[BUG] Claude-in-Chrome MCP exposes tabs from ALL Chrome profiles, not only where extension is installed

Resolved 💬 3 comments Opened Mar 30, 2026 by ReutTetris2 Closed Apr 3, 2026

Preflight Checklist

  • [x] I have searched existing issues and this hasn't been reported yet
  • [x] This is a single bug report (please file separate reports for different bugs)
  • [x] I am using the latest version of Claude Code

What's Wrong?

Bug Description

The Claude-in-Chrome MCP (tabs_context_mcp) returns tabs from all open Chrome profiles, not just the profile where the extension is installed.

Actual Behavior

All open Chrome tabs across all profiles are exposed.

Privacy Impact

Users with personal/banking/client profiles open are unknowingly exposing all sessions to Claude Code. Violates principle of least privilege.

Environment

  • OS: macOS
  • Extension installed in: single profile only
  • Other profiles: open simultaneously

What Should Happen?

Expected Behavior

Only tabs from the profile where the extension is installed should be visible.

Error Messages/Logs

Steps to Reproduce

Steps to Reproduce

  1. Install Claude-in-Chrome extension in one specific Chrome profile
  2. Have other Chrome profiles open simultaneously
  3. Call tabs_context_mcp from Claude Code
  4. All profiles' tabs are returned — not just the one with the extension

Claude Model

None

Is this a regression?

Yes, this worked in a previous version

Last Working Version

_No response_

Claude Code Version

2.1.87 (Claude Code)

Platform

Other

Operating System

macOS

Terminal/Shell

Other

Additional Information

_No response_

View original on GitHub ↗

This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗