What is google-webmcp?

A skill for using Google Search and Gemini through a local browser connection. Gemini is Google's chat-based AI service, and the skill also supports downloading images it generates.

Use it to run Google searches, chat with Gemini, check browser authentication, and download Gemini-generated images.

It provides a defined way for the coding agent to search Google or use Gemini when those services are needed. It also checks the connection and sign-in state before auth-sensitive actions.

google-webmcp — Skill for Codex by holon-run

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent

npx skills add holon-run/webmcp-bridge --skill google-webmcp

Clone the repo

git clone --depth 1 https://github.com/holon-run/webmcp-bridge

Made for: Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/holon-run/webmcp-bridge/google-webmcp.svg)](https://agentmods.dev/skills/holon-run/webmcp-bridge/google-webmcp)

Your own site

<a href="https://agentmods.dev/skills/holon-run/webmcp-bridge/google-webmcp"><img src="https://agentmods.dev/badge/skills/holon-run/webmcp-bridge/google-webmcp.svg" alt="Measured on agentmods" height="20"></a>

Per session 52 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 917 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00052	$0.00917
Opus 5	$0.00026	$0.00458
Sonnet 5	$0.00010	$0.00183
Haiku 4.5	$0.00005	$0.00092

Measured 8d ago against content hash 6f5b84ed099b, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-08, from the pricing page.

Security

Grade A, and why

google-webmcp scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.

The scan reads SKILL.md. This mod also ships 2 executable files (scripts/ensure-links.sh, scripts/validate.sh), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/google-webmcp/SKILL.md · 87 lines

How it starts

The opening of the file, as written. The whole thing — 87 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Google WebMCP

Use this skill to operate Google Search and Gemini through the built-in --site google bridge preset in @webmcp-bridge/local-mcp.

For generic bridge setup patterns or non-Google sites, switch to $webmcp-bridge.

Prerequisites

uxc is installed and available in PATH.
npx is installed and available in PATH.
Network access to https://www.google.com and https://gemini.google.com.
On a fresh machine, or under an isolated HOME, install Playwright browsers first with npx playwright install.
Gemini is auth-sensitive. Expect bootstrap_then_attach behavior when the profile is not signed in yet.

Core Workflow

Ensure the fixed Google link exists:
- command -v google-webmcp-cli
- if missing or pointed at the wrong profile, run skills/google-webmcp/scripts/ensure-links.sh
Inspect the bridge and tool schema before calling tools:
- google-webmcp-cli -h
- google-webmcp-cli search.web -h
- google-webmcp-cli gemini.chat -h
- google-webmcp-cli gemini.image.download -h
Check authentication state first when Gemini may need sign-in:
- google-webmcp-cli bridge.session.status
- google-webmcp-cli auth.get
- if the session is not ready, start bootstrap or switch to headed:
  - google-webmcp-cli bridge.session.bootstrap
  - google-webmcp-cli bridge.session.mode.set '{"mode":"headed"}'
  - google-webmcp-cli bridge.open
Use search tools for public search results:
- google-webmcp-cli search.web '{"query":"playwright browser automation","limit":10}'
- google-webmcp-cli page.get
Use Gemini through the same authenticated browser profile:
- text: google-webmcp-cli gemini.chat '{"prompt":"Summarize these results","mode":"text","timeoutMs":180000}'
- image: google-webmcp-cli gemini.chat '{"prompt":"a watercolor fox reading documentation","mode":"image","timeoutMs":300000}'
- download current visible images: google-webmcp-cli gemini.image.download '{"limit":4,"timeoutMs":120000}'
Use debug and navigation helpers only when necessary:
- google-webmcp-cli page.navigate '{"url":"https://gemini.google.com/app"}'
- google-webmcp-cli page.inspect '{"limit":20}'
Parse JSON output only:
- success path: .ok == true, consume .data
- failure path: .ok == false, inspect .error.code and .error.message

Read the full file on GitHub · 87 lines

Files

What ships with it

4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

8d ago First seen · 87 lines · 52 tokens per session scan A 6f5b84ed099b

Subscribe to this mod's changes

google-webmcp is a skill published in the GitHub repository holon-run/webmcp-bridge (27 stars, last pushed 4mo ago), licensed MIT. It adds 52 tokens to every session and 917 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Building agents Research ai-agent browser-automation browser-tools mcp model-context-protocol playwright

auto-research

Research uncertain questions with an explicit, user-approved web search or ChatGPT consultation, then present options and wait for implementation approval.

sickn33/agentic-awesome-skills · 29 tokens

moli-webfetch

Fetch, inspect, crawl, and capture live, JavaScript-rendered websites with Moli. Use when Codex needs current web content, web research, fact lookup, link following, a bounded crawl, client-rendered or response-gated content, network diagnostics, or a standalone HTML, Markdown, JSON, semantic-tree, viewport or…

lexmount/moli · 90 tokens

webcmd-browser

Use when a live browser task requires Playwright interaction, authenticated handoff, visible UI verification, or ad-hoc page inspection.

agentrhq/webcmd · 30 tokens

moli-cdp-server

Start Moli's CDP server and connect Playwright, Puppeteer, or raw CDP clients. Use to run a headless-browser CDP endpoint, replace a Chromium process, attach over CDP, enable real layout and screenshot surfaces, or diagnose CDP discovery, connection, and target startup—even when Moli is not named.

lexmount/moli · 74 tokens

playwright-rs-usage

Procedural reference for using playwright-rs in Rust browser-automation code — object model (Browser/Context/Page/Locator), the locator!() macro, builder pattern for options, auto-wait semantics, adding the crate and installing its browsers, and how to capture / inspect traces for failure diagnosis. Use when writing…

padamson/playwright-rust · 98 tokens

opensteer

Direct browser control via CDP. Use when the user wants to automate, inspect, scrape, test, or interact with web pages.

steerlabs/opensteer · 31 tokens