@mehmoodqureshi/chrome-mcp 0.2.0 → 0.3.0

package/dist/src/config.js

@@ -35,7 +35,9 @@ function readPolicyFile(path) {
  */
 function parseArgs(argv) {
     let wsPort = envInt('CHROME_MCP_WS_PORT') ?? protocol_1.DEFAULT_WS_PORT;
-    let cdpFallback = true;
+    // Extension-only by default: never launch/attach a Chromium of our own unless
+    // the operator explicitly opts in with --cdp-fallback (or --prefer cdp / --cdp-endpoint).
+    let cdpFallback = false;
     let cdpEndpoint;
     let prefer = 'extension';
     let headless = false;
@@ -85,7 +87,10 @@ function parseArgs(argv) {
             case '--allow-all-tabs':
                 policyFlags.allowAllTabs = true;
                 break;
-            case '--no-cdp-fallback':
+            case '--cdp-fallback':
+                cdpFallback = true;
+                break;
+            case '--no-cdp-fallback': // still accepted; fallback is already off by default
                 cdpFallback = false;
                 break;
             case '--cdp-endpoint':
@@ -174,7 +179,10 @@ Connection:
                          CHROME_MCP_TOKEN env, if set, pins the token explicitly.
 
 Backend:
-  --no-cdp-fallback      Do not launch/attach Chromium when no extension is paired
+  --cdp-fallback         Opt in to launching/attaching Chromium when no extension
+                         is paired. OFF by default — extension-only, never opens
+                         a browser of its own.
+  --no-cdp-fallback      Explicitly disable the fallback (already the default).
   --cdp-endpoint <url>   Attach to an existing Chrome (e.g. http://127.0.0.1:9222)
   --prefer <which>       "extension" (default) or "cdp"
   --headless             Run the CDP-fallback Chromium headless

package/extension-dist/manifest.json

@@ -6,7 +6,7 @@
   "minimum_chrome_version": "116",
   "background": { "service_worker": "background.js" },
   "permissions": ["tabs", "scripting", "activeTab", "downloads", "storage", "alarms", "cookies", "debugger"],
-  "host_permissions": ["http://*/*", "https://*/*"],
+  "host_permissions": ["<all_urls>"],
   "options_page": "options.html",
   "action": { "default_title": "Chrome MCP — open options to pair" }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mehmoodqureshi/chrome-mcp",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Drive a real Chrome browser over MCP. A stdio MCP server (CLI) plus an MV3 extension, behind one pluggable Executor (extension via chrome.scripting, or a Playwright CDP fallback).",
   "author": "Mehmood Ur Rehman Qureshi",
   "license": "MIT",