Cws

io.github.mikusnuzPublished by GitHub account mikusnuzv2.0.2Updated Nov 3, 2026

MCP server for Chrome Web Store — extension upload, publish, status, and rollout

VerifiedSTDIODesktop onlyBrowser AutomationDeveloper Tools

Overview

AI-generated overview

Manages Chrome Web Store extensions from an MCP client: upload ZIP drafts, publish, check review status, cancel submissions, and set rollout percentages.

What you can do
  • Upload a built ZIP as a draft update to an existing Chrome Web Store item
  • Publish or submit for review, with publish type, rollout percentage, skip-review and block-on-warnings options
  • Check review state, version and deploy percentage, and cancel a pending submission
  • Set staged rollout percentages for eligible extensions
  • Read and save draft listing fields (description, category, homepage and support URLs) through the developer dashboard
When to use it
Useful when you ship a Chrome extension and want an assistant to handle the release loop: pushing a new ZIP, submitting for review, watching status, ramping a staged rollout, or editing draft listing text without opening the dashboard by hand.
Requirements
Runs locally as an npm package (cws-mcp) via npx or node, requiring Node.js 20 or newer and Google Chrome installed. Needs Google OAuth2 credentials for the Chrome Web Store API: CWS_CLIENT_ID, CWS_CLIENT_SECRET and CWS_REFRESH_TOKEN, obtained through a desktop OAuth flow with the chromewebstore scope. Optional CWS_PUBLISHER_ID, CWS_ITEM_ID and CWS_DASHBOARD_PROFILE_DIR. Dashboard tools need a signed-in Chrome profile.
Before you install
Requires three Google secrets (CWS_CLIENT_ID, CWS_CLIENT_SECRET, CWS_REFRESH_TOKEN) that grant publishing rights to your extensions; store them in the client's secret settings. Publishing, cancelling and rollout changes affect the live store listing and can trigger review; skip-review and block-on-warnings defaults should be checked. Dashboard tools drive a signed-in Chrome profile via Playwright, so that profile's session is used. Listing edits touch the current dashboard draft only.

Installation

In SourceWeft

  1. Open Cws in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

cws-mcp

[npm version]

한국어

[MCP Badge]

MCP server for Chrome Web Store extension management. Upload, publish, and manage Chrome extensions directly from Claude Code or any MCP client.

When to Use

Use this MCP when you need to:

  • "Upload a new version of my Chrome extension" — build your ZIP and use the upload tool to push it as a draft
  • "Publish my extension to the Chrome Web Store" — use publish to submit for review and go live
  • "Check the review status of my extension" — use status to see review state, version, and deploy percentage
  • "Update my extension's description or category" — use update-metadata to save and verify the draft listing
  • "Cancel a pending submission" — use cancel to withdraw a submission under review
  • "Set up staged rollout for my extension" — use publish with staged rollout, then deploy-percentage to ramp up

Tools

ToolDescription
uploadUpload a ZIP file to Chrome Web Store (update existing item draft)
publishSubmit/publish with publish type, rollout percentage, skip-review, and blockOnWarnings
statusFetch the current status including review state, deploy percentage, and version
cancelCancel a pending submission
deploy-percentageSet staged rollout percentage (0-100, must exceed current target)
getAlias of status: v2 publication status, not listing text
get-metadata-uiRead the current draft description, category, homepage URL, and support URL from the dashboard
update-metadataSave those four supported draft fields through the dashboard and verify them after reload
update-metadata-uiAlias of update-metadata

API Coverage

An upload returning IN_PROGRESS is pending: poll status until lastAsyncUploadState is SUCCEEDED before publishing. FAILED is a tool error. A blocked publish retains error.details, including the warnings that need attention.

This MCP server covers all Chrome Web Store API v2 endpoints:

v2 EndpointMCP Tool
media.uploadupload
publishers.items.publishpublish
publishers.items.fetchStatusstatus
publishers.items.cancelSubmissioncancel
publishers.items.setPublishedDeployPercentagedeploy-percentage

All API requests use v2. The public API has no listing-text read/write endpoints; dashboard tools use Playwright and a separate signed-in Chrome profile. Saving listing fields never submits for review. Missing fields, unmatched categories, and unconfirmed saves return errors instead of success.

Setup

Requires Node.js 20 or newer, matching the Playwright runtime requirement.

1. Create OAuth2 Credentials

  1. Go to Google Cloud Console
  2. Create a project (or select existing)
  3. Enable Chrome Web Store API
  4. Create OAuth2 credentials (Desktop app type)
  5. Note your Client ID and Client Secret

2. Get Refresh Token

Follow Google's OAuth flow for desktop apps using a local loopback redirect URI, PKCE, and the scope https://www.googleapis.com/auth/chromewebstore. Request offline access (access_type=offline; use prompt=consent when you need a new refresh token). Exchange the authorization code using the same redirect URI and keep the refresh token in your MCP client's secret/environment settings. The former copy-and-paste OOB redirect is no longer supported by Google.

3. Configure MCP

Add to your Claude Code MCP settings (~/.claude/settings.local.json):

json
{  "mcpServers": {    "cws-mcp": {      "command": "node",      "args": ["/path/to/cws-mcp/dist/index.js"],      "env": {        "CWS_CLIENT_ID": "xxxxx.apps.googleusercontent.com",        "CWS_CLIENT_SECRET": "GOCSPX-xxxxx",        "CWS_REFRESH_TOKEN": "1//xxxxx",        "CWS_PUBLISHER_ID": "me",        "CWS_ITEM_ID": "your-extension-id"      }    }  }}

Or install globally via npm:

json
{  "mcpServers": {    "cws-mcp": {      "command": "npx",      "args": ["-y", "cws-mcp"],      "env": { ... }    }  }}

Environment Variables

VariableRequiredDescription
CWS_CLIENT_IDYesGoogle OAuth2 Client ID
CWS_CLIENT_SECRETYesGoogle OAuth2 Client Secret
CWS_REFRESH_TOKENYesOAuth2 Refresh Token
CWS_PUBLISHER_IDNoPublisher ID (default: me)
CWS_ITEM_IDNoDefault extension item ID
CWS_DASHBOARD_PROFILE_DIRNoBrowser profile path for UI automation (default: ~/.cws-mcp-profile)

Usage Examples

Check extension status

Use the cws-mcp status tool

Upload and publish

1. Use cws-mcp upload with zipPath="/path/to/extension.zip"2. Use cws-mcp publish

Hold publication until after approval

Use cws-mcp publish with:- publishType="STAGED_PUBLISH"

Publish with skip-review

Use cws-mcp publish with skipReview=true

STAGED_PUBLISH holds an approved submission for a later publication; it is not the rollout percentage. Use deployPercentage separately for an eligible extension's gradual rollout.

Stop publishing on validation warnings

Use cws-mcp publish with blockOnWarnings=true

The default is false, matching the API. Inspect returned warningInfo.warnings even when publishing succeeds.

Read or save listing fields without submitting for review

Use cws-mcp get-metadata-ui with headless=falseUse cws-mcp update-metadata with:- description="..."- category="Developer Tools"- homepageUrl="https://example.com"- supportUrl="https://example.com/support"

Notes:

  • category must match the visible option label exactly in the current dashboard language; English and Korean field labels are supported.
  • These tools read/save the current dashboard draft, not the published listing or an arbitrary locale. Select the intended localization in the dashboard first; ambiguous fields fail safely.
  • Change title, summary, and default locale in manifest.json / localized messages, rebuild, and upload the ZIP. Use the dashboard directly for icons and screenshots.
  • First run with headless=false if login is required.
  • Browser profile path defaults to ~/.cws-mcp-profile (override with CWS_DASHBOARD_PROFILE_DIR).
  • Google Chrome must be installed. Dashboard UI changes can require selector updates; unverified saves return errors. Verify the dashboard before retrying an ambiguous failure.

Staged rollout

1. Use cws-mcp publish with deployPercentage=102. Monitor approval/publication with status3. Use cws-mcp deploy-percentage with percentage=504. Use cws-mcp deploy-percentage with percentage=100

Note: deploy-percentage is only available for extensions with 10,000+ seven-day active users. The new percentage must always be higher than the current target.

Migrating from 1.x to 2.0

Google shuts down API v1 on October 15, 2026. Version 2.0 no longer calls it:

  • get now returns v2 status. Its old projection argument is rejected; use get-metadata-ui for draft listing text. Published listing text is not exposed by v2.
  • update-metadata now uses the same dashboard workflow as update-metadata-ui and therefore needs Chrome login, not just an API token.
  • Raw metadata, title, summary, and defaultLocale inputs are rejected with guidance; unsupported inputs are never silently ignored.
  • storeIconPath is no longer accepted as a working upload. The previous generic file-input approach could not verify which asset it changed; upload the icon in the Developer Dashboard instead.

License

MIT

Source: README.md at commit a10f5f7

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

3
  1. v2.0.2LatestOct 19, 2026
  2. v2.0.0Oct 8, 2026
  3. v1.4.1Sep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts