Is Web to MCP: Import any website components to Cursor or Claude Code safe?
Web to MCP uploads the current page URL, DOM HTML, token count, and screenshot to web-to-mcp.com after popup capture.
When you start a capture from the extension popup, Web to MCP reads the active page URL and DOM HTML, counts tokens, and captures a PNG screenshot. It sends those details to web-to-mcp.com using the extension background request handler with credentials included.
Who publishes itWeb to MCP - 1 other listing from the same operator, none carrying a finding
Web to MCP - 1 other listing from the same operator, none carrying a finding
What this publisher told the store about itself, and the other listings that told it the same thing.
Same operator - 1 listing
Published under a different store account, but sharing the registered address, contact or declared legal entity this one gave the store.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 0.0.6. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on web-to-mcp.com
https://web-to-mcp.com/*
Act on the current tab, but only after you click the extension
activeTab
Where it sends data
Destinations our analysis observed Web to MCP contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- web-to-mcp.com
Web to MCP sends data to web-to-mcp.com. No other extension we have analysed sends data here.