Provides browser automation capabilities using Playwright, allowing LLMs to interact with web pages through structured accessibility snapshots.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
Playwright downloads and installs browsers without verifying the authenticity of the SSL certificate
ws: Memory exhaustion DoS from tiny fragments and data chunks
process.env. You'll be asked to provide them before it can run.ANTHROPIC_API_KEYDISPLAY— run the MCP server from environment with the and pass the --port flag to enable HTTP transport.MCP_IN_DOCKEROPENAI_API_KEYPLAYWRIGHT_MCP_ALLOWED_ORIGINSPLAYWRIGHT_MCP_BLOCKED_ORIGINSPLAYWRIGHT_MCP_BLOCK_SERVICE_WORKERSPLAYWRIGHT_MCP_BROWSERPLAYWRIGHT_MCP_CAPSPLAYWRIGHT_MCP_CDP_ENDPOINTPLAYWRIGHT_MCP_CONFIGPLAYWRIGHT_MCP_DEVICEPLAYWRIGHT_MCP_EXECUTABLE_PATHPLAYWRIGHT_MCP_HEADLESSPLAYWRIGHT_MCP_HOSTPLAYWRIGHT_MCP_IGNORE_HTTPS_ERRORSPLAYWRIGHT_MCP_IMAGE_RESPONSESPLAYWRIGHT_MCP_ISOLATEDPLAYWRIGHT_MCP_OUTPUT_DIRPLAYWRIGHT_MCP_PORTPLAYWRIGHT_MCP_PROXY_BYPASSPLAYWRIGHT_MCP_PROXY_SERVERPLAYWRIGHT_MCP_SANDBOXPLAYWRIGHT_MCP_SAVE_TRACEPLAYWRIGHT_MCP_STORAGE_STATEPLAYWRIGHT_MCP_USER_AGENTPLAYWRIGHT_MCP_USER_DATA_DIRPLAYWRIGHT_MCP_VIEWPORT_SIZEPWMCP_PROFILES_DIR_FOR_TESTPWMCP_TEST_CONNECTION_TIMEOUTXDG_CACHE_HOME[](https://m8ven.ai/mcp/goodfaithexteriors-playwright-mcp-main-174frh)