frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Let your Coding Agent debug the browser session with Chrome DevTools MCP

https://developer.chrome.com/blog/chrome-devtools-mcp-debug-your-browser-session
146•xnx•2h ago

Comments

aadishv•1h ago
Someone already made a great agent skill for this, which I'm using daily, and it's been very cool!

https://github.com/pasky/chrome-cdp-skill

For example, I use codex to manage a local music library, and it was able to use the skill to open a YT Music tab in my browser, search for each album, and get the URL to pass to yt-dlp.

Do note that it only works for Chrome browsers rn, so you have to edit the script to point to a different Chromium browser's binary (e.g. I use Helium) but it's simple enough

Etheryte•1h ago
On one hand, cool demo, on the other, this is horrifying in more ways than I can begin to describe. You're literally one prompt injection away from someone having unlimited access to all of your everything.
aadishv•1h ago
Of course I still watch it and have my finger on the escape key at all times :)
bergheim•1h ago
For now you are. All these things fall with time, of course. You will stop caring once you start feeling safe, we all do.

Also. AAarrgh, my new thing to be annoyed at is AI drivel written slop.

"No browser automation framework, no separate browser instance, no re-login."

Oh really, nice. No separate computer either? No separate power station, no house, no star wars? No something else we didn't ask for? Just one a toggle and you go? Whoaaaaaa.

Edit: lol even the skill itself is vibe coded:

Lightweight Chrome DevTools Protocol CLI. Connects directly via WebSocket — no Puppeteer, works with 100+ tabs, instant connection.

I feel like there's nothing fucking left on the internet anymore that is not some mean of whatever the LLM is trained to talk like now.

tacitusarc•45m ago
What can you do? I mentioned the use of AI on another thread, asking essentially the same question. The comment was flagged, presumably as off topic. Fair enough, I guess. But about 80% (maybe more) of posted blogs etc that I see on HN now have very obvious signs of AI. Comments do too. I hate it. If I want to see what Claude thinks I can ask it.

HN is becoming close to unusable, and this isn’t like the previous times where people say it’s like reddit or something. It is inundated with bot spam, it just happens the bot spam is sufficiently engaging and well-written that it is really hard to address.

bergheim•13m ago
I hear you and I agree. I don't know. Gated communities?
glenpierce•39m ago
I am in awe of the confidence you have in your reflexes.
mh-•1h ago
Not the person you're replying to, but: I just use a separate, dedicated Chrome profile that isn't logged into anything except what I'm working on. Then I keep the persistence, but without commingling in a way that dramatically increases the risk.

edit: upon rereading, I now realize the (different) prompt injection risk you were calling out re: the handoff to yt-dlp. Separate profiles won't save you from that, though there are other approaches.

sofixa•27m ago
Even without the bash escape risk (which can be mitigated with the various ways of only allowing yt-dlp to be executed), YT Music is a paid service gated behind a Google account, with associated payment method. Even just stealing the auth cookie is pretty serious in terms of damage it could do.
mh-•20m ago
Agreed. I wouldn't cut loose an agent that's at risk of prompt injection w/ unscoped access to my primary Google account.

But if I understood the original commenter's use case, they're just searching YT Music to get the URL to a given song. This appears[0] to work fine without being logged in. So you could parameterize or wrap the call to yt-dlp and only have your cookie jar usable there.

[0]: https://music.youtube.com/search?q=sandstorm

[1]: https://music.youtube.com/watch?v=XjvkxXblpz8

sofixa•15m ago
Oh, that's true, even allows you to play without an account. I can swear that at some point it flat out refused any use unless you're logged in with an account that has YT Music (I remember having to go to regular YouTube to get the same song to send it to someone who didn't have it).
sheepscreek•1h ago
As long as it’s gated and not turned on by default, it’s all good. They could also add a warning/sanity check similar to “allow pasting” in the console.
hrmtst93837•5m ago
Relying on warnings or opt-ins for something with this blast radius is security theater more than protection. The cleverest malware barely waits for you to click OK before making itself at home, so that checkbox is a speed bump on a highway.

Chrome's 'allow pasting' gets ignored reflexively by most users anyway. If this agent can touch DevTools the attack surface expands far faster than most people realize or will ever audit.

paulirish•3m ago
To be clear, this isn't a skill for the devtools mcp, but an independent project. It doesn't look bad, but obviously browser automation + agents is a very busy space with lots of parallel efforts.

DevTools MCP and its new CLI are maintained by the team behind Chrome DevTools & Puppeteer and it certainly has a more comprehensive feature set. I'd expect it to be more reliable, but.. hey open source competition breeds innovation and I love that. :)

(I used to work on the DevTools team. And I still do, too)

Yokohiii•1h ago
Was already eye rolling about the headline. Then I realized it's from chrome.

Hoping from some good stories from open claw users that permanently run debug sessions.

NiekvdMaas•1h ago
Also works nicely together with agent-browser (https://github.com/vercel-labs/agent-browser) using --auto-connect
speedgoose•1h ago
Interesting. MCP APIs can be useful for humans too.

Chrome's dev tools already had an API [1], but perhaps the new MCP one is more user friendly, as one main requirement of MCP APIs is to be understood and used correctly by current gen AI agents.

[1]: https://chromedevtools.github.io/devtools-protocol/

zxspectrumk48•1h ago
I found this one working amazingly well (same idea - connect to existing session): https://github.com/remorses/playwriter
boomskats•57m ago
Been using this one for a while, mostly with codex on opencode. It's more reliable and token efficient than other devtools protocol MCPs i've tried.

Favourite unexpected use case for me was telling gemini to use it as a SVG editing repl, where it was able to produce some fantastic looking custom icons for me after 3-4 generate/refresh/screenshot iterations.

Also works very nicely with electron apps, both reverse engineering and extending.

raw_anon_1111•39m ago
I don’t do any serious web development and haven’t for 25 years aside from recently vibe coding internal web admin portals for back end cloud + app dev projects. But I did recently have to implement a web crawler for a customer’s site for a RAG project using Chromium + Playwrite in a Docker container deployed to Lambda.

I ran the Docker container locally for testing. Could a web developer test using Claude + Chromium in a Docker container without using their real Chrome instance?

slrainka•35m ago
chrome-cli with remote developer port has been working fine this entire time.
oldeucryptoboi•30m ago
I tell Claude to use playwright so I don't even need to do the setup myself.
nomilk•28m ago
Similarly, cursor has a built in browser and visit localhost to see the results in the browser. Although I don't use it much (I probably should).
tonyhschu•29m ago
Very cool. I do something like this but with Playwright. It used to be a real token hog though, and got expensive fast. So much so that I built a wrapper to dump results to disk first then let the agent query instead. https://uisnap.dev/

Will check this out to see if they’ve solved the token burn problem.

JKolios•26m ago
Now that there's widespread direct connectivity between agents and browser sessions, are CAPTCHAs even relevant anymore?
pritesh1908•26m ago
I have been using Playwright for a fairly long time now. Do checkout
glerk•20m ago
Note that this is a mega token guzzler in case you’re paying for your own tokens!
senand•19m ago
I suggest to use https://github.com/simonw/rodney instead
meowface•16m ago
Unfortunately there are like a billion competitors to this right now (including Playwright MCP, Playwright CLI, the new baked-in Playwright feature in Codex /experimental, Claude Code for Chrome...) and I can never quite decide if or when I should try to switch. I'm still just using the ordinary Playwright MCP server in both Codex and Claude Code, for the time being.
rossvc•16m ago
I've been using the DevTools MCP for months now, but it's extremely token heavy. Is there an alternative that provides the same amount of detail when it comes to reading back network requests?
nerdsniper•11m ago
It's probably not fully optimized and could be compacted more with just some effort, and further with clever techniques, but browser state/session data will always use up a ton of tokens because it's a ton of data. There's not really a way around that. AI's have a surprising "intuition" about problems that often help them guess at solutions based on insufficient information (and they guess correctly more often than I expect they should). But when their intuition isn't enough and you need to feed them the real logs/data...it's always gonna use a bunch of tokens.

This is one place where human intuition helps a ton today. If you can find the most relevant snippets and give the AI just the right context, it does a much better job.

paulirish•10m ago
The project just recently landed a CLI that's been in the works: https://github.com/ChromeDevTools/chrome-devtools-mcp/blob/m...

* AFAIK the CLI hasn't yet been announced, but it's in the latest v0.20.0 release.

mmaunder•7m ago
Yes. CLI. Always CLI. Never MCP. Ever. You’re welcome.
mmaunder•8m ago
Google is so far behind agentic cli coding. Gemini CLI is awful. So bad in fact that it’s clear none of their team use it. Also MCP is very obviously dead, as any of us doing heavy agentic coding know. Why permanently sacrifice that chunk of your context window when you can just use CLI tools which are also faster and more flexible and many are already trained in. Playwright with headless Chromium or headed chrome is what anyone serious is using and we get all the dev and inspection tools already. And it works perfectly. This only has appeal to those starting out and confused into thinking this is the way. The answer is almost never MCP.
dataviz1000•5m ago
I use Playwright to intercept all requests and responses and have Claude Code navigate to a website like YouTube and click and interact with all the elements and inputs while recording all the requests and responses associated with each interaction. Then it creates a detailed strongly typed API to interact with any website using the underlying API.

Yes, I know it likely breaks everybody's terms of service but at the same time I'm not loading gigabytes of ads, images, markup, to accomplish things.

If anyone is interested I can take some time and publish it this week.

xrd•2m ago
Yes, please do!

Show HN: Graft – Your local environment, everywhere

https://graft.run
1•erdaniels•20s ago•0 comments

Canada's Bill C-22 Mandates Mass Metadata Surveillance of Canadians

https://www.parl.ca/DocumentViewer/en/45-1/bill/C-22/first-reading
1•opengrass•1m ago•0 comments

Russia's new elite hit squad was compromised by using Google Translate

https://theins.ru/en/inv/290235
1•amarcheschi•1m ago•0 comments

DriverExplorer – Windows kernel driver loader and viewer in Rust

https://github.com/orinimron123/DriverExplorer
1•orinimron123•2m ago•0 comments

I'm Too Lazy to Check Datadog Every Morning, So I Made AI Do It

https://quickchat.ai/post/automate-bug-triage-with-claude-code-and-datadog
1•piotrgrudzien•4m ago•0 comments

Turing, Gödel, and Church at Princeton in the 1930s (2012) [video]

https://www.youtube.com/watch?v=kO-8RteMwfw
1•gone35•6m ago•0 comments

Wizaskdo

https://github.com/xmonader/wizaskdo
1•aredirect•9m ago•1 comments

Show HN: Lux – Drop-in Redis replacement in Rust. 5.6x faster, ~1MB Docker image

https://github.com/lux-db/lux
2•mattyhogan•10m ago•1 comments

LessWrong Policy on LLM Use

https://www.lesswrong.com/posts/nQWavk9mnwcv6ScMR/new-lesswrong-editor-also-an-update-to-our-llm-...
2•xpe•11m ago•0 comments

It Ought to Be a Pull Door

https://elliotbonneville.com/it-really-ought-to-be-a-pull-door/
2•elliotbnvl•11m ago•0 comments

Show HN: Flutterby, an App for Flutter Developers

https://flutterby.app/
2•DavidCanHelp•12m ago•1 comments

Sewage Dump Is Now One of America's Best Bird Sanctuaries [video]

https://www.youtube.com/watch?v=gt_eVx5AX2s
1•EwanG•14m ago•0 comments

Show HN: PostSupremo – Generate authentically inauthentic LinkedIn content

https://www.postsupremo.com/
1•raphaelsoeiro•16m ago•0 comments

Show HN: HUMANTODO

https://humantodo.dev/
3•bodash•17m ago•1 comments

State Department Cuts Price of Renouncing U.S. Citizenship to $450

https://www.nytimes.com/2026/03/15/us/us-citizenship-renounce-price-cut.html
4•vinni2•20m ago•0 comments

Show HN: What Is Your Face Worth in the Modeling Industry?

https://facemaxxing.vercel.app/
1•roozka10•21m ago•0 comments

Show HN: Whspe – We decomposed TTFB to build a real hosting quality score

1•gezginweb•21m ago•0 comments

Reddit Post 4

https://old.reddit.com/r/PisequaltoNP/comments/1rupoi7/practical_pnp_paper/
1•KaoruAK•21m ago•0 comments

Ghost Logits: Simulating missing partition mass in sampled softmax [pdf]

https://github.com/yousef-rafat/MaximusLLM/blob/main/docs/maxis.pdf
1•yousef_g•22m ago•0 comments

The Toyota 4Runner Trailhunter's Snorkel Isn't Even a Snorkel, So Be Careful

https://www.thedrive.com/news/the-toyota-4runner-trailhunters-snorkel-isnt-even-a-snorkel-so-be-c...
3•PaulHoule•23m ago•0 comments

UK Companies House security blunder leaves director data exposed

https://www.accountingweb.co.uk/tech/tech-pulse/companies-house-security-blunder-leaves-director-...
3•mmarian•23m ago•0 comments

Demos of 2025 from the Demoscene

https://laurent.le-brun.eu/blog/the-best-demos-of-2025-from-the-demoscene
2•laurentlb•24m ago•0 comments

Show HN: 3D Tic Tak Toe – More Challenging Then You Think

https://arthur-ficial.github.io/tictactoe-3d/
2•franze•26m ago•1 comments

LLMs can be absolutely exhausting

https://tomjohnell.com/llms-can-be-absolutely-exhausting/
2•tjohnell•27m ago•0 comments

Show HN: A local-first genomic analysis toolkit

https://github.com/emrecolako/savior/
1•emre•27m ago•0 comments

BioNTech founders to depart, form new mRNA-focused company

https://www.statnews.com/2026/03/10/biontech-mrna-ugur-sahin-ozlem-tureci-depart-new-company/
2•brandonb•28m ago•0 comments

Claude-Code-Workflow – Orchestrate Multiple CLI Agents

https://github.com/catlog22/Claude-Code-Workflow
1•jeremyjh•28m ago•0 comments

ThoughtRAIL – A Multi-AI Thinkspace

https://thoughtrail.ai
1•codingnibble•31m ago•1 comments

. GotHub All the Things

https://x61.sh/log/2026/03/14032026191148-gothub.html
2•jnpnj•32m ago•1 comments

Framework 16 as a Server

https://nmm.ee/framework-16-as-a-server
2•askonomm•33m ago•0 comments