list_webmcp_tools

What list_webmcp_tools does on Chrome Devtools

AI agents call list_webmcp_tools to retrieve information from Chrome Devtools without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why list_webmcp_tools is rated Low

This is a reconnaissance/query operation that enumerates tools exposed by a web page. It retrieves information about what is available but does not modify data, execute arbitrary operations, or cause side effects. The blast radius if misused is minimal—an attacker gains visibility of available tools but not direct access to invoke them or cause damage. This clearly fits the Read category.

From the tool's definition Tool name 'list_webmcp_tools' and description 'Lists all WebMCP tools the page exposes' indicate retrieval/inspection of available tools without modification or execution of those tools.

The rule that runs list_webmcp_tools safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Chrome Devtools, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For list_webmcp_tools, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "list_webmcp_tools": {}
  }
}

Questions about list_webmcp_tools