seen · 13 lines scan A 21907ff3842a
brave-devtools-mcp is a plugin published in the GitHub repository triuzzi/brave-devtools-mcp (43 stars, last pushed today), licensed Apache-2.0. Its token cost is not measured: this kind of file is read by the harness, not the model. A static security scan graded it A with 0 findings. It comes from a forked repository.
Other plugins, from other repositories
chrome-devtools-mcp
Reliable automation, in-depth debugging, and performance analysis in Chrome using Chrome DevTools and Puppeteer.
chrome-devtools-mcp
MCP configuration declaring 1 server: chrome-devtools.
webview-devtools-mcp
DevTools for any WebView — no remote-debugging port required. Works in Safari/iOS WebView/Lark Web App and more.
cdpilot
Zero-dependency browser automation over raw CDP — 70+ commands, friction ladder, 3-tier stealth, CAPTCHA + press-and-hold solvers, proxy pools, MCP server. No Puppeteer/Playwright/Selenium.
webmcpify
WebMCP agent skill for curated core coverage or route-by-route parity — inventory an existing web app, integrate approved tools, then verify and heal them in a real browser.
devharness
Run and debug a live app from inside Claude Code: breakpoints and variable inspection in Chrome and Node.js, managed dev servers, and replayable call history so setup is never re-driven by hand.