io.github.mikusnuz/cws

NPM · CWS-MCP · SCANNED AUG 3

MCP server for Chrome Web Store — extension upload, publish, status, and rollout

Available components

+14 this week 67 67 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (98 of 102), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (98 of 102), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency45

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 136 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability85

100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
AI-judged instruction clarity (excellent).Pass
Context-footprint check failed: tool/resource definitions use about 1053 tokens (~117/item across 9 items; 8 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management0

Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · cws-mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add mikusnuz-cws -- npx -y cws-mcp

# add to Codex CLI

codex mcp add mikusnuz-cws -- npx -y cws-mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mikusnuz-cws": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "cws-mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add mikusnuz-cws --command npx --arg -y --arg cws-mcp

# ~/.hermes/config.yaml

mcp_servers:
  mikusnuz-cws:
    command: "npx"
    args: ["-y", "cws-mcp"]

// mcp.json

{
  "mcpServers": {
    "mikusnuz-cws": {
      "command": "npx",
      "args": [
        "-y",
        "cws-mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 −3
- Install scripts: pass → unverified ▼ security
- Provenance: fail → unverified ▼ security
- Known CVEs: partial → unverified ▼ security
- Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. security
- Maintenance: pass → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- License: pass → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Licence: MIT functional
31 Jul 26 +55
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −67
- Known CVEs: partial → unverified ▼ security
- Malware scan: pass → unverified ▼ security
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
- Dependency health: partial → unverified ▼ functional
29 Jul 26 +56
- Provenance: unverified → fail ▼ security
- Known CVEs: unverified → partial ▲ security
- Install scripts: unverified → pass ▲ security
- Maintenance: unverified → pass ▲ functional
- Schema quality: unverified → 100 ▲ functional
- License: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Schema quality: unverified → excellent ▲ functional
- Licence: MIT functional
28 Jul 26 −27
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
- Dependency health: unverified → partial ▲ functional
27 Jul 26 53

First indexed and scored.

Show 3 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 98 packages

98 packages in the resolved dependency tree · 96 deprecated · 30 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 8 exposed · ~1,020 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

cancel ~71

Cancel a pending submission on Chrome Web Store. Can be used to cancel an item currently in review.

Input Output Examples

Name	Type	Req	Description
itemId	string	—	Extension item ID (defaults to CWS_ITEM_ID env var)
publisherId	string	—	Publisher ID (defaults to CWS_PUBLISHER_ID env var or 'me')

No output schema declared.

No examples provided.

deploy-percentage ~114

Set the published deploy percentage for staged rollout on Chrome Web Store. The new percentage must be higher than the current target. Only available for items with 10,000+ seven-day active users.

Input Output Examples

Name	Type	Req	Description
itemId	string	—	Extension item ID (defaults to CWS_ITEM_ID env var)
percentage	number	yes	Deploy percentage (0-100). Must be larger than the current target percentage.
publisherId	string	—	Publisher ID (defaults to CWS_PUBLISHER_ID env var or 'me')

No output schema declared.

No examples provided.

get ~92

Get the current metadata of a Chrome Web Store item (v1.1 API). Returns title, description, category, and other listing fields. Note: v1 API is deprecated and will be removed after Oct 15, 2026.

Input Output Examples

Name	Type	Req	Description
itemId	string	—	Extension item ID (defaults to CWS_ITEM_ID env var)
projection	string	—	Metadata projection to fetch (defaults to DRAFT)

No output schema declared.

No examples provided.

publish ~158

Publish an extension to Chrome Web Store. Supports immediate publish, staged publish, initial deploy percentage, and skip-review.

Input Output Examples

Name	Type	Req	Description
deployPercentage	integer	—	Initial deploy percentage for staged rollout (0-100). Only used with STAGED_PUBLISH or DEFAULT_PUBLISH.
itemId	string	—	Extension item ID (defaults to CWS_ITEM_ID env var)
publishType	string	—	DEFAULT_PUBLISH: publishes immediately after approval. STAGED_PUBLISH: stages for manual publishing after approval. Defaults to DEFAULT_PUBLISH.
publisherId	string	—	Publisher ID (defaults to CWS_PUBLISHER_ID env var or 'me')
skipReview	boolean	—	Attempt to skip review if the extension qualifies. Defaults to false.

No output schema declared.

No examples provided.

status ~87

Fetch the current status of an extension on Chrome Web Store. Returns published/submitted revision status, deploy percentage, version, takedown/warning flags, and last upload state.

Input Output Examples

Name	Type	Req	Description
itemId	string	—	Extension item ID (defaults to CWS_ITEM_ID env var)
publisherId	string	—	Publisher ID (defaults to CWS_PUBLISHER_ID env var or 'me')

No output schema declared.

No examples provided.

update-metadata ~205

Update the store listing metadata of a Chrome Web Store item (v1.1 API). Supports both common fields and raw metadata payload for advanced fields. Note: v1 API is deprecated and will be removed after Oct 15, 2026. Use update-metadata-ui as an alternative.

Input Output Examples

Name	Type	Req	Description
category	string	—	Category (e.g. 'productivity', 'developer_tools')
defaultLocale	string	—	Default locale (e.g. 'ko', 'en')
description	string	—	Store listing description
homepageUrl	string	—	Homepage URL
itemId	string	—	Extension item ID (defaults to CWS_ITEM_ID env var)
metadata	object	—	Raw metadata object forwarded as-is to the v1 API. Useful for fields not exposed as first-class params.
summary	string	—	Store listing short summary
supportUrl	string	—	Support URL
title	string	—	Store listing title

No output schema declared.

No examples provided.

update-metadata-ui ~189

Update listing metadata via Chrome Web Store dashboard UI automation (Playwright). Use this when API metadata updates are not reflected, or as the primary metadata update method since the v1 API is deprecated.

Input Output Examples

Name	Type	Req	Description
accountIndex	integer	—	Google account index in dashboard URL (default: 0)
category	string	—	Category label as shown in dashboard UI
description	string	—	Store listing long description
headless	boolean	—	Run browser headless (default: false)
homepageUrl	string	—	Homepage URL
itemId	string	—	Extension item ID (defaults to CWS_ITEM_ID env var)
storeIconPath	string	—	Absolute path to 128x128 store icon image
summary	string	—	Store listing short summary
supportUrl	string	—	Support URL
title	string	—	Store listing title

No output schema declared.

No examples provided.

upload ~104

Upload a ZIP file to update an existing Chrome Web Store item draft. Note: Creating new items via API is not supported in v2 — use the Developer Dashboard to create new items.

Input Output Examples

Name	Type	Req	Description
itemId	string	—	Extension item ID (defaults to CWS_ITEM_ID env var)
publisherId	string	—	Publisher ID (defaults to CWS_PUBLISHER_ID env var or 'me')
zipPath	string	yes	Absolute path to the ZIP file to upload

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug

Day	Score
27 Jul	53
28 Jul	26
29 Jul	82
30 Jul	15
31 Jul	70
1 Aug	70
2 Aug	67
3 Aug	67