Repository Issue Activity (beta)

#331 Security contact / Please enable Private Vulnerability Reporting

#385 Support Node 26

#384 CORS origin bypass in native-server HTTP API allows any website to drive the MCP server (CSWSH)

#380 SSRF and path traversal in file_upload tool: unvalidated file_url fetch, unsanitized fileName, arbitrary readBase64File (native host)

#171 Tab group api controls

#379 请问作者微信是多少？此项目存在高危漏洞 This project has high risk 0 day vulnerability

#370 开发更新：mcp-chrome-2026 的新增功能与稳定性改进

#306 每次在chrome中启动服务后，只能连接一次，之后就无法连接

#378 Streamable HTTP handshake crashes with ERR_HTTP_HEADERS_SENT (Fastify reply lifecycle) — broke OpenCode/Cursor

#321 Bug: Singleton McpServer causes 'Already connected to a transport' on HTTP endpoint

#333 mcp-chrome-bridge 无法使用

#29 已连接，服务未启动

#369 Question: would MCP release validation be useful for this server?

#213 求个微信群组，互相交流

#367 群二维码过期了

#366 Environment: Mac ARM, Burp Suite 2026.4.3 Unable to connect using Burp Suite's built-in Chromium browser.

#363 Consider adding authentication and HTTPS for MCP endpoint

#349 Bug: MCP Chrome Bridge returns 500 Internal Server Error due to ERR_HTTP_HEADERS_SENT

#361 this project is dead 💀

#362 Unable to open website with IP address

#360 Unable to switch transport to stdio in chrome extension

#359 failed to connect after first connection

#328 Add policy enforcement for browser automation and JavaScript execution

#355 不支持多个客户端连接mcp服务吗

#352 Tool call errors are opaque — actual Chrome-side failure details lost, only 'timed out' returned