MCP Tools Reference
Complete reference for all 130 MCP tools exposed by Wraith Browser
Wraith Browser exposes 130 tools through the Model Context Protocol. Every tool is callable from any MCP-compatible AI agent (Claude Code, Cursor, Windsurf, etc.) over stdio transport.
Tools are organized into 15 categories. Each tool carries permission annotations (read_only, destructive, open_world) so your agent framework can enforce safety policies automatically.
Categories
| Category | Tools | Description |
|---|---|---|
| Navigation | 14 | Core browsing: navigate, scroll, wait, tabs, back/forward, config |
| Interaction | 13 | Click, fill, select, type, hover, key press, file upload, form submit |
| Extraction | 8 | Snapshot, extract markdown/PDF/article/plain text, screenshot, OCR, search |
| DOM | 4 | CSS selector queries, get/set attributes, focus elements |
| Cookies | 5 | Get, set, save, load, and import cookies from Chrome |
| Cache | 9 | Knowledge cache: search, pin, tag, evict, domain profiling, raw HTML |
| Identity | 6 | Browser fingerprints, identity profiles, site tech detection, compatibility status |
| Session | 4 | Named browser sessions with independent state (CDP feature) |
| Search | 5 | Web metasearch, semantic embeddings, network discovery, DNS |
| Entities | 7 | Knowledge graph: add, relate, merge, search, query, visualize entities |
| Automation | 18 | Parallel browsing, playbooks, deduplication, workflows, DAG orchestration |
| Time Travel | 5 | Decision timeline inspection, branching, replay, diff, export |
| Plugins | 7 | WASM plugins and Rhai userscripts |
| Telemetry | 2 | Browsing metrics and performance trace spans |
| Advanced | 36 | Credential vault, auth detection, TLS, planning, page diff, agent task |
Permission Model
Every tool carries annotation metadata:
| Annotation | Read-Only | Destructive | Network | Description |
|---|---|---|---|---|
ro_closed | yes | no | no | Safest -- read-only, local only |
ro_open | yes | no | yes | Read-only but accesses the network |
rw_closed | no | no | no | Can modify local state |
rw_open | no | no | yes | Can modify state and access the network |
rw_destructive | no | yes | no | Permanent or irreversible modifications |
MCP Configuration
Add to your .mcp.json:
{
"mcpServers": {
"wraith-browser": {
"command": "wraith-browser",
"args": ["serve", "--transport", "stdio"]
}
}
}