get_url · Browser CDP MCP Server MCP: Risk & Policy

WHAT IT DOES

What get_url does on Browser CDP MCP Server

AI agents call get_url to retrieve information from Browser CDP MCP Server without modifying anything — typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

WHY IT NEEDS A POLICY

Why get_url needs a policy

The tool name 'get_url' suggests querying the current URL from an active browser session—a read-only operation with no side effects. Within the CDP context (which supports navigation, screenshots, and command execution), this appears to be a query function.

From the tool's definition Tool name 'get_url' combined with server context of Chrome DevTools Protocol (CDP) browser automation indicates retrieval of current browser URL or page information. No description provided.

Attacks that exploit this kind of access

Questions about get_url

What does the get_url tool do? +

get_url. It is categorised as a Read tool in the Browser CDP MCP Server MCP Server, which means it retrieves data without modifying state.

How do I enforce a policy on get_url? +

Register the Browser CDP MCP Server MCP server in PolicyLayer and add a rule for get_url: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Browser CDP MCP Server. Nothing to install.

What risk level is get_url? +

get_url is a Read tool with low risk. Read-only tools are generally safe to allow by default.

Can I rate-limit get_url? +

Yes. Add a rate_limit block to the get_url rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block get_url completely? +

Set action: deny in the PolicyLayer policy for get_url. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides get_url? +

get_url is provided by the Browser CDP MCP Server MCP server (myestery/browser-cdp-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

// THE FULL RECORD

get_url is one line of Browser CDP MCP Server's registry record.

The record carries the whole server: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →