Zum Hauptinhalt springen
Echtzeit-Radar & Feeds
Alle RSS Feeds ➔
👥 Community & Social
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Windows Tipps & SecurityGrafikkarte vor Überhitzung schützen: So geht’s(25.09.2026 um 08:00 Uhr)
••••••••••
Intelligence View
⚡ tsecurity.de Intelligence

CDP Bridge MCP —— a bridge service that connects MCP clients to real browser sessions

CDP Bridge MCP is a bridge service that connects MCP clients to real browser sessions. Through its companion Chromium extension, model clients can access browser pages, list tabs, scan page content, execute JavaScript, capture screenshots,…

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!


CDP Bridge MCP is a bridge service that connects MCP clients to real browser sessions. Through its companion Chromium extension, model clients can access browser pages, list tabs, scan page content, execute JavaScript, capture screenshots, navigate pages, and read cookies.






Demo Videos
















Search Anthropic updates on Xiaohongshu Read CSDN author analytics
Watch video Watch video





Introduction



CDP Bridge MCP is designed for scenarios where large language models need to work with a real browser. Unlike stateless HTTP fetching, it connects to browser pages that are already open and already logged in, so it can reuse the browser's login state, cookies, page state, and rendered frontend result.



Repository: https://github.com/Unagi-cq/cdp-bridge-mcp




This project is written and distributed in Python.







Why CDP Bridge MCP?



Why use CDP Bridge MCP instead of Playwright MCP or Chrome DevTools MCP?



Playwright MCP and Chrome DevTools MCP are both powerful, but they are more oriented toward workflows such as automated testing, debugging protocols, or newly launched browser instances. CDP Bridge MCP has a different goal: it focuses on letting an LLM directly work with the real browser session you are already using.





  • Reuse real login state: CDP Bridge MCP connects to browser tabs that are already open and logged in. It can directly use existing cookies, login state, page context, and rendered frontend output. For many account-based websites, there is no need to log in again or manually transfer cookies.


  • Better for everyday browser collaboration: Playwright is a strong fit for repeatable and scriptable automation workflows. CDP Bridge MCP is better suited for interactive tasks on the user's current page, such as reading, analyzing, checking before clicking, executing scripts, and taking screenshots.


  • Page content is optimized for LLMs: browser_scan simplifies page HTML by filtering scripts, styles, and invisible elements while keeping useful text, controls, and structure, reducing token waste.


  • Lightweight startup flow: Once published to PyPI, the server can be started with uvx cdp-bridge. The browser side only needs the extension to be loaded. There is no need to write Playwright scripts or configure debug parameters for each browser instance.



If your goal is to let a model control a dedicated automation browser, Playwright MCP is a good fit. If your goal is to debug Chrome or work closely with the DevTools protocol, Chrome DevTools MCP is a good fit. If your goal is to let a model read and operate on the real browser page you are currently using, CDP Bridge MCP is closer to that scenario.






Available Tools



The MCP server currently exposes these tools:
















































Tool Description
browser_get_tabs Get the list of connected browser tabs
browser_scan Scan the active page as simplified HTML or plain text
browser_execute_js Execute JavaScript in the active tab
browser_switch_tab Switch the active MCP tab without changing the user's visible Chrome tab
browser_batch Run extension/CDP commands in a single request for complex flows
browser_wait Poll a JavaScript condition until it returns a truthy value or times out
browser_navigate Navigate the active tab to a URL
browser_screenshot Capture a page screenshot
browser_cookies Read cookies





Usage






Installation Steps




  1. Load the browser extension folder src/cdp_bridge/tmwd_cdp_bridge into Chrome or another Chromium-based browser.

  2. Configure CDP Bridge MCP in your MCP client.



After that, the MCP server can be used normally. The detailed steps are listed below.






Load the Browser Extension



In Chrome or another Chromium-based browser:




  1. Open chrome://extensions/.

  2. Enable "Developer mode".

  3. Click "Load unpacked".

  4. Select the src/cdp_bridge/tmwd_cdp_bridge folder.



By default, the extension connects to the local service at 127.0.0.1:18765.






Configure MCP



First, install uv on your computer.




uvx was officially introduced in uv 0.2.0. If your uv version is lower than 0.2.0, the uvx command may not be available. In older versions, similar functionality can be used through uv tool run, which is also the underlying behavior of uvx.







Script Test






uvx cdp-bridge # uv >= 0.2.0
uv tool run # uv < 0.2.0









Standard Configuration



You can configure it in an MCP client like this:




{
"mcpServers": {
"cdp-bridge": {
"command": "uvx",
"args": ["cdp-bridge"]
}
}
}









Claude Code






claude mcp add cdp-bridge uvx cdp-bridge









Codex






codex mcp add cdp-bridge uvx cdp-bridge









opencode



Configure it in ~/.config/opencode/opencode.json:




{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"cdp-bridge": {
"type": "local",
"command": [
"uvx",
"cdp-bridge"
],
"enabled": true
}
}
}









OpenClaw



You can write the MCP configuration with the OpenClaw CLI:




openclaw mcp set cdp-bridge '{"command":"uvx","args":["cdp-bridge@latest"]}'






Equivalent configuration shape:




{
"mcp": {
"servers": {
"cdp-bridge": {
"command": "uvx",
"args": ["cdp-bridge@latest"]
}
}
}
}









Notes




  • This project requires Python 3.10 or newer.

  • The browser extension and MCP server must run at the same time. Otherwise, the tools will report that no browser tabs are connected.

  • Browser automation runs in your real browser session, so only connect MCP clients that you trust.

1. Sofort-Triage & Abwehrmaßnahmen

SOC Incident Playbook: Vulnerability Remediation & Verification
Syntax validiert (0 Fehler)
title: Detect Exploitation - CDP Bridge MCP —— a bridge service that connects MCP clients to real browser sessions
id: 46508f2f-89a5-4e6a-85ff-256b0e5a8b49
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-25
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
Syntax validiert (0 Fehler)
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-25"
        description = "YARA Signature for "
    strings:
        $str = "CDP Bridge MCP —— a bridge ser" ascii wide
    condition:
        any of them
}
Syntax validiert (0 Fehler)
index=security sourcetype IN ("cisco:asa", "pan:traffic", "zeek_conn", "suricata", "WinEventLog:Security")
("CDP Bridge MCP  a bridge service that co")
| stats count earliest(_time) as first_seen latest(_time) as last_seen by src_ip, dest_ip, dest_host, signature
| eval first_seen=strftime(first_seen, "%Y-%m-%d %H:%M:%S"), last_seen=strftime(last_seen, "%Y-%m-%d %H:%M:%S")
| sort - count
Syntax validiert (0 Fehler)
message: "*CDP Bridge MCP  a bridge service that co*"
Syntax validiert (0 Fehler)
CommonSecurityLog
| where Message has "CDP Bridge MCP  a bridge service that co"
| summarize EventCount = count(), FirstSeen = min(TimeGenerated), LastSeen = max(TimeGenerated) by SourceIP, DestinationIP, DestinationPort, Activity
| extend DetectionRule = "iShareStuff-CTI-Compiled"
| sort by EventCount desc

2. Cyber Threat Intelligence & Forensik

🎯
MITRE ATT&CK Matrix Navigator 14 Taktiken
Reconnaissance
-
Resource Development
-
Initial Access
Execution
Persistence
-
Privilege Escalation
Defense Evasion
Credential Access
-
Discovery
-
Lateral Movement
-
Collection
-
Command and Control
Exfiltration
-
Impact
tsecurity.de Cognitive Threat RAG
Fokus-Vektor:

Kognitive Analyse für identifizierte Bedrohung: Erhöhte Bedrohungslage im Bereich CDP Bridge MCP —— a bridge service that .... Basierend auf 368k Vektor-Korrelationen werden sofortige Isolationsmaßnahmen für betroffene Endpunkte empfohlen.

🛡️ Angriffsfläche & Exposure

Netzwerk/Remote-Zugriff ohne Vorauthentifizierung möglich.

⚡ Empfohlene Sofortmaßnahmen
  • 1. Perimeter-Inspektion: Relevante Portfreigaben und exponierte Endpunkte unverzüglich scannen.
  • 2. Patch-Applikation: Hersteller-Hotfix einspielen oder betroffene Daemons in isolierte DMZ-Segmente überführen.
  • 3. Telemetrie & EDR-Alerts: Prozessaufrufe und Child-Processes auf anomale Shell-Spawns überwachen.
🔗 Semantisch verwandte Zero-Days MariaDB 11.7 VEC
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten CDP Bridge MCP —— a bridge service that connects MCP clients to real browser sessions

Thematisch verwandte Begriffe: Bridge, bridge, service, that · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-97818 | phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and i…
Advisory →
tsecurity.de Icon
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag