@extension.dev/mcp 4.5.0 → 4.6.0

package/.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
       "name": "extension-mcp",
       "source": "./",
       "description": "MCP tools for browser extension development: scaffold from 60+ templates, run the dev server with HMR, inspect the live DOM and logs, and publish store-ready builds for Chrome, Edge, and Firefox.",
-      "version": "4.5.0",
+      "version": "4.6.0",
       "category": "development",
       "author": {
         "name": "Cezar Augusto"

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "extension-mcp",
   "description": "MCP tools for browser extension development: scaffold from 60+ templates, run the dev server with HMR, inspect the live DOM and logs, and publish store-ready builds for Chrome, Edge, and Firefox. Ships /extension, /extension-add, /extension-debug, and /extension-publish commands.",
-  "version": "4.5.0",
+  "version": "4.6.0",
   "author": {
     "name": "Cezar Augusto",
     "email": "boss@cezaraugusto.net",

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 4.6.0
+
+New `extension_deploy` tool (31 tools total): submit a built extension to the
+Chrome Web Store, Firefox AMO, and Edge Add-ons by driving the standalone
+`@extension.dev/deploy` CLI. Store targets are inferred from the `.zip` paths
+you pass. It defaults to a dry run, and store credentials are read from the
+environment or a `.env.submit` file, never from tool arguments, so secrets
+never enter the agent transcript.
+
 ## 4.5.0
 
 The platform client (GitHub device-code login, the credential store, and the

package/README.md

@@ -9,7 +9,7 @@
 
 > Give your AI agent hands for browser extension development. 30 MCP tools that scaffold, run, inspect, debug, and publish cross-browser extensions.
 
-<img alt="Logo" align="right" src="https://media.extension.land/brand/extension-dev/logo-dock.png" width="15.5%" />
+<img alt="Logo" align="right" src="https://media.extension.land/brand/extension-dev/logo-dock.png" width="20.7%" />
 
 ```bash
 claude mcp add extension-dev npx @extension.dev/mcp
@@ -121,12 +121,13 @@ cp node_modules/@extension.dev/mcp/claude/commands/*.md ~/my-extension/.claude/c
 | platform | `extension_logout` | Remove stored credentials |
 | platform | `extension_publish` | Publish a shareable preview to extension.dev |
 | platform | `extension_release_promote` | Promote a build to a release channel, headless |
+| platform | `extension_deploy` | Submit to the Chrome, Firefox, and Edge stores (wraps `@extension.dev/deploy`) |
 
 Browser-launching tools (`dev`, `start`, `preview`) shell out to the `extension` CLI — the project's own `node_modules/.bin/extension` when present, otherwise `npx extension@<pinned>` at the version this package is verified against; everything else runs in-process.
 
 ## From preview to store
 
-The four platform tools connect agents to [extension.dev](https://extension.dev): `extension_login` runs a GitHub device-code flow and stores a project-scoped token locally (never returned to the agent), `extension_publish` turns a build into a shareable preview URL, and `extension_release_promote` promotes a tested build to a release channel from CI or an agent session, no browser required. To automate store submission itself (Chrome Web Store, Edge Add-ons, Firefox AMO), pair with [`@extension.dev/deploy`](https://www.npmjs.com/package/@extension.dev/deploy).
+The platform tools connect agents to [extension.dev](https://extension.dev): `extension_login` runs a GitHub device-code flow and stores a project-scoped token locally (never returned to the agent), `extension_publish` turns a build into a shareable preview URL, and `extension_release_promote` promotes a tested build to a release channel from CI or an agent session, no browser required. `extension_deploy` submits the built `.zip` to the Chrome Web Store, Edge Add-ons, and Firefox AMO by driving the standalone [`@extension.dev/deploy`](https://www.npmjs.com/package/@extension.dev/deploy) CLI — it defaults to a dry run and reads store credentials from the environment or a `.env.submit` file, never from tool arguments.
 
 ## The extension.dev stack
 

package/dist/module.js

@@ -32,6 +32,13 @@ __webpack_require__.d(create_namespaceObject, {
     handler: ()=>create_handler,
     schema: ()=>create_schema
 });
+var deploy_namespaceObject = {};
+__webpack_require__.r(deploy_namespaceObject);
+__webpack_require__.d(deploy_namespaceObject, {
+    buildDeployArgs: ()=>buildDeployArgs,
+    handler: ()=>deploy_handler,
+    schema: ()=>deploy_schema
+});
 var detect_browsers_namespaceObject = {};
 __webpack_require__.r(detect_browsers_namespaceObject);
 __webpack_require__.d(detect_browsers_namespaceObject, {
@@ -3146,6 +3153,169 @@ async function release_promote_handler(args) {
     if (!res.ok) return fail("ReleaseError", `promote failed (${res.status}): ${data?.message || text || "unknown error"}`);
     return JSON.stringify(data);
 }
+const DEFAULT_DEPLOY_VERSION = "1.2.1";
+function pinnedDeployVersion() {
+    return String(process.env.EXTENSION_DEPLOY_VERSION || "").trim() || DEFAULT_DEPLOY_VERSION;
+}
+function buildDeployArgs(args) {
+    const argv = [];
+    const pushValue = (flag, value)=>{
+        if (void 0 === value || "" === value) return;
+        argv.push(flag, String(value));
+    };
+    if (false !== args.dryRun) argv.push("--dry-run");
+    pushValue("--chrome-zip", args.chromeZip);
+    pushValue("--chrome-extension-id", args.chromeExtensionId);
+    pushValue("--chrome-publisher-id", args.chromePublisherId);
+    if (args.stagedPublish) argv.push("--chrome-staged-publish");
+    pushValue("--chrome-deploy-percentage", args.chromeDeployPercentage);
+    if (args.chromeSkipSubmitReview) argv.push("--chrome-skip-submit-review");
+    pushValue("--firefox-zip", args.firefoxZip);
+    pushValue("--firefox-sources-zip", args.firefoxSourcesZip);
+    pushValue("--firefox-extension-id", args.firefoxExtensionId);
+    pushValue("--firefox-channel", args.firefoxChannel);
+    pushValue("--edge-zip", args.edgeZip);
+    pushValue("--edge-product-id", args.edgeProductId);
+    if (args.edgeSkipSubmitReview) argv.push("--edge-skip-submit-review");
+    pushValue("--output-json", args.outputJson);
+    return argv;
+}
+const deploy_schema = {
+    name: "extension_deploy",
+    description: "Submit a built extension to the Chrome Web Store, Firefox AMO, and/or Edge Add-ons by driving the standalone @extension.dev/deploy CLI. Provide the built .zip path(s); the target stores are inferred from which zips you pass. DEFAULTS TO A DRY RUN (verifies auth and inputs, uploads nothing) - pass dryRun:false to actually submit, which is irreversible and enters store review. Store CREDENTIALS are NOT arguments: set them in the environment or a .env.submit file in projectPath (CHROME_CLIENT_ID/CHROME_CLIENT_SECRET/CHROME_REFRESH_TOKEN or CHROME_SERVICE_ACCOUNT_JSON; FIREFOX_JWT_ISSUER/FIREFOX_JWT_SECRET; EDGE_CLIENT_ID/EDGE_API_KEY). Runs `npx @extension.dev/deploy`.",
+    inputSchema: {
+        type: "object",
+        properties: {
+            projectPath: {
+                type: "string",
+                description: "Working directory. Relative zip paths and a .env.submit credential file are resolved from here."
+            },
+            chromeZip: {
+                type: "string",
+                description: "Path to the built Chrome extension .zip"
+            },
+            chromeExtensionId: {
+                type: "string",
+                description: "Chrome extension ID (or set CHROME_EXTENSION_ID)"
+            },
+            chromePublisherId: {
+                type: "string",
+                description: "Chrome publisher UUID (or set CHROME_PUBLISHER_ID)"
+            },
+            firefoxZip: {
+                type: "string",
+                description: "Path to the built Firefox extension .zip"
+            },
+            firefoxSourcesZip: {
+                type: "string",
+                description: "Path to the Firefox sources .zip (optional)"
+            },
+            firefoxExtensionId: {
+                type: "string",
+                description: "Firefox add-on GUID or email-style ID"
+            },
+            firefoxChannel: {
+                type: "string",
+                enum: [
+                    "listed",
+                    "unlisted"
+                ],
+                description: "Firefox channel (unlisted is required for a first submission)"
+            },
+            edgeZip: {
+                type: "string",
+                description: "Path to the built Edge extension .zip"
+            },
+            edgeProductId: {
+                type: "string",
+                description: "Edge Partner Center product ID (or set EDGE_PRODUCT_ID)"
+            },
+            dryRun: {
+                type: "boolean",
+                default: true,
+                description: "Verify auth and inputs without uploading or publishing. Pass false to actually submit (irreversible)."
+            },
+            stagedPublish: {
+                type: "boolean",
+                default: false,
+                description: "Chrome: publish as STAGED_PUBLISH so the rollout can be raised review-free later."
+            },
+            chromeDeployPercentage: {
+                type: "number",
+                description: "Chrome staged rollout percentage (1-100)."
+            },
+            chromeSkipSubmitReview: {
+                type: "boolean",
+                default: false,
+                description: "Chrome: upload only, skip the publish/submit-for-review step."
+            },
+            edgeSkipSubmitReview: {
+                type: "boolean",
+                default: false,
+                description: "Edge: upload only, skip the publish/submit-for-review step."
+            },
+            outputJson: {
+                type: "string",
+                description: "Write the machine-readable DeployResult JSON to this path."
+            }
+        },
+        required: [
+            "projectPath"
+        ]
+    }
+};
+async function deploy_handler(args) {
+    if (!args.chromeZip && !args.firefoxZip && !args.edgeZip) return JSON.stringify({
+        ok: false,
+        error: {
+            name: "DeployInputError",
+            message: "No store targets. Provide at least one of chromeZip, firefoxZip, or edgeZip."
+        }
+    });
+    const version = pinnedDeployVersion();
+    const argv = [
+        "--yes",
+        `@extension.dev/deploy@${version}`,
+        ...buildDeployArgs(args)
+    ];
+    return new Promise((resolve)=>{
+        const child = cross_spawn("npx", argv, {
+            cwd: args.projectPath,
+            stdio: [
+                "ignore",
+                "pipe",
+                "pipe"
+            ],
+            env: {
+                ...process.env,
+                FORCE_COLOR: "0",
+                NO_COLOR: "1"
+            }
+        });
+        let stdout = "";
+        let stderr = "";
+        child.stdout?.on("data", (d)=>stdout += d.toString());
+        child.stderr?.on("data", (d)=>stderr += d.toString());
+        child.on("close", (code)=>{
+            resolve(JSON.stringify({
+                ok: 0 === code,
+                dryRun: false !== args.dryRun,
+                code,
+                stdout: stdout.trim(),
+                stderr: stderr.trim()
+            }));
+        });
+        child.on("error", (err)=>{
+            resolve(JSON.stringify({
+                ok: false,
+                error: {
+                    name: "DeploySpawnError",
+                    message: `Could not run extension-deploy: ${err instanceof Error ? err.message : String(err)}`
+                }
+            }));
+        });
+    });
+}
 const wait_schema = {
     name: "extension_wait",
     description: "Wait for a running dev or start session to be ready. Polls the ready.json contract file and returns structured status.",
@@ -4295,6 +4465,7 @@ const tools = [
     dom_inspect_namespaceObject,
     tools_publish_namespaceObject,
     release_promote_namespaceObject,
+    deploy_namespaceObject,
     wait_namespaceObject,
     add_feature_namespaceObject,
     login_namespaceObject,

package/dist/src/tools/deploy.d.ts

@@ -0,0 +1,104 @@
+export interface DeployToolArgs {
+    projectPath: string;
+    chromeZip?: string;
+    chromeExtensionId?: string;
+    chromePublisherId?: string;
+    firefoxZip?: string;
+    firefoxSourcesZip?: string;
+    firefoxExtensionId?: string;
+    firefoxChannel?: "listed" | "unlisted";
+    edgeZip?: string;
+    edgeProductId?: string;
+    dryRun?: boolean;
+    stagedPublish?: boolean;
+    chromeDeployPercentage?: number;
+    chromeSkipSubmitReview?: boolean;
+    edgeSkipSubmitReview?: boolean;
+    outputJson?: string;
+}
+/**
+ * Build the extension-deploy argv from tool arguments. Pure and exported so the
+ * flag mapping is unit-tested without spawning a process. Never emits a
+ * credential flag - secrets come from the environment / .env.submit.
+ */
+export declare function buildDeployArgs(args: DeployToolArgs): string[];
+export declare const schema: {
+    name: string;
+    description: string;
+    inputSchema: {
+        type: "object";
+        properties: {
+            projectPath: {
+                type: string;
+                description: string;
+            };
+            chromeZip: {
+                type: string;
+                description: string;
+            };
+            chromeExtensionId: {
+                type: string;
+                description: string;
+            };
+            chromePublisherId: {
+                type: string;
+                description: string;
+            };
+            firefoxZip: {
+                type: string;
+                description: string;
+            };
+            firefoxSourcesZip: {
+                type: string;
+                description: string;
+            };
+            firefoxExtensionId: {
+                type: string;
+                description: string;
+            };
+            firefoxChannel: {
+                type: string;
+                enum: string[];
+                description: string;
+            };
+            edgeZip: {
+                type: string;
+                description: string;
+            };
+            edgeProductId: {
+                type: string;
+                description: string;
+            };
+            dryRun: {
+                type: string;
+                default: boolean;
+                description: string;
+            };
+            stagedPublish: {
+                type: string;
+                default: boolean;
+                description: string;
+            };
+            chromeDeployPercentage: {
+                type: string;
+                description: string;
+            };
+            chromeSkipSubmitReview: {
+                type: string;
+                default: boolean;
+                description: string;
+            };
+            edgeSkipSubmitReview: {
+                type: string;
+                default: boolean;
+                description: string;
+            };
+            outputJson: {
+                type: string;
+                description: string;
+            };
+        };
+        required: string[];
+    };
+};
+export declare function handler(args: DeployToolArgs): Promise<string>;

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@extension.dev/mcp",
   "type": "module",
-  "version": "4.5.0",
-  "description": "MCP server that lets AI agents (Claude Code, Claude Desktop, Cursor, Copilot, Codex) build, run, inspect, and publish browser extensions. 30 tools for scaffolding, live DOM inspection, log streaming, and store-ready builds across Chrome, Edge, Firefox, Safari, and every Chromium- or Gecko-based browser (Brave, Opera, Vivaldi, Yandex, Waterfox, LibreWolf). Powered by extension.dev and Extension.js.",
+  "version": "4.6.0",
+  "description": "MCP server that lets AI agents (Claude Code, Claude Desktop, Cursor, Copilot, Codex) build, run, inspect, and publish browser extensions. 31 tools for scaffolding, live DOM inspection, log streaming, and store-ready builds across Chrome, Edge, Firefox, Safari, and every Chromium- or Gecko-based browser (Brave, Opera, Vivaldi, Yandex, Waterfox, LibreWolf). Powered by extension.dev and Extension.js.",
   "mcpName": "io.github.extensiondev/mcp",
   "license": "MIT",
   "author": {

package/server.json

@@ -1,19 +1,19 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
   "name": "io.github.extensiondev/mcp",
-  "description": "Build, run, inspect, and publish browser extensions from any MCP client. 30 tools, 11 browsers.",
+  "description": "Build, run, inspect, and publish browser extensions from any MCP client. 31 tools, 11 browsers.",
   "repository": {
     "url": "https://github.com/extensiondev/mcp",
     "source": "github"
   },
   "websiteUrl": "https://extension.dev",
-  "version": "4.5.0",
+  "version": "4.6.0",
   "packages": [
     {
       "registryType": "npm",
       "registryBaseUrl": "https://registry.npmjs.org",
       "identifier": "@extension.dev/mcp",
-      "version": "4.5.0",
+      "version": "4.6.0",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"