[BUG] Claude in Chrome MCP: navigate and read_page denied on ALL domains from Claude Desktop (Windows 11) — no approval popup renders

Related / duplicates: #27073, #20887, #43538, #41034

Summary

MCP tools Claude_in_Chrome__navigate and read_page fail on ALL domains from Claude Desktop on Windows 11 with "Navigation to this domain is not allowed" / "Permission denied for reading pages on this domain". No approval popup ever renders in the extension side panel. Bridge partially connects (tabs_context_mcp works, returns tab IDs).

Environment

• OS: Windows 11
• Claude Desktop: latest as of 17 Apr 2026 (just auto-updated)
• Claude in Chrome extension: v1.0.68 (fcoeoabgfenejglbffodgkkbkcdhcgfn)
• Chrome: latest stable
• Account: Pro (personal)
• Also installed: Claude Code CLI (may be relevant — see #20887)

Steps to reproduce

1. Fresh Claude Desktop install + Chrome extension signed in
2. Call mcp__Claude_in_Chrome__tabs_context_mcp → ✅ works, returns tab IDs
3. Call mcp__Claude_in_Chrome__navigate with any URL (tried remax-first.cl, example.com, google.com) → ❌ "Navigation to this domain is not allowed"
4. Call mcp__Claude_in_Chrome__read_page → ❌ "Permission denied for reading pages on this domain"
5. Observe Chrome extension side panel — no approval popup renders

Expected

Either (a) navigation succeeds, or (b) approval prompt appears asking user to allow the domain.

Actual

Tools fail silently without any UI prompt. Approved sites list in extension Options remains empty because the approval flow never triggers.

Config state

%APPDATA%\Claude\config.json contains:
"dxt:allowlistEnabled:4f4844af-3380-4b06-bee3-b2485f0d7b1c": false,
"dxt:allowlistCache:...": "<base64 signed blob>"

Troubleshooting attempted (all failed)

1. Disable/re-enable extension
2. Sign out/in on extension
3. Delete all dxt:* keys from config.json + bridge-state.json, restart Desktop → Desktop detected "corrupted" config and reverted
4. Manual flip of dxt:allowlistEnabled to true via file edit → Desktop popup "Configuración restablecida — archivo dañado", reverted all changes to default (including flag back to false)
5. Extension mode toggle "Ask before acting" ↔ "Act without asking"
6. "Permitir extensión" on chrome://extensions/ details
7. Full Claude Desktop reinstall

Workaround

Migrated to Claude Code CLI where /chrome enable works. Chrome MCP from Claude Desktop is effectively unusable on Windows for this account.

Impact

Blocks all browser automation workflow from Claude Desktop chat. Forces switch to CLI, losing chat-based productivity for non-technical users.