MCP Tools
Sessions & credentials
Inspect saved identities and open tabs, refresh or re-auth sessions, and store sign-in secrets off the LLM path.
These tools introspect and maintain the saved browser identities and the credentials that back them. See the narrative guides for Sessions and Credentials.
Introspection
| Tool | What it does |
|---|---|
bureau_sessions | List the browser identities saved on this Bureau (id, backend, platform, account, source strategy, resolved sub-account, declared domains, Chrome profile, last auth status + when verified, whether a re-login credential is on file). Metadata only — no cookies or credentials. Pass verify: true for a live auth probe per session (slower). |
bureau_tabs | List the tabs currently open (session, url, title). Pass session to scope to one identity; omit it to sweep every saved session plus the ad-hoc control tab. Only live sessions return tabs. |
list_profile_accounts | List the platform accounts a Chrome profile is logged into. Read-only + secret-free — account ids/handles only, never a cookie or credential. |
Maintenance
| Tool | What it does |
|---|---|
session_sync_from_chrome | Refresh a chrome-sourced session: re-pull + re-decrypt its declared domains' cookies from the named/pinned Chrome profile, optionally re-pin to a different profile, and stamp the refresh time. Secret-free. Owned/Guilde sessions return no-chrome-strategy — use session_reauth. |
session_reauth | Re-authenticate a saved owned session from its stored credential (resolved server-side from env → Keychain, typed into the page — never passed in or returned). On a 2FA/challenge, returns needsHuman: true with the headful CLI command to finish by hand. Refuses when no credential is on file. |
Credentials
| Tool | What it does |
|---|---|
record_credential | Initiate storing a platform sign-in secret off the LLM path. via: "command" (default) returns the exact terminal command; via: "page" opens a one-shot loopback capture form on the host. Either way the human types the password and it goes straight to the OS Keychain — never an argument here, never returned. |
list_credentials | List the (platform, account) sign-in credentials stored and which saved sessions each is linked to. Never returns the secret — only that a credential exists. |