Hacktoberfest 2026: the issues maintainers tagged for October, open and beginner-friendly. Browse Hacktoberfest issues

Docs: tool descriptions for browser-embedding servers do not mention the browser's own background traffic

Open Beginner friendly
  • Is something wrong?
#4,829 0 comments 0 reactions 0 assignees View on GitHub

Maintainers usually reply within 1 day

@AbhiPra24 is already working on this.

Since Sep 24, 2026.

  • #4843 by @AbhiPra24 — open

Assessment

Difficulty
2/5
Estimated time
1-3 hours
Newbie friendliness
68/100
Issue type
Documentation
Clarity
Mostly clear
Activity status
Active
Domain
documentation, web-dev

Research direction

Start by checking the README and tool descriptions for the archived src/puppeteer server, then look for documentation covering future servers that embed browser engines. Add a concise note that the embedded browser may make background requests beyond the requested navigation, and confirm the wording fits the chosen documentation home.

Written by the indexing model from the issue text.

Description

Hello, and thanks for the reference servers: having a set of them with real schemas is what made
the measurement below possible at all.

While measuring where MCP tool calls cause outbound traffic to go, I ran
@modelcontextprotocol/[email protected] in a container behind a terminating proxy and
drove a single puppeteer_navigate call at one URL. Besides the requested navigation, the run
recorded connections to two destinations that the tool's description does not mention:
clients2.google.com and accounts.google.com.

These are the embedded Chromium's own background requests, not something the server asks for. I
checked rather than assumed: launching the same browser binary with the same flags through the
same proxy, with no MCP server in the process tree and the same navigation, reproduces both
destinations. Neither request carried any of the call's arguments.

So this is not a report about the server doing something unexpected with a user's data. It is a
documentation gap, and I think it is worth a line because of where these servers get deployed:

  • puppeteer_navigate is documented as navigating to a URL. A reader reasonably concludes that
    the destinations a call produces are the URL they passed.
  • Anyone deploying an MCP server in an environment where egress is reviewed (a regulated network,
    an allowlisted proxy, an air-gapped-ish build system) will size their allowlist from that
    reading, and the first background request will fail or will show up in an audit as unexplained.
  • The property belongs to the class, not to this package: any MCP server that embeds a browser
    engine will carry the same background traffic, whoever writes it.

A sentence in the README or in the tool description, along the lines of "this server runs a full
browser; the browser makes its own background requests (update and connectivity checks) in
addition to the navigation you request", would close the gap.

I realise src/puppeteer has moved to the archived set, so this may be better framed as a
convention for any future server that embeds a browser engine rather than as a fix to that
package. Happy to send a PR against whichever document you think is the right home for it, or to
drop it if you would rather not document archived servers.

Measurement details, if useful: container-only, no real credentials, a single navigation to an
RFC 2606 reserved domain, three repetitions of the control. I am not publishing anything that
identifies a deployment, and I am happy to share the method.

Thanks again.

Dominant language
TypeScript
Stars
90.6k
Forks
11.7k
Avg merge
8h 36m
Merged PRs (30d)
23

Getting set up

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

More from modelcontextprotocol/servers

All issues in modelcontextprotocol/servers

Similar issues

More TypeScript issues

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.