
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@mtop-devtools/mcp-server
Advanced tools
MCP Server for Mtop DevTools - enables AI to interact with Chrome browser requests and logs
让 AI 能够与浏览器实时交互的 MCP 服务器。
首次进入页面时调用 browser_page_snapshot 建立结构基线。后续点击、输入、悬停、滚动、按键和上传优先调用 browser_page_act 完成动作与异步同步;同页结果读取 effects.notifications、effects.interactives 和 effects.focus,导航结果读取新 URL 和就绪状态。仅在导航后、fullSnapshotRecommended: true 或需要视觉判断时重新 snapshot 或截图。
长列表重新感知时优先使用 browser_page_snapshot(mode: "viewport");已知弹层或区域时使用 rootSelector;仅需要控件时使用 mode: "interactive",避免整页 AX Tree 占用上下文。页面缺少 AX 控件语义时,interactive 会自动回退到 viewport,并返回 fallbackMode: "viewport"。
browser_page_click/type/hover/scroll/press/upload 保留为低级兼容接口,不需要在每次动作后固定追加 wait、snapshot 或 screenshot。
方式一:使用 npx(推荐,保持最新)
# 直接运行配置向导,会自动生成 npx 配置
npx @mtop-devtools/mcp-server --configure
方式二:全局安装(启动更快)
# 全局安装
npm install -g @mtop-devtools/mcp-server
# 运行配置向导
mtop-mcp-configure
配置向导会自动完成所有设置,支持 VSCode Copilot、Claude Code、Cursor。完成后重启 MCP 客户端即可使用。
打开任意淘宝/飞猪页面,在 AI 客户端中发送:
获取最近 5 个请求
帮我分析购物车相关的接口
把购物车总价改成 150 元测试一下
cd mcp-server
npm install
npm run build
npm link
运行配置向导,选择使用自定义 Extension ID:
mtop-mcp-configure
# 选择 "使用自定义 Chrome 插件 ID?" -> Yes
# 输入你的开发版 Extension ID
💡 在
chrome://extensions/查看你的 Extension ID
发布新版本:
npm version patch
npm run build
npm publish --access public
# 全局安装的版本
mtop-mcp-uninstall
# 或使用 npx
npx @mtop-devtools/mcp-server --uninstall
配置失败:检查目录权限和路径是否存在
# macOS
mkdir -p ~/Library/Application\ Support/Google/Chrome/NativeMessagingHosts
"Native host has exited":删除配置后重新运行
rm ~/Library/Application\ Support/Google/Chrome/NativeMessagingHosts/com.alibaba.mtop_devtools.mcp.*
Extension ID 不匹配:使用 mtop-mcp-configure 重新配置
查看日志:
chrome://extensions/ → Mtop DevTools → background pageISC
FAQs
MCP Server for Mtop DevTools - enables AI to interact with Chrome browser requests and logs
We found that @mtop-devtools/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.