[BUG] Claude-in-Chrome MCP exposes tabs from ALL Chrome profiles, not only where extension is installed
Resolved 💬 3 comments Opened Mar 30, 2026 by ReutTetris2 Closed Apr 3, 2026
Preflight Checklist
- [x] I have searched existing issues and this hasn't been reported yet
- [x] This is a single bug report (please file separate reports for different bugs)
- [x] I am using the latest version of Claude Code
What's Wrong?
Bug Description
The Claude-in-Chrome MCP (tabs_context_mcp) returns tabs from all open Chrome profiles, not just the profile where the extension is installed.
Actual Behavior
All open Chrome tabs across all profiles are exposed.
Privacy Impact
Users with personal/banking/client profiles open are unknowingly exposing all sessions to Claude Code. Violates principle of least privilege.
Environment
- OS: macOS
- Extension installed in: single profile only
- Other profiles: open simultaneously
What Should Happen?
Expected Behavior
Only tabs from the profile where the extension is installed should be visible.
Error Messages/Logs
Steps to Reproduce
Steps to Reproduce
- Install Claude-in-Chrome extension in one specific Chrome profile
- Have other Chrome profiles open simultaneously
- Call tabs_context_mcp from Claude Code
- All profiles' tabs are returned — not just the one with the extension
Claude Model
None
Is this a regression?
Yes, this worked in a previous version
Last Working Version
_No response_
Claude Code Version
2.1.87 (Claude Code)
Platform
Other
Operating System
macOS
Terminal/Shell
Other
Additional Information
_No response_
This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗