Can Claude use my existing Chrome login?

Yes. chrome-mcp is an MCP server plus a Chrome extension. The extension runs inside the Chrome you already use, so any site you are signed into is signed in for the agent too, with no re-login and no credentials copied anywhere.

Is it the only MCP server that uses a signed-in Chrome?

No. Other extensions, such as hangwin/mcp-chrome, also reuse your login state. chrome-mcp differs in its defaults: a per-domain allowlist that starts empty, reads gated as well as writes, password values never returned, optional secret redaction and a per-call audit log.

Which sites can the agent reach?

Only the hosts you name with --allow-domain. Everything else is refused before the call reaches the page. --unsafe-all-domains exists, and is named that way on purpose.

Does it work with Claude Desktop and Cursor, not only Claude Code?

Yes. It speaks MCP over stdio, so Claude Code, Claude Desktop, Cursor, Windsurf and any other MCP host can use it.

Signed-in Chrome

Use Claude in the Chrome you are already signed into

Most browser agents open a fresh, signed-out Chromium. chrome-mcp works the other way: a Chrome extension connects your normal browser to Claude Code, Claude Desktop or any MCP host, so the agent sees your Gmail, GitHub and dashboards exactly as you do. No re-login, no 2FA twice, no cookies pasted into a config file.

Add the extension from the Chrome Web Store Quickstart

What it is for

Gmail

Search your inbox and read threads as you, in a background tab. Nothing to authorise, no app password, no OAuth client to register.

GitHub

Go through PRs, issues, Actions runs and settings pages with your own permissions, private repositories included.

Dashboards and admin panels

Pull numbers from analytics, billing, CRM or back-office screens that have no API, or whose API you never set up.

Set it up in two steps

1. Register the server and name the sites the agent may read. This example allows Gmail and GitHub and nothing else:
Claude Code
```
claude mcp add chrome-mcp -s user -- \
  npx -y @mehmoodqureshi/chrome-mcp \
  --allow-domain mail.google.com \
  --allow-domain github.com \
  --persist-token
```
Claude Desktop, Cursor and Windsurf take the same arguments in a JSON config; see the quickstart. Add --enable-mutations only if the agent should also click and type.
2. Add the extension to the Chrome you are signed into: MCP Extension for Chrome on the Chrome Web Store, or load the folder the server unpacks in your home directory. It pairs itself; the toolbar badge turns green.

How it keeps your sessions safe

Giving an agent your signed-in browser is only reasonable if you decide what it can touch. Other extensions, such as hangwin/mcp-chrome, also reuse your login state; this is what chrome-mcp adds on top of the session.

Per-domain allowlist, deny-all by default

With no flags the agent can read nothing. Each --allow-domain opens exactly one host (*.example.com covers a domain and its subdomains). Reads are gated as well as clicks, and the extension re-checks the same policy on its side.

Capabilities are separate opt-ins

Clicking and typing, eval, downloads and uploads each need their own flag. A read-only setup stays read-only.

Secrets stay out of the transcript

Password field values are never returned. --redact scrubs JWTs, cloud keys and bearer tokens out of page reads before the output cap.

Background tabs and batch

Open pages with active: false and read many in one batch call, so the agent does not take over the tab you are working in.

Several Chrome profiles

Load the extension in your work and personal profiles; each pairs under its own name and profile_use switches between them.

Expired sessions are named

auth_check and --fail-on-auth-wall turn a sign-in wall into an [AUTH_REQUIRED] error, so the agent stops and asks you instead of timing out. chrome-mcp holds no credentials and never signs in for you.

An audit trail

Every call lands in history.jsonl with the URL, the allow or deny verdict, duration and bytes returned.

The security model Compare with other browser MCP servers

Questions

Can Claude use my existing Chrome login?: Yes. chrome-mcp is an MCP server plus a Chrome extension. The extension runs inside the Chrome you already use, so any site you are signed into is signed in for the agent too, with no re-login and no credentials copied anywhere.
Is it the only MCP server that uses a signed-in Chrome?: No. Other extensions, such as hangwin/mcp-chrome, also reuse your login state. chrome-mcp differs in its defaults: a per-domain allowlist that starts empty, reads gated as well as writes, password values never returned, optional secret redaction and a per-call audit log.
Which sites can the agent reach?: Only the hosts you name with --allow-domain. Everything else is refused before the call reaches the page. --unsafe-all-domains exists, and is named that way on purpose.
Does it work with Claude Desktop and Cursor, not only Claude Code?: Yes. It speaks MCP over stdio, so Claude Code, Claude Desktop, Cursor, Windsurf and any other MCP host can use it.