{"generated_at":"2026-08-17T10:36:11+00:00","item":{"added_at":"2025-11-02","analysis_method":"capability_triage","category":"Web Connector","description":"This MCP server provides AI assistants with access to the browser's tab management, browsing history, page search, and webpage text content through a local M...","did":"firefox-control","homepage_url":"","icon":"https://claude.ai/api/dxt/extensions/browser-control-firefox/versions/1.5.2/icon.png","id":"firefox-control","installs":0,"last_scanned":"","license":"","long_description":"This MCP server provides AI assistants with access to the browser's tab management, browsing history, page search, and webpage text content through a local MCP (Model Context Protocol) connection.\n\nBefore accessing any webpage content, explicit user consent is required for each domain through browser-side permissions.\n\nNote: This extension requires a separate Firefox add-on component, which is available at [https://addons.mozilla.org/en-US/firefox/addon/browser-control...","name":"Firefox Control","plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=firefox-control&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","publisher":"","publisher_url":"","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can read data the connected service holds about you - documents, messages, contact lists, source code, customer records, or saved profile details - and pass it back to the AI.","evidence":"Connector has 8 tools; permissions on claude.ai/directory: \"unknown\". Data flows out of the connected service into the model.","remediation":{"block_tool_categories":[],"steps":["Connect using an account that only has access to the information you actually want Claude to read - not your main admin login.","When you grant access, pick the smallest set of folders, mailboxes, or channels possible.","Check the connector's activity log every so often to make sure nothing unexpected is being read."]},"risk_type":"reads_private_data","severity":"medium","title":"Reads your private information"},{"description":"This connector can erase records, files, or accounts. Once deleted the data may be unrecoverable - even an accidental request can cause permanent loss.","evidence":"1 destructive tool on this connector - e.g. close-browser-tabs.","remediation":{"block_tool_categories":["destructive"],"steps":["In the tools list below, turn off any tool tagged Block - most workflows don't need Claude to delete anything.","If you really do need deletion, use a login that doesn't have delete permission and have a person handle removals manually.","Make sure the connected service has a trash / recycle bin enabled so accidental deletes can be recovered."]},"risk_type":"deletes_data","severity":"high","title":"Can permanently delete data"}],"signature_status":"unknown","source_code_reviewed":false,"tags":["network_access","reads_private_data","browser_control"],"tools":[{"description":"","name":"open-browser-tab"},{"description":"","name":"close-browser-tabs","risk":{"category":"destructive","level":"high","recommendation":"Block by default. Only enable for read-only or sandbox accounts; require explicit human confirmation for any destructive action.","why":"Irreversibly removes data or resources. A prompt-injection or mistaken instruction could destroy production data with no recovery path."}},{"description":"","name":"get-list-of-open-tabs"},{"description":"","name":"get-recent-browser-history"},{"description":"","name":"get-tab-web-content"},{"description":"","name":"reorder-browser-tabs"},{"description":"","name":"group-browser-tabs"},{"description":"","name":"find-highlight-in-browser-tab"}],"tools_count":8,"type":"web_connector","url":"https://claude.ai/directory","uuid":"81e7f13a-18f6-5959-8b74-3b88d3e60a32","version":"1.5.2"},"query_key":"firefox control","schema_version":1,"status":"match"}