# test_auth_flow

A other tool on the Looking Glass MCP server.

Agent View of the PolicyLayer registry record for `test_auth_flow`. HTML page: https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/test-auth-flow

## Facts

- Tool: `test_auth_flow`
- Server: Looking Glass (`looking-glass-mcp`) — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp.md
- Install: `npx -y looking-glass-mcp`
- Homepage: https://github.com/Sahib-Sawhney-WH/LookingGlass
- Risk category: Other (Low risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 8 (6 required)
- Recommended policy verdict: Rate-limited

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `url` | string | yes | Login page URL |
| `waitForUrl` | string | no | Wait for URL to match after login |
| `passwordValue` | string | yes | Password |
| `usernameValue` | string | yes | Username or email |
| `submitSelector` | string | yes | CSS selector for submit/login button |
| `waitForSelector` | string | no | Wait for this element after login |
| `passwordSelector` | string | yes | CSS selector for password input |
| `usernameSelector` | string | yes | CSS selector for username/email input |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "test_auth_flow",
    "arguments": {
      "url": "<url>",
      "passwordValue": "<passwordValue>",
      "usernameValue": "<usernameValue>",
      "submitSelector": "<submitSelector>",
      "passwordSelector": "<passwordSelector>",
      "usernameSelector": "<usernameSelector>"
    }
  }
}
```

## Why test_auth_flow is rated Low

The description is empty, so the exact behavior cannot be determined. The name suggests testing an authentication flow, which could involve reading, writing, or executing actions. Given the context of an AI-native browser server with vault capabilities, this could interact with credentials.

From the tool's own definition: "Tool name is 'test_auth_flow'; description is empty or uninformative."

Risk signals: Accepts URL/endpoint input (url)

## Use case

AI agents call test_auth_flow as a supporting operation in Looking Glass workflows.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Looking Glass:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "test_auth_flow": {
      "limits": [
        {
          "counter": "test_auth_flow_rate",
          "window": "minute",
          "max": 60,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Looking Glass (70)

- `browser_clean_slate` — Destructive — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-clean-slate.md
- `browser_clear_history` — Destructive — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-clear-history.md
- `browser_clear_mocks` — Destructive — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-clear-mocks.md
- `browser_clear_storage` — Destructive — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-clear-storage.md
- `browser_close` — Destructive — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-close.md
- `session_end` — Destructive — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/session-end.md
- `test_chaos_clear` — Destructive — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/test-chaos-clear.md
- `vault_delete` — Destructive — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/vault-delete.md
- `browser_click` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-click.md
- `browser_drag` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-drag.md
- `browser_evaluate` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-evaluate.md
- `browser_explore` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-explore.md
- `browser_fill_and_submit` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-fill-and-submit.md
- `browser_go` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-go.md
- `browser_go_back` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-go-back.md
- `browser_go_forward` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-go-forward.md
- `browser_hover` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-hover.md
- `browser_login` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-login.md
- `browser_mock_route` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-mock-route.md
- `browser_navigate` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-navigate.md
- `browser_performance_audit` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-performance-audit.md
- `browser_press_key` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-press-key.md
- `browser_recover` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-recover.md
- `browser_resolve_element` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-resolve-element.md
- `browser_scroll` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-scroll.md
- `browser_select_option` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-select-option.md
- `browser_smart_click` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-smart-click.md
- `browser_tab_new` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-tab-new.md
- `browser_tab_select` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-tab-select.md
- `browser_type` — Execute — https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp/browser-type.md
- …and 40 more: https://policylayer.com/tools/io-github-sahib-sawhney-wh-looking-glass-mcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=io-github-sahib-sawhney-wh-looking-glass-mcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/io-github-sahib-sawhney-wh-looking-glass-mcp