Reticle MCP Server: Setup for Claude, Cursor and Other Apps

• Moves the connected browser tab to a URL or reloads it

  Sends the tab that is connected to your dev app to a new address, or reloads it in place. Use it for a real page load, not a link click inside the app.

  Try: “Open the /checkout page of my app.”

  Write · reticle_navigate

• Clicks, types, selects or drags in your running app

  Performs one action in the page and only promises it was sent, not that it worked. Pair it with a check afterwards.

  Try: “Click the Pay button.”

  Write · reticle_act

• Does an action and waits for the result in one call

  Performs one action and waits for a named outcome, then returns a verdict. This is the main way to check that a click really did something.

  Try: “Click Save and confirm a POST to /api/save returns 200.”

  Write · reticle_act_and_wait

• Checks a claim against what the app actually did

  Evaluates a statement such as 'the cart count is 1' against network, state and page. It answers yes, no or cannot tell, with the evidence.

  Try: “Verify the invoice total shows 120.00.”

  Read · reticle_assert

• Reads the page, one element or your store without changing anything

  Returns the rendered page tree, finds elements, shows one element's source file and line, or reads your app's state store.

  Try: “Show me the cart state in the store.”

  Read · reticle_look

• Shows the timeline of everything the app just did

  Returns requests, console messages, routing and DOM changes in order for a time window. Use it when you do not yet know what went wrong.

  Try: “What happened in the app after I clicked Pay?”

  Read · reticle_observe

• Manages sessions, notes and feedback to the agent

  Lists connected browser tabs, and lets the agent narrate, send feedback or review its run.

  Try: “List the tabs Reticle is connected to.”

  Write · reticle_session

• Replays saved checks or crawls the whole app

  Runs actions such as replaying saved flows, listing coverage, or crawling. The crawl drives every reachable control and really clicks them.

  Try: “Replay all my saved flows.”

  Runs code · reticle_verify

• Lists every Reticle tool and how to call it

  Returns the full tool list with one-line summaries and the argument rules for the ones you name.

  Try: “What Reticle tools exist beyond the main ten?”

  Read · reticle_tools

• Calls any other Reticle tool by name

  A hatch to tools that are not shown by default, such as storage reads, a fake clock, network mocking, screenshots and saving flows. It can therefore reach more than the ten listed tools.

  Try: “Mock the /api/orders call to return an error.”

  Write · reticle_run

Watch out for

• It clicks and types in your running app

  The crawl in reticle_verify really clicks every reachable control, which can change data. Point it at a dev database, never production data. github.com

• Setup edits your project and agent config

  The init step adds dev packages, changes your build config and writes rules into CLAUDE.md and AGENTS.md. Run it with --dry-run first, and use --no-mcp to skip agent files. github.com

• The Codex installer turns off per-call approval for its tools

  If codex is on your PATH, reticle setup install registers Reticle with codex mcp add and adds default_tools_approval_mode = "approve" under [mcp_servers.reticle] in ~/.codex/config.toml, so Codex stops asking before each Reticle call. Change that line to "prompt" to undo it. github.com

• It keeps your prompts and sends usage counts

  A prompt hook saves each prompt, redacted, in .reticle/, and a linked project sends it along. Anonymous usage counts are on by default; set RETICLE_TELEMETRY=0 to turn them off. github.com

• One tool reaches the unlisted tools

  reticle_run can call any registered tool, such as network mocking and flow saving, even though they are not shown by default. npmjs.com

• The local bridge listens on loopback

  The bridge binds to 127.0.0.1 by default and pairs with a token. The README says it never evaluates arbitrary JavaScript in your page. github.com

Security advisories