{"name":"io.github.DB-25/arc-control-mcp","slug":"db-25-arc-control-mcp","title":"Arc Control (macOS)","description":"Arc browser MCP for macOS: agent window, snapshots, DevTools input, guardrails","url":"https://mcp.market/server/db-25-arc-control-mcp","rating":null,"grade":"A","score":85,"certified":false,"status":"active","category":"scraping","tags":["scraping","ai"],"presence":{"score":31,"stars":2,"forks":0,"downloads_week":45,"last_push_at":"2026-10-05T19:31:17.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/DB-25/arc-control-mcp","website":"https://github.com/DB-25/arc-control-mcp","version":"0.4.0","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"arc-control-mcp","version":"0.4.0","transport":{"type":"stdio"},"environmentVariables":[{"description":"Names this agent's tab ownership. Two agents with different labels never see each other's owned tabs. Defaults to \"default\".","default":"default","name":"ARC_MCP_LABEL"},{"description":"With ARC_MCP_WINDOW=space, the Arc space new tabs open into, when a space with that name exists. Arc will not let a script create a space, so make it by hand. Defaults to \"Agent\".","default":"Agent","name":"ARC_MCP_SPACE"},{"description":"Directory where per-session tab ownership is recorded, so a restarted agent can clean up the tabs its previous run left behind. Defaults to ~/Library/Application Support/arc-control-mcp.","format":"filepath","name":"ARC_MCP_STATE_DIR"},{"description":"\"dedicated\" keeps agent tabs in one separate agent window, never the user's own. \"space\" puts them in the Agent space of the user's window. Defaults to \"dedicated\".","default":"dedicated","name":"ARC_MCP_WINDOW"},{"description":"Where the agent window goes once, at creation: \"auto\" (largest non-main display, else where Arc puts it), \"second-display\", \"minimized\" (experimental) or \"none\". Needs Accessibility. Defaults to \"auto\".","default":"auto","name":"ARC_MCP_WINDOW_PLACEMENT"},{"description":"How many milliseconds the user must have been idle before the server does anything visible. 0 turns the activity gate off. Defaults to 1500.","default":"1500","name":"ARC_MCP_IDLE_MS"},{"description":"How many milliseconds to wait for that pause before failing with userActive true. Defaults to 15000.","default":"15000","name":"ARC_MCP_IDLE_WAIT_MS"},{"description":"Directory the local data tools (sidebar_tree, find_stale_tabs, search_archive, search_history) read Arc's files from. Defaults to ~/Library/Application Support/Arc.","format":"filepath","name":"ARC_MCP_ARC_DATA_DIR"},{"description":"Set to 1 to let search_history run. Off by default, and any other value leaves it off.","name":"ARC_MCP_ALLOW_HISTORY"},{"description":"Set to 0 to disable the DevTools engine (trusted input, screenshots, console and network capture). On by default, and inert until Arc is launched with --remote-debugging-port.","name":"ARC_MCP_CDP"},{"description":"The DevTools port to probe on 127.0.0.1. The host is fixed. Defaults to 9222.","default":"9222","name":"ARC_MCP_CDP_PORT"},{"description":"Guardrail. Comma list of origins the agent may touch (host, *.host, scheme://host[:port], file://, about:). Anything not listed is refused. Unset means no allow list.","name":"ARC_MCP_ALLOWED_ORIGINS"},{"description":"Guardrail. Comma list of origins the agent may not touch. Wins over the allow list. Unset means no block list.","name":"ARC_MCP_BLOCKED_ORIGINS"},{"description":"Set to 1 to apply the origin lists to read tools as well as changing ones. Off by default.","name":"ARC_MCP_BLOCK_READS"},{"description":"Set to 1 to expose only the read-only tools. Off by default.","name":"ARC_MCP_READ_ONLY"},{"description":"Path of a file that gets one JSON line per changing call (time, tool, tab, origin, ok, error), never typed values or script code. Unset means no audit log.","format":"filepath","name":"ARC_MCP_AUDIT_LOG"}]}],"tools":[],"scan":{"score":85,"grade":"A","scanned_at":"2026-10-29T18:46:46.312Z","report":{"scannerVersion":"0.1.10","scannedAt":"2026-10-29T18:46:46.275Z","components":{"code":{"score":20,"max":25,"notes":["44 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 24 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"src/tools/scripting.js: …constructing it is the parse check. new Function('A', body); return null; } catch (…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"arc-control-mcp","version":"0.4.0","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":2,"publishedAt":"2026-10-05T22:05:01.071Z","repositoryUrl":"git+https://github.com/DB-25/arc-control-mcp.git","weeklyDownloads":45}],"repo":{"found":true,"owner":"DB-25","repo":"arc-control-mcp","archived":false,"pushedAt":"2026-10-05T19:31:17Z","stars":2,"forks":0,"openIssues":2,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/65413652?v=4","ownerCreatedAt":"2020-05-15T16:36:46Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/65413652?v=4&s=128","source":"registry"},"presence":{"stars":2,"forks":0,"downloadsWeek":45,"license":"MIT","lastPushAt":"2026-10-05T19:31:17.000Z","score":31}}}},"grade_history":[],"reviews":[]}