io.github.ChromeDevTools/chrome-devtools-mcp
Server metadata is temporarily withheld while this grade is under governance review.
Automated danger grade: this page reports detected or inferred risk from a scan. It is not an endorsement, certification, or claim that the server is malicious.
Grade withheld: this entry's grade is temporarily withheld while the registry completes provenance verification and governance review of its published grades. The scan metadata above stays disclosed, and the dispute channel below remains open; the grade returns when review completes, with any change recorded in the corrections log.
Grade history
5 scans on record between 2026-07-03 and 2026-07-04. The grade has not changed across them.
| Scanned (UTC) | Grade | Engine | Attributed cause |
|---|---|---|---|
| 2026-07-03 13:58 | withheld | mcpaudit 2.4.0 | First scan on record |
| 2026-07-03 14:13 | withheld | mcpaudit 2.4.0 | No change |
| 2026-07-04 08:13 | withheld | mcpaudit 2.4.0 | No change |
| 2026-07-04 08:16 | withheld | mcpaudit 2.4.0 | No change |
| 2026-07-04 08:17 | withheld | mcpaudit 2.4.0 | No change |
History as recorded by this registry's own scans. The cause is an attribution from the inputs the registry records — the scanner engine identity and the declared tool surface — not proof of what changed on the server. Generated 2026-08-02.
How to read this grade
- What was scanned: chrome-devtools-mcp, as distributed.
- When: 2026-07-04 08:17:59.
- By what: mcpaudit 2.4.0, applied to the published danger rubric (weights, bands, and the critical cap are all public).
- What the grade means: this registry's opinion, computed by the disclosed automated methodology against the artifact version above, on the scan date above. It measures conformance to the rubric at scan time.
- What it does not claim: it is not a statement that the product is malicious, insecure in your deployment, or unfit for use, and it is not an endorsement or certification.
- Disagree? Grades are re-checkable against the same package version, and corrections are welcome: open a dispute — see the dispute & correction policy.
Spec-shift exposure
Withheld while this entry is under review. Spec-shift exposure is server-specific metadata, so it is held back with the rest — this says nothing about whether the server is exposed.
Provenance & dispute
- Listing basis: operator-listed from a public catalog. This entry was not submitted by its vendor.
- Scan target: the published npm artifact
chrome-devtools-mcp, installed and scanned locally using sandbox imagemcp-trust-batch4:20260703. The public record stores the sandbox image, but not the network mode, so this page does not claim network isolation for that run. - Credentials: none declared, none used.
- Dispute: vendor or maintainer of this server? Dispute this grade — first response within 14 days.
Add this badge to your README
Copy the Markdown below only if you want to link readers to the latest danger grade and scan caveats:
[](https://mcp-trust.vercel.app/ui/servers/io-github-chromedevtools-chrome-devtools-mcp-1-5-0)
Findings
Finding detail is withheld while this entry's grade is under governance review.