feat: support allowedUrlPattern & blockedUrlPattern Options#2037
Merged
Conversation
b5eca0f to
788efce
Compare
OrKoN
reviewed
May 12, 2026
OrKoN
reviewed
May 12, 2026
OrKoN
reviewed
May 12, 2026
f537e11 to
998d4be
Compare
OrKoN
reviewed
May 18, 2026
OrKoN
reviewed
May 18, 2026
703ef62 to
eab8536
Compare
OrKoN
reviewed
May 18, 2026
b90f3a7 to
57c0f95
Compare
57c0f95 to
6f1034f
Compare
Lightning00Blade
approved these changes
Jun 2, 2026
Lightning00Blade
left a comment
Collaborator
There was a problem hiding this comment.
LGTM with some small comment and questions.
67c356d to
e08b421
Compare
5f342b5 to
86eeb4f
Compare
pull Bot
pushed a commit
to CrazyForks/chrome-devtools-mcp
that referenced
this pull request
Jun 8, 2026
🤖 I have created a release *beep* *boop* --- ## [1.2.0](ChromeDevTools/chrome-devtools-mcp@chrome-devtools-mcp-v1.1.1...chrome-devtools-mcp-v1.2.0) (2026-06-08) ### 🎉 Features * add experimental TOON support for structured content output ([ChromeDevTools#2042](ChromeDevTools#2042)) ([aa33bff](ChromeDevTools@aa33bff)) * Adds close_heapsnapshot MCP tool ([ChromeDevTools#2174](ChromeDevTools#2174)) ([8713b93](ChromeDevTools@8713b93)) * Handle multiple providers of third-party developer tools ([ChromeDevTools#2168](ChromeDevTools#2168)) ([30d59a7](ChromeDevTools@30d59a7)) * implement extension service worker logs ([ChromeDevTools#1915](ChromeDevTools#1915)) ([29e3898](ChromeDevTools@29e3898)) * memory debugging tools ([ChromeDevTools#2169](ChromeDevTools#2169)) ([0217397](ChromeDevTools@0217397)) * support allowedUrlPattern & blockedUrlPattern Options ([ChromeDevTools#2037](ChromeDevTools#2037)) ([02b4492](ChromeDevTools@02b4492)) ### 🛠️ Fixes * Cursor plugin homepage setting field ([ChromeDevTools#2173](ChromeDevTools#2173)) ([8971890](ChromeDevTools@8971890)) ### 📄 Documentation * **skill:** guide agent to prompt for --categoryExtensions ([ChromeDevTools#2189](ChromeDevTools#2189)) ([8b458f7](ChromeDevTools@8b458f7)) ### ⚡ Performance * lighthouse file saves to run concurrently ([ChromeDevTools#2178](ChromeDevTools#2178)) ([f90f863](ChromeDevTools@f90f863)) ### 🏗️ Refactor * change type of logger ([ChromeDevTools#2165](ChromeDevTools#2165)) ([bf0574d](ChromeDevTools@bf0574d)) * use validate files on the tool level ([ChromeDevTools#2152](ChromeDevTools#2152)) ([2e039c0](ChromeDevTools@2e039c0)), closes [ChromeDevTools#2150](ChromeDevTools#2150) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Support for Network Blocklists and Allowlists (
--blocked-url-pattern&--allowed-url-patternarguments)This PR adds support for CLI options to restrict network access in the browser session via URL patterns.
Key Features & How It Works
--blocked-url-patternand--allowed-url-patternconflict with each other and cannot be configured simultaneously.--allowed-url-pattern: Requires Chrome 149+.--blocked-url-pattern: Works on Chrome versions older than 149, but Chrome 149+ is highly recommended.Important Limitations & Side Effects
emulatetool to modifynetworkConditions(e.g. setting toOffline) will throw an error:Network throttling is not supported when network blocking (allowlist/blocklist) is configured.cpuThrottlingRate,geolocation,viewport) are unaffected and remain fully functional.Configuration Examples
1. Blocking specific domains or endpoints (Blocklist)
Add the
--blocked-url-patternoptions to theargslist in your MCP settings file:{ "mcpServers": { "chrome-devtools": { "command": "npx", "args": [ "chrome-devtools-mcp@latest", "--blocked-url-pattern=*://*.blocked-example.com/*", "--blocked-url-pattern=*://*.another-blocked-example.com/*" ] } } }2. Restricting access to authorized domains (Allowlist)
Add the
--allowed-url-patternoptions to restrict the browser to permitted hosts (requires Chrome 149+):{ "mcpServers": { "chrome-devtools": { "command": "npx", "args": [ "chrome-devtools-mcp@latest", "--allowed-url-pattern=https://*.allowed-example.com/*", "--allowed-url-pattern=https://*.another-allowed-example.com/*" ] } } }