browser-mcp-lite 1.0.1 → 1.0.3

package/index.js

@@ -173,22 +173,25 @@ const sep = '\u2501'.repeat(53);
 
 console.log(`[browser-mcp-lite] MCP server: ${mcpUrl}`);
 console.log(`[browser-mcp-lite] WebSocket:  ${wsUrl}`);
-if (isNew) console.log('\n\u26A0 First run \u2014 new token generated');
-
-console.log(`\n\u2501\u2501\u2501 Auth Token (paste into Chrome Extension popup) \u2501\u2501\u2501`);
-console.log(TOKEN);
-console.log(sep);
-
-console.log(`\n\u2501\u2501\u2501 MCP Client Config (save as .mcp.json) \u2501\u2501\u2501`);
-console.log(JSON.stringify({
-  mcpServers: {
-    browser: {
-      type: 'http',
-      url: mcpUrl,
-      headers: { Authorization: `Bearer ${TOKEN}` },
+
+if (isNew) {
+  console.log('\n\u26A0 First run \u2014 new token generated');
+  console.log(`\n\u2501\u2501\u2501 Auth Token (paste into Chrome Extension popup) \u2501\u2501\u2501`);
+  console.log(TOKEN);
+  console.log(sep);
+  console.log(`\n\u2501\u2501\u2501 MCP Client Config (save as .mcp.json) \u2501\u2501\u2501`);
+  console.log(JSON.stringify({
+    mcpServers: {
+      browser: {
+        type: 'http',
+        url: mcpUrl,
+        headers: { Authorization: `Bearer ${TOKEN}` },
+      },
     },
-  },
-}, null, 2));
-console.log(sep);
+  }, null, 2));
+  console.log(sep);
+} else {
+  console.log(`[browser-mcp-lite] Token: ${TOKEN.slice(0, 8)}...`);
+}
 
 console.log('\n[browser-mcp-lite] Waiting for Chrome Extension...');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "browser-mcp-lite",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "Minimal, auth-secured MCP server for real browser access",
   "type": "module",
   "main": "index.js",

package/tools.js

@@ -1,6 +1,22 @@
 import { z } from 'zod';
 import { sendToExtension } from './index.js';
 
+// --- inject_script risk detection ---
+const RISK_PATTERNS = [
+  { pattern: /\b(fetch|XMLHttpRequest|sendBeacon|navigator\.sendBeacon)\s*\(/i, label: 'network request' },
+  { pattern: /document\.cookie/i, label: 'cookie access' },
+  { pattern: /localStorage|sessionStorage/i, label: 'storage access' },
+  { pattern: /indexedDB/i, label: 'IndexedDB access' },
+  { pattern: /new\s+WebSocket\s*\(/i, label: 'WebSocket connection' },
+  { pattern: /new\s+EventSource\s*\(/i, label: 'EventSource connection' },
+  { pattern: /window\.open\s*\(/i, label: 'window.open' },
+  { pattern: /document\.write/i, label: 'document.write' },
+];
+
+function detectRisks(code) {
+  return RISK_PATTERNS.filter(r => r.pattern.test(code)).map(r => r.label);
+}
+
 export function registerTools(server) {
 
   // --- list_tabs ---
@@ -53,8 +69,14 @@ export function registerTools(server) {
       tabId: z.number().optional().describe('Tab ID to inject into. Defaults to the active tab.'),
     },
     async ({ code, tabId }) => {
+      const risks = detectRisks(code);
       const result = await sendToExtension('inject_script', { code, tabId });
-      return { content: [{ type: 'text', text: JSON.stringify(result, null, 2) }] };
+      const output = JSON.stringify(result, null, 2);
+      if (risks.length > 0) {
+        const warning = `\u26A0 RISK: This script uses ${risks.join(', ')}. Verify this was intentional.`;
+        return { content: [{ type: 'text', text: `${warning}\n\n${output}` }] };
+      }
+      return { content: [{ type: 'text', text: output }] };
     }
   );
 }