74
/ 100
1 month ago
glama

Firefox DevTools MCP

Automates Firefox via WebDriver BiDi for browser control, including navigation, screenshot, network capture, and script execution, using natural language through MCP clients.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 1 critical
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
// known CVEs in dependencies1 critical1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@3.1.4GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

ws: Uninitialized memory disclosure

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configACCEPT_INSECURE_CERTSaccept-insecure-certs — ignore TLS errors (=true)
configANDROID_PACKAGE
configCONNECT_EXISTINGconnect-existing — attach to an already-running Firefox instead of launching a new one (=true)
configENABLE_PRIVILEGED_CONTEXT
configENABLE_SCRIPTenable-script — enable the evaluate_script tool, which executes arbitrary JavaScript in the page context (=true)
configFIREFOX_HEADLESSheadless — run without UI (=true)
configFIREFOX_PATH
configMARIONETTE_PORTmarionette-port — Marionette port for connect-existing mode, default 2828 ()
configMOZ_REMOTE_ALLOW_SYSTEM_ACCESSPrivileged Context: list/select privileged ("chrome") contexts, evaluate_privileged_script (requires =1)
configNVM_DIR
configSTART_URLenv =https://example.com \
configTEST_ONLINE
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/mozilla-firefox-devtools-mcp-74ud10)](https://m8ven.ai/mcp/mozilla-firefox-devtools-mcp-74ud10)
commit: b0f4495336b36b875cee29480150e660088c3e1a
code hash: f357b447e0e65229e95c9e1224807548529129bde768f7fe7c75523f3a73bfab
verified: 6/12/2026, 10:35:22 AM
view raw JSON →