cdp.emulate.touch
Emulation.setTouchEmulationEnabled. HELD override: the attach banner stays until cdp.emulate.clear. Auto-cleared on detach / idle / connector-off so the page is never left stuck. Held sessions end when the hub says bye, or 10 s after the connection drops; start them again if needed. Held sessions...
This record as markdown: /tools/pixi-inspector-mcp/cdp.emulate.touch.md
What cdp.emulate.touch does on Pixi Inspector
AI agents call cdp.emulate.touch to permanently remove resources in Pixi Inspector, typically in cleanup and lifecycle workflows. It does its job in a single call, and there is no undo.
| Parameter | Type | Required | Description |
|---|---|---|---|
tabId | integer | — | Legacy: a bare tab id, resolved inside the browser this session is already working with. Prefer `target`, which is unambiguous across browsers. |
target | string | — | Drive a specific tab: a target id like "b7a3c1#487" from status/use_target/CHOOSE_TARGET. Omit to use this session's chosen tab (or the only available one). Pas |
enabled | boolean | Yes | Enable or disable touch emulation. |
frameId | integer | — | Escape hatch: drive a specific FRAME of the tab (0 is the top frame). Normally unnecessary — the extension picks the frame running the game (canvas owner first, |
Parameters from the server's own tool schema.
Why cdp.emulate.touch is rated Critical
An AI agent that decides to call cdp.emulate.touch doesn't hesitate, doesn't double-check, and doesn't stop at one. Whatever it removes from Pixi Inspector is gone. There is no undo for destructive operations.
Attacks that exploit this kind of access
The rule that runs cdp.emulate.touch safely
PolicyLayer is an MCP gateway: it sits between your AI agents and Pixi Inspector, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For cdp.emulate.touch, this is the rule to start with:
cdp.emulate.touch is removed from the agent's tool list entirely, so the agent never calls it. The rest of the server keeps working.
The button opens the PolicyLayer dashboard: create your workspace, connect Pixi Inspector, apply this rule, and every cdp.emulate.touch call is checked against it from then on.
Questions about cdp.emulate.touch
Emulation.setTouchEmulationEnabled. HELD override: the attach banner stays until cdp.emulate.clear. Auto-cleared on detach / idle / connector-off so the page is never left stuck. Held sessions end when the hub says bye, or 10 s after the connection drops; start them again if needed. Held sessions belong to ONE tab: while a capture/trace/emulation is held on another tab this fails BAD_PARAMS naming that tab (stop or clear it there first); a repeat start on the same tab answers already: true. It is categorised as a Destructive tool in the Pixi Inspector MCP Server, which means it can permanently delete or destroy data. Block by default and require explicit approval.
cdp.emulate.touch accepts 4 parameters: tabId, target, enabled, frameId. Required: enabled. The full parameter table on this page comes from the server's own tool schema.
Register the Pixi Inspector MCP server in PolicyLayer and add a rule for cdp.emulate.touch: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches Pixi Inspector. Nothing to install.
cdp.emulate.touch is a Destructive tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.
Yes. Add a rate_limit block to the cdp.emulate.touch rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.
Set action: deny in the PolicyLayer policy for cdp.emulate.touch. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.
cdp.emulate.touch is provided by the Pixi Inspector MCP server (pixi-inspector-mcp). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.
More on Pixi Inspector, and thousands of servers like it.
Across the catalogue