// SCAN REPORT

Pinchtab

19 tools. 13 can modify or destroy data without limits.

13 write tools that can modify data. Rate limits recommended.

Last updated: 3 Jul 2026

13 can modify or destroy data

6 read-only

19 tools total

Community server · catalogue entry verified 03/07/2026

How to control Pinchtab ↓

TOOL MAP

What Pinchtab exposes to your agents

Read (6) Write / Execute (13) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Pinchtab tools

Execute · Medium pinchtab_wait_for_selector This tool triggers a browser operation (polling for DOM elements) whose effects depend on the current page state and selector argument. Execute · Critical pinchtab_eval This tool allows arbitrary JavaScript execution within a browser page context, which can perform any action the JavaScript environment permits: read sensitive data, modify DOM, trigger network requests, interact with pag Execute · High pinchtab_navigate Navigation is an Execute category action—it causes the browser to fetch and render content from an arbitrary URL, triggering network requests and executing remote code (JavaScript) on that page. Execute · Low pinchtab_wait This tool executes a time-blocking operation rather than merely reading or writing data.

13 of Pinchtab's 19 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Pinchtab

PolicyLayer is an MCP gateway — it sits between your AI agents and Pinchtab, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "pinchtab_close_tab": {
    "limits": [
      {
        "counter": "pinchtab_close_tab_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "pinchtab_cookies": {
    "limits": [
      {
        "counter": "pinchtab_cookies_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Pinchtab — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON PINCHTAB →

Instant setup, no code required.

FULL CATALOGUE

All 19 Pinchtab tools

EXECUTE 11 tools

Execute pinchtab_click Click an element by its ref ID (e.g. Execute pinchtab_eval Execute JavaScript code in the page context. Returns the result of the expression. Execute pinchtab_focus Focus an element by its ref ID. Useful for triggering focus-dependent UI (e.g. autocomplete dropdowns) without Execute pinchtab_hover Hover over an element by its ref ID. Triggers mouseover/mouseenter events — useful for revealing tooltips, dro Execute pinchtab_navigate Navigate the browser to a URL. Set waitMs to wait for page load and get a snapshot back automatically. Execute pinchtab_press Press a keyboard key (e.g. Execute pinchtab_scroll Scroll the page or a specific element. Supports all four directions. Execute pinchtab_select Select an option in a <select> dropdown by its ref ID. Pass the option value or visible text. Execute pinchtab_type Type text into an input field by its ref ID. Uses human-like typing by default. Set clearFirst=true to click, Execute pinchtab_wait Wait for a specified number of seconds. Useful after navigation or dynamic content loading. Execute pinchtab_wait_for_selector Wait for a CSS selector to appear on the page. Polls every 500ms up to the timeout. Useful for waiting on dyna

WRITE 2 tools

Write pinchtab_close_tab Close the current tab or a specific tab by its ID. Write pinchtab_pdf Export the current page as a PDF. Returns the PDF as base64.

READ 6 tools

Read pinchtab_cookies Get all cookies for the current page. Read pinchtab_get_text Get readable text content from the page (~800 tokens). Best for extracting article content or page information Read pinchtab_health Check if PinchTab server is running and responsive. Read pinchtab_list_instances List all open browser tabs. Returns tab IDs, URLs, and titles. Read pinchtab_screenshot Take a screenshot of the page. Returns a base64-encoded image. Read pinchtab_snapshot Get an accessibility tree snapshot of the page. Returns element refs (e0, e1, …) that can be used with click/t

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Pinchtab

How do I prevent bulk modifications through Pinchtab? +

The Pinchtab server has 2 write tools including pinchtab_close_tab, pinchtab_pdf. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Pinchtab.

How many tools does the Pinchtab MCP server expose? +

19 tools across 3 categories: Execute, Read, Write. 6 are read-only. 13 can modify, create, or delete data.

How do I enforce a policy on Pinchtab? +

Register the Pinchtab MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Pinchtab tool call.

Deterministic rules across all 19 Pinchtab tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON PINCHTAB →

Instant setup, no code required.

19 Pinchtab tools catalogued and risk-classified — across an index of 43,000+ MCP servers.