Visual UI Debug Agent MCP

Findings (11)

• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  @modelcontextprotocol/sdk@1.30.0: 6 known vulnerabilities

  GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  body-parser@2.3.0: 1 known vulnerability

  GHSA-27r3-jxmh-p828

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  fast-uri@3.1.5: 10 known vulnerabilities

  GHSA-333x-w4r6-6crp, GHSA-5jgf-p345-68v8, GHSA-f65p-4m7j-42xc, GHSA-fph4-wmhf-6fwf, GHSA-hrr3-gc8f-f4qj +5 more

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  zod@3.25.76: 1 known vulnerability

  GHSA-mrhx-c7xc-m3w5

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  @hono/node-server@2.1.0: 1 known vulnerability

  GHSA-rmxm-3fg6-px4f

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  hono@4.13.1: 5 known vulnerabilities

  GHSA-5r4p-p66f-jhc7, GHSA-crvj-82cr-hjcx, GHSA-g6gw-c38x-mqfc, GHSA-gqvv-2mrq-wpjv, GHSA-hxh3-vqpv-xpqv

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  ip-address@10.5.0: 5 known vulnerabilities

  GHSA-2vr4-cq9g-pvrc, GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  qs@6.15.3: 3 known vulnerabilities

  GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-x5fp-wj9c-mxmx

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  package.json has a prepare script

  npm run build

  package.json
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)

Network activity

Tools exposed (29)

• enhanced_page_analyzer

  Analyze a page with screenshots, console logs, interactive element mapping, and performance metrics

• api_endpoint_tester

  Test multiple API endpoints and verify responses

• navigation_flow_validator

  Test a sequence of user actions across multiple pages

• screenshot_url

  Take a screenshot of a URL

• dom_inspector

  Inspect DOM elements and their properties

• batch_screenshot_urls

  Capture screenshots of multiple URLs in a grid layout for easy comparison

• console_monitor

  Monitor console logs on a page

• performance_analysis

  Analyze page performance metrics

• visual_comparison

  Compare two URLs visually and highlight differences

• screenshot_local_files

  Take screenshots of local HTML files in a directory

• playwright_navigate

  Navigate to a URL

• playwright_click

  Click an element on the page

• playwright_iframe_click

  Click an element in an iframe on the page

• playwright_fill

  Fill out an input field

• playwright_select

  Select an option in a dropdown

• playwright_hover

  Hover over an element on the page

• playwright_evaluate

  Execute JavaScript in the browser console context

• playwright_console_logs

  Retrieve console logs captured so far

• playwright_get_visible_text

  Get the visible text content of the current page

• playwright_get_visible_html

  Get the HTML content of the current page

• playwright_go_back

  Navigate back in browser history

• playwright_go_forward

  Navigate forward in browser history

• playwright_press_key

  Press a keyboard key (optionally focusing an element first)

• playwright_drag

  Drag an element to a target location

• playwright_screenshot

  Take a screenshot of the current page or a specific element

• ui_workflow_validator

  Execute and validate a sequence of UI interactions simulating a user workflow.

• tunnel_helper

  Guide user to expose local ports via Cloudflare tunnel or manage tunnel URLs

• debug_memory

  Save and retrieve debugging context including .env variables, selectors, and issues

• sitemap_crawler

  Crawl a website recursively to generate a comprehensive sitemap with all endpoints, links, and visible text content. Perfect for detecting inconsistent content, broken links, and navigation issues.