browsing

Browsing with Chrome Direct

Overview

Control Chrome via DevTools Protocol using the use_browser MCP tool. Single unified interface with auto-starting Chrome.

Announce: "I'm using the browsing skill to control Chrome."

When to Use

Use this when:

• Controlling authenticated sessions
• Managing multiple tabs in running browser
• Playwright MCP unavailable or excessive

Use Playwright MCP when:

• Need fresh browser instances
• Generating screenshots/PDFs
• Prefer higher-level abstractions

Auto-Capture

Every DOM action (navigate, click, type, select, eval, keyboard_press, hover, drag_drop, double_click, right_click, file_upload) automatically saves:

• {prefix}.png — viewport screenshot
• {prefix}.md — page content as structured markdown
• {prefix}.html — full rendered DOM
• {prefix}-console.txt — browser console messages

Files are saved to the session directory with sequential prefixes (001-navigate, 002-click, etc.). You must check these before using extract or screenshot actions.

Credential-shaped pages: when a page shows a token or secret (Slack xoxb-/xapp-, GitHub ghp_/github_pat_, 1Password ops_/A3- keys, otpauth:// seeds, or any element marked data-sen-secret), no files are written for that action and the response says ⚠️ Page shows credential-shaped content; auto-capture and DOM output suppressed. with only metadata. extract/eval output has such values replaced by [REDACTED credential-shaped], and screenshot refuses. Capture secrets with a credential broker; use eval only for value-blind queries (e.g. "is the token field present?"). The check sees the HTML, rendered text and open shadow roots, but not closed shadow roots or iframes. SUPERPOWERS_CHROME_ALLOW_CREDENTIAL_CAPTURE=1 turns this off.

The use_browser Tool

Single MCP tool with action-based interface. Chrome auto-starts on first use.

Parameters:

• action (required): Operation to perform
• selector (optional): CSS or XPath selector for element operations
• payload (optional): Action-specific data (string or object)
• timeout (optional): Timeout in ms for await operations (default: 5000)

Active tab: Every action operates on the current activeTab. Use switch_tab to change it.

Actions Reference

Navigation

• navigate: Navigate to URL

  • payload: URL string
  • Example: {action: "navigate", payload: "https://example.com"}

• await_element: Wait for element to appear

  • selector: CSS selector
  • timeout: Max wait time in ms
  • Example: {action: "await_element", selector: ".loaded", timeout: 10000}

• await_text: Wait for text to appear

  • payload: Text to wait for
  • Example: {action: "await_text", payload: "Welcome"}

Interaction

• click: Click element

  • selector: CSS selector
  • Example: {action: "click", selector: "button.submit"}

• type: Text input

  • selector: Optional — clicks to focus first
  • payload: Text to type (\t=Tab, \n=Enter)
  • Example: {action: "type", selector: "#email", payload: "[email protected]"}

• double_click: Double-click element (fires dblclick event)

  • selector: CSS selector
  • Example: {action: "double_click", selector: ".item"}

• right_click: Right-click element (fires contextmenu event)

  • selector: CSS selector
  • Example: {action: "right_click", selector: ".row"}

• select: Select dropdown option

  • selector: CSS selector
  • payload: Option value(s)
  • Example: {action: "select", selector: "select[name=state]", payload: "CA"}

• keyboard_press: Press special keys (Tab, Enter, Escape, Arrow keys, F1-F12)

  • payload: Key name (string) or {"key": "Tab", "modifiers": {"shift": true, "ctrl": false, "alt": false, "meta": false}}
  • Example: {action: "keyboard_press", payload: "Tab"}
  • Example with modifiers: {action: "keyboard_press", payload: {"key": "Tab", "modifiers": {"shift": true}}}

Mouse Actions (CDP-Level)

These use CDP Input.dispatchMouseEvent, bypassing synthetic event restrictions.

• hover: Move mouse over element (CSS :hover, tooltips, menus)

  • selector: CSS selector
  • Example: {action: "hover", selector: ".menu-trigger"}

• drag_drop: Drag element to target (native drag-and-drop via CDP)

  • selector: Source element
  • payload: Target selector or JSON coordinates {"x":N,"y":N}
  • Example: {action: "drag_drop", selector: ".card", payload: ".column-2"}

• mouse_move: Move mouse to coordinates

  • payload: JSON {"x":N,"y":N} (optional: steps, fromX, fromY for smooth movement)
  • Example: {action: "mouse_move", payload: "{\"x\":100,\"y\":200}"}

• scroll: Scroll via mouse wheel events

  • payload: Direction (up/down/left/right) or JSON {"deltaX":N,"deltaY":N}
  • selector: Optional — scroll within element
  • Example: {action: "scroll", payload: "down"}

File Upload

• file_upload: Set files on input[type=file] elements (can't be done via JavaScript)
  • selector: File input element
  • payload: File path or JSON {"files":["/path/a.pdf","/path/b.jpg"]}
  • Example: {action: "file_upload", selector: "#upload", payload: "/tmp/doc.pdf"}

Extraction

• extract: Get page content

  • payload: Format ('markdown'|'text'|'html')
  • selector: Optional - limit to element
  • Example: {action: "extract", payload: "markdown"}
  • Example: {action: "extract", payload: "text", selector: "h1"}

• attr: Get element attribute

  • selector: CSS selector
  • payload: Attribute name
  • Example: {action: "attr", selector: "a.download", payload: "href"}

• eval: Execute JavaScript

  • payload: JavaScript code
  • Example: {action: "eval", payload: "document.title"}

Export

• screenshot: Capture screenshot of a specific element
  • payload: Filename
  • selector: Optional - screenshot specific element
  • Viewport screenshots are auto-captured after every DOM action. Use this only when you need a specific element.
  • Example: {action: "screenshot", payload: "/tmp/chart.png", selector: ".chart"}

Tab Management

• list_tabs: List all open tabs

  • Example: {action: "list_tabs"}

• new_tab: Create new tab

  • Example: {action: "new_tab"}

• close_tab: Close the active tab

  • Example: {action: "close_tab"}

• switch_tab: Switch the active tab (sticky — stays until changed)

  • payload: Tab index (number), URL substring, or title substring
  • Example: {action: "switch_tab", payload: 1} (by index)
  • Example: {action: "switch_tab", payload: "example.com"} (by URL substring)
  • Example: {action: "switch_tab", payload: "GitHub"} (by title substring)

Browser Mode Control

• show_browser: Make browser window visible (headed mode)

  • Example: {action: "show_browser"}
  • ⚠️ WARNING: Restarts Chrome, reloads pages via GET, loses POST state

• hide_browser: Switch to headless mode (invisible browser)

  • Example: {action: "hide_browser"}
  • ⚠️ WARNING: Restarts Chrome, reloads pages via GET, loses POST state

• browser_mode: Check current browser mode, port, and profile

  • Example: {action: "browser_mode"}
  • Returns: {"headless": true|false, "mode": "headless"|"headed", "running": true|false, "port": 9222, "profile": "name", "profileDir": "/path"}

Profile Management

• set_profile: Change Chrome profile (must kill Chrome first)

  • Example: {action: "set_profile", "payload": "browser-user"}
  • ⚠️ WARNING: Chrome must be stopped first
  • Side effect: marks the profile as explicit, opting out of auto-disambiguation (see below)

• get_profile: Get current profile name and directory

  • Example: {action: "get_profile"}
  • Returns: {"profile": "name", "profileDir": "/path"}

Default behavior: Chrome starts in headless mode with "superpowers-chrome" profile on a dynamically allocated port (range 9222-12111). Override the port with CHROME_WS_PORT; override the profile with CHROME_WS_PROFILE.

Auto-disambiguation across parallel MCPs: When two MCP servers start on the same host with the default profile, the first claims superpowers-chrome (port 9222) and later ones silently fall through to superpowers-chrome-2 (port 9223), superpowers-chrome-3, etc. Each MCP drives its own Chrome with its own profile dir; they don't fight over activeTab. The bridge tracks ownership via a lock file at ~/.cache/superpowers/browser-profiles/<profile>.mcp.lock; stale locks (dead PIDs) are reclaimed automatically.

To opt out of disambiguation — e.g., to intentionally share Chrome between a long-lived chrome-ws CLI session and your MCP — set the profile name explicitly:

• Env var: CHROME_WS_PROFILE=my-profile
• Or: {action: "set_profile", payload: "my-profile"} at runtime

An explicit profile name still acquires the lock, but on conflict the bridge shares rather than disambiguates — the second process reconnects to the first's Chrome (the original reconnect-on-restart behavior).

Chrome Lifecycle (Recovery)

• kill_chrome: Kill the Chrome process this MCP is driving

  • Example: {action: "kill_chrome"}
  • Releases the meta.json; next page action auto-restarts Chrome

• restart_chrome: kill_chrome + immediate spawn

  • Example: {action: "restart_chrome"}

Auto-restart banner: when the bridge has to spawn a fresh Chrome (because the previous one died or was killed externally — e.g., kill -9 <pid> from the shell), the first response after the restart prepends:

[Chrome auto-restarted; URL reset to about:blank. Re-navigate to continue.]

Treat this as a signal that your prior URL / tab state is gone — re-navigate before assuming anything about the current page.

Console Logging

Capture browser console output for the active tab. Buffer is keyed by the page session's sessionId, so it survives close_tab/new_tab ordering quirks. Levels: log, info, warn, error.

• enable_console_logging: Start capturing

  • Example: {action: "enable_console_logging"}

• get_console_messages: Read captured messages

  • All: {action: "get_console_messages"}
  • Since timestamp (epoch ms): {action: "get_console_messages", payload: {since: 1716000000000}}
  • Returns: array of {timestamp, level, text} entries

• clear_console_messages: Reset the buffer

  • Example: {action: "clear_console_messages"}

Dialog Handling

Native dialogs (JS alert/confirm/prompt, beforeunload, HTTP basic-auth, permission prompts, device choosers) pause the page. While a dialog is open, page-targeted actions (extract, click, eval, etc.) return a refusal whose text contains Page is behind a dialog and lists the available dialog::* selectors.

When a dialog fires during a navigate (typical for HTTP basic-auth), navigate itself throws with the dialog grammar in the message — you don't have to issue a separate page-targeted call to discover the dialog.

Handle dialogs by clicking/typing a dialog::* selector:

• {action: "click", selector: "dialog::accept"} — accept JS alert/confirm/prompt, beforeunload, permission grant
• {action: "click", selector: "dialog::dismiss"} — dismiss / cancel / deny
• {action: "type", selector: "dialog::prompt", payload: "text"} then accept — respond to JS prompt
• {action: "type", selector: "dialog::username", payload: "alice"} + {action: "type", selector: "dialog::password", payload: "secret"} + {action: "click", selector: "dialog::accept"} — HTTP basic-auth
• {action: "click", selector: "dialog::device[id=\"<deviceId>\"]"} — pick a WebUSB/Bluetooth/Serial/HID device

Critical caveats when toggling modes:

1. Chrome must restart - Cannot switch headless/headed mode on running Chrome
2. Pages reload via GET - All open tabs are reopened with GET requests
3. POST state is lost - Form submissions, POST results, and POST-based navigation will be lost
4. Session state is lost - Any client-side state (JavaScript variables, etc.) is cleared
5. Cookies/auth may persist - Uses same user data directory, so logged-in sessions may survive

When to use headed mode:

• Debugging visual rendering issues
• Demonstrating browser behavior to user
• Testing features that only work with visible browser
• Debugging issues that don't reproduce in headless mode

When to stay in headless mode (default):

• All other cases - faster, cleaner, less intrusive
• Screenshots work perfectly in headless mode
• Most automation works identically in both modes

Profile management: Profiles store persistent browser data (cookies, localStorage, extensions, auth sessions).

Profile locations:

• macOS: ~/Library/Caches/superpowers/browser-profiles/{name}/
• Linux: ~/.cache/superpowers/browser-profiles/{name}/
• Windows: %LOCALAPPDATA%/superpowers/browser-profiles/{name}/

When to use separate profiles:

• Default profile ("superpowers-chrome"): General automation, shared sessions
• Agent-specific profiles: Isolate different agents' browser state
  • Example: browser-user agent uses "browser-user" profile
• Task-specific profiles: Testing with different user contexts
  • Example: "test-logged-in" vs "test-logged-out"

Profile data persists across:

• Chrome restarts
• Mode toggles (headless ↔ headed)
• System reboots (data is in cache directory)

To use a different profile:

1. Kill Chrome if running: await chromeLib.killChrome()
2. Set profile: {action: "set_profile", "payload": "my-profile"}
3. Start Chrome: Next navigate/action will use new profile

Quick Start Pattern

Navigate and extract:
{action: "navigate", payload: "https://example.com"}
{action: "await_element", selector: "h1"}
{action: "extract", payload: "text", selector: "h1"}

Common Patterns

Fill and Submit Form

{action: "navigate", payload: "https://example.com/login"}
{action: "await_element", selector: "input[name=email]"}
{action: "type", selector: "input[name=email]", payload: "[email protected]"}
{action: "type", selector: "input[name=password]", payload: "pass123"}
{action: "keyboard_press", payload: "Enter"}
{action: "await_text", payload: "Welcome"}

Uses keyboard_press to submit the form.

Multi-Tab Workflow

{action: "list_tabs"}
{action: "switch_tab", payload: 2}
{action: "click", selector: "a.email"}
{action: "await_element", selector: ".content"}
{action: "extract", payload: "text", selector: ".amount"}

Dynamic Content

{action: "navigate", payload: "https://example.com"}
{action: "type", selector: "input[name=q]", payload: "query"}
{action: "click", selector: "button.search"}
{action: "await_element", selector: ".results"}
{action: "extract", payload: "text", selector: ".result-title"}

Get Link Attribute

{action: "navigate", payload: "https://example.com"}
{action: "await_element", selector: "a.download"}
{action: "attr", selector: "a.download", payload: "href"}

Execute JavaScript

{action: "eval", payload: "document.querySelectorAll('a').length"}
{action: "eval", payload: "Array.from(document.querySelectorAll('a')).map(a => a.href)"}

Resize Viewport (Responsive Testing)

Use eval to resize the browser window for testing responsive layouts:

{action: "eval", payload: "window.resizeTo(375, 812); 'Resized to mobile'"}
{action: "eval", payload: "window.resizeTo(768, 1024); 'Resized to tablet'"}
{action: "eval", payload: "window.resizeTo(1920, 1080); 'Resized to desktop'"}

Note: This resizes the window, not device emulation. It won't change:

• Device pixel ratio (retina displays)
• Touch events
• User-Agent string

For most responsive testing, window resize is sufficient.

Clear Cookies

Use eval to clear cookies accessible to JavaScript:

{action: "eval", payload: "document.cookie.split(';').forEach(c => { document.cookie = c.trim().split('=')[0] + '=;expires=Thu, 01 Jan 1970 00:00:00 GMT;path=/'; }); 'Cookies cleared'"}

Note: This clears cookies accessible to JavaScript. It won't clear:

• httpOnly cookies (server-side only)
• Cookies from other domains

For most logout/reset scenarios, this is sufficient.

Scroll Page

{action: "scroll", payload: "down"}
{action: "scroll", payload: "up"}
{action: "scroll", selector: ".container", payload: "{\"deltaX\":0,\"deltaY\":500}"}

Uses real mouse wheel events (vs eval + scrollTo which bot detectors flag).

Tips

Always wait before interaction: Don't click or fill immediately after navigate - pages need time to load.

// BAD - might fail if page slow
{action: "navigate", payload: "https://example.com"}
{action: "click", selector: "button"}  // May fail!

// GOOD - wait first
{action: "navigate", payload: "https://example.com"}
{action: "await_element", selector: "button"}
{action: "click", selector: "button"}

Use specific selectors: Avoid generic selectors that match multiple elements.

// BAD - matches first button
{action: "click", selector: "button"}

// GOOD - specific
{action: "click", selector: "button[type=submit]"}
{action: "click", selector: "#login-button"}

Submit forms: Use keyboard_press with Enter after type, or append \n to the payload.

{action: "type", selector: "#search", payload: "query"}
{action: "keyboard_press", payload: "Enter"}

Check content first: Extract page content to verify selectors before building workflow.

{action: "extract", payload: "html"}

Troubleshooting

Element not found:

• Use await_element before interaction
• Verify selector with extract action using 'html' format

Timeout errors:

• Increase timeout: {timeout: 30000} for slow pages
• Wait for specific element instead of text

Wrong tab active:

• Use list_tabs to see all open tabs
• Use switch_tab with a URL or title substring to reliably switch tabs
• Tab indices shift when tabs close — prefer URL/title-based switching

eval returns [object Object]:

• Use JSON.stringify() for complex objects: {action: "eval", payload: "JSON.stringify({name: 'test'})"}
• For async functions: {action: "eval", payload: "JSON.stringify(await yourAsyncFunction())"}

Test Automation (Advanced)

{"action": "navigate", "payload": "https://app.com"}
{"action": "click", "selector": "#test-button"}
{"action": "eval", "payload": "JSON.stringify({passed: document.querySelector('.success') !== null})"}

# Example: Automated form testing
./chrome-ws navigate 0 "https://app.com/form"
./chrome-ws fill 0 "#email" "[email protected]"
./chrome-ws click 0 "button[type=submit]"
./chrome-ws wait-text 0 "Success"

Advanced Usage

For command-line usage outside Claude Code, see COMMANDLINE-USAGE.md.

For detailed examples, see EXAMPLES.md.

Protocol Reference

Full CDP documentation: https://chromedevtools.github.io/devtools-protocol/