get_heapsnapshot_summary

What get_heapsnapshot_summary does on Chrome Devtools

AI agents call get_heapsnapshot_summary to retrieve information from Chrome Devtools without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_heapsnapshot_summary is rated Low

This tool retrieves and queries memory diagnostic data from Chrome DevTools without side effects. It does not create, modify, delete, or execute code—it only provides introspection into the heap state. The blast radius of misuse is minimal: an attacker could learn about application memory layout or presence of sensitive objects in memory, but cannot directly compromise systems or trigger harmful actions.

From the tool's definition Tool name 'get_heapsnapshot_summary' and description 'Loads a memory heapsnapshot and returns snapshot summary stats' indicate a read-only diagnostic operation.

The rule that runs get_heapsnapshot_summary safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Chrome Devtools, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_heapsnapshot_summary, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_heapsnapshot_summary": {}
  }
}

Questions about get_heapsnapshot_summary