
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@feedthrough/mcp
Advanced tools
feedthrough.dev · npm · GitHub
The MCP server for Feedthrough. Runs a WebSocket server that the browser bridge connects to, and exposes all bridge capabilities as MCP tools over stdio.
# via npx (once published)
npx @feedthrough/mcp
# from the monorepo
node packages/mcp/dist/index.js
Set FEEDTHROUGH_PORT to override the default WebSocket port (8765).
Add to .claude/settings.json or ~/.claude.json:
{
"mcpServers": {
"feedthrough": {
"command": "npx",
"args": ["@feedthrough/mcp"]
}
}
}
| Tool | Input | Description |
|---|---|---|
get_instructions | — | Usage guide: recommended workflow, tool ordering, selector tips |
click | selector: string | Click a DOM element |
fill | selector: string, value: string | Type into an input |
hover | selector: string | Fire mouseover/mouseenter |
press_key | selector: string, key: string | Dispatch a key press (Enter, Escape, Tab, arrows, or a character) |
inspect_element | selector: string, properties?: string[] | Full element details — tag, attributes, bounding rect + inViewport, curated computed styles, live form state; properties reads extra CSS props by name |
query_dom | selector: string | All matching elements, summarised |
get_console_logs | limit?, levels?, match?, since? | Console output across every method, plus uncaught errors & promise rejections; filter by levels/match/since |
get_network_requests | filter?, since? | Fetch + XHR with headers and request/response bodies (10 KB cap); narrow by filter or since |
get_html | selector: string | Raw outerHTML of a region (capped at 50 KB) |
get_page_info | — | URL, title, readyState, viewport, scroll, user agent |
connection_status | — | Whether a browser is currently connected |
set_style | selector: string, properties: Record<string,string> | Preview a visual fix — set inline CSS live (not saved to source) |
set_attribute | selector: string, name: string, value: string | null | Preview an attribute change (toggle disabled, swap class, aria-*); null removes |
set_text | selector: string, text: string | Preview wording/label changes — replace an element's text |
reset_overrides | — | Undo every live set_style / set_attribute / set_text change |
set_style / set_attribute / set_text are live previews, not saved edits — they mutate the
running DOM only and reset on reload. Framework-owned text/attributes may be overwritten on the next
render; the tool result flags this.
AI agent ──stdio── @feedthrough/mcp ──ws://localhost:8765── @feedthrough/core (browser)
Multiple browser tabs can be connected at once; commands are routed to the most recently active
tab, and connection_status lists them all. Commands are sent with unique IDs and matched to
responses with a 10-second timeout. All debug output goes to stderr so stdout stays clean for
the MCP protocol.
FAQs
Unknown package
The npm package @feedthrough/mcp receives a total of 53 weekly downloads. As such, @feedthrough/mcp popularity was classified as not popular.
We found that @feedthrough/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.