How do I install Tabhand?

Tabhand is a local plugin. Install it using npm package: tabhand and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Tabhand safe to use?

Tabhand scored 6.6/10 (moderate risk) in MCP Marketplace's automated security scan. It has 1 high or critical finding to review. It's listed, but review the security report on this page before installing.

What AI apps work with Tabhand?

Tabhand uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Tabhand MCP Server

by Tabhand

Developer ToolsModerate6.6MCP RegistryLocal

Free

Server data from the Official MCP Registry

Let your coding agents use your real, signed-in Chrome, in background tabs that never steal focus.

About

Let your coding agents use your real, signed-in Chrome, in background tabs that never steal focus.

Security Report

6.6

Moderate6.6Moderate Risk

Tabhand is a local browser-automation MCP server that drives the user's own signed-in Chrome via chrome.debugger, scoped to tabs each agent session opens, with a Unix-socket bridge and no network port. The code reviewed shows careful session isolation, dialog handling, and upload size limits, with no exfiltration or hardcoded secrets found in the excerpt; the main considerations are the inherently broad browser-control permissions (signed-in accounts, page content, file reads for uploads, debugger access) which match the stated purpose but warrant user awareness, and the excerpt was truncated so the remaining background.js and bridge/native-host code could not be fully verified. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

4 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

browser_control

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

process_spawn

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

database

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "dev-tabhand-tabhand": {
      "args": [
        "-y",
        "tabhand"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!

4.8

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.

Tabhand MCP Server

About

Security Report

Findings (7)Action required

Permissions Required

How to Install

Reviews

No reviews yet

More Developer Tools MCP Servers

Rea

Paperclip

Fetch

Git

Toleno

MCP Marketplace