RunAutomation MCP Server (tayyabakmal1/runautomation-mcpserver) is an MCP server listed on the M8ven Trust Index. It scores 58 out of 100, grade D. It declares 91 tools. No publisher has claimed this listing.

D
Caution
58/100

RunAutomation MCP Server

Enables AI assistants to execute browser automation, perform QA tasks, and generate test code through natural language commands using Playwright.

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

tayyabakmal1

Source: Glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

Install from

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
⚠️
Known vulnerabilities in dependencies: 3 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
// tools this server exposes91 tools

These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.

start_codegen_session

Start a new code generation session to record Playwright actions

end_codegen_session

End a code generation session and generate the test file

get_codegen_session

Get information about a code generation session

clear_codegen_session

Clear a code generation session without generating a test

playwright_navigate

Navigate to a URL

playwright_screenshot

Take a screenshot of the current page or a specific element

playwright_click

Click an element on the page

playwright_iframe_click

Click an element in an iframe on the page

playwright_iframe_fill

Fill an element in an iframe on the page

playwright_fill

fill out an input field

playwright_select

Select an element on the page with Select tag

playwright_hover

Hover an element on the page

playwright_upload_file

Upload a file to an input[type='file'] element on the page

playwright_evaluate

Execute JavaScript in the browser console

playwright_console_logs

Retrieve console logs from the browser with filtering options

playwright_close

Close the browser and release all resources

playwright_get

Perform an HTTP GET request

playwright_post

Perform an HTTP POST request

playwright_put

Perform an HTTP PUT request

playwright_patch

Perform an HTTP PATCH request

playwright_delete

Perform an HTTP DELETE request

playwright_expect_response

Ask Playwright to start waiting for a HTTP response. This tool initiates the wait operation but does not wait for its completion.

playwright_assert_response

Wait for and validate a previously initiated HTTP response wait operation.

playwright_custom_user_agent

Set a custom User Agent for the browser

playwright_get_visible_text

Get the visible text content of the current page

playwright_get_visible_html

Get the HTML content of the current page. By default, all <script> tags are removed from the output unless removeScripts is explicitly set to false.

playwright_go_back

Navigate back in browser history

playwright_go_forward

Navigate forward in browser history

playwright_drag

Drag an element to a target location

playwright_press_key

Press a keyboard key

playwright_save_as_pdf

Save the current page as a PDF file

playwright_click_and_switch_tab

Click a link and switch to the newly opened tab

playwright_download_file

Handle file downloads triggered by clicking an element. Waits for download to complete and saves the file.

playwright_copy_to_clipboard

Copy text to the browser clipboard using the Clipboard API

playwright_read_clipboard

Read text from the browser clipboard using the Clipboard API

playwright_handle_dialog

Set up a handler for the next browser dialog (alert, confirm, or prompt). The handler will be called when a dialog appears.

playwright_expect_dialog

Wait for a dialog to appear, validate its message, and handle it. Useful for testing alert/confirm/prompt dialogs.

playwright_drag_to_position

Drag an element to specific coordinates on the page with smooth animation

playwright_get_element_position

Get the position and dimensions of an element on the page

playwright_visual_compare

Compare a screenshot against a baseline image for visual regression testing. Detects pixel differences and generates diff images.

playwright_create_baseline

Create a baseline screenshot for visual regression testing

playwright_batch_visual_compare

Compare multiple screenshots against their baselines in a single operation. Useful for comprehensive visual regression testing.

playwright_run_across_browsers

Execute actions across multiple browsers in parallel. Tests cross-browser compatibility by running the same action in Chromium, Firefox, and WebKit simultaneously.

playwright_cross_browser_screenshot

Capture and compare screenshots across multiple browsers. Automatically detects visual differences between browsers.

playwright_emulate_device

Emulate a mobile device with specific viewport, user agent, and capabilities. Supports all Playwright device presets including iPhone, iPad, Android devices, etc.

playwright_list_devices

List all available device emulations supported by Playwright. Returns device names with their viewport sizes.

playwright_collect_locators

Collect all visible, unique locators from the current page and generate a Page Object Model (POM) file. Automatically identifies the best locator strategy for each element (data-test attributes, role-based, ID, CSS). Use this when you need to create page objects or collect element selectors.

create_browser_session

Create a new browser session with isolated context. Enables parallel browser execution and multi-user scenarios.

list_browser_sessions

List all active browser sessions with their details including session ID, browser type, current URL, and activity status.

close_browser_session

Close a specific browser session and cleanup all resources including browser instance, pages, and context.

switch_browser_session

Switch the current active session to a different browser session. All subsequent browser operations will use the switched session.

get_session_info

Get detailed information about a specific browser session including uptime, current URL, console logs, and activity metrics.

cleanup_idle_sessions

Automatically close idle browser sessions that haven't been accessed for a specified time. Helps manage resources and prevent memory leaks.

playwright_wait_smart

Intelligent wait for element with multiple conditions (visibility, stability, interactive state)

playwright_wait_network_idle

Wait for network activity to become idle

playwright_wait_element_count

Wait for specific number of elements matching a selector

playwright_wait_attribute

Wait for element attribute to have specific value

playwright_wait_element_hidden

Wait for element to become hidden or disappear

playwright_wait_url

Wait for URL to match a specific pattern

playwright_check_accessibility

Run comprehensive accessibility scan using axe-core for WCAG compliance

playwright_get_aria_snapshot

Get ARIA accessibility tree snapshot of the page or element

playwright_check_contrast

Check color contrast ratio for WCAG compliance

playwright_check_keyboard_navigation

Check keyboard navigation and focusable elements on the page

playwright_start_coverage

Start collecting JavaScript and CSS code coverage

playwright_get_coverage

Stop coverage collection and get results with detailed statistics

playwright_generate_coverage_report

Generate coverage report in various formats from coverage data file

playwright_compare_coverage

Compare coverage between baseline and current test runs

playwright_run_tests_parallel

Execute multiple test scenarios in parallel with configurable concurrency

playwright_run_cross_browser

Run a test across multiple browsers (chromium, firefox, webkit) in parallel

playwright_ai_visual_compare

AI-powered visual regression testing that intelligently ignores dynamic content like ads and timestamps

playwright_batch_ai_visual_compare

Run batch AI visual comparisons across multiple pages

playwright_get_resource_usage

Get current resource usage statistics (browsers, sessions, memory, queue)

playwright_update_resource_limits

Update resource limits and throttling configuration

playwright_recover_session

Recover a persisted session from disk after crash or restart

playwright_recover_all_sessions

Recover all persisted sessions from disk

playwright_get_persistence_stats

Get statistics about persisted sessions on disk

playwright_extract_pdf_text

Extract text content from a PDF file. Useful for verifying PDF generation and content validation.

playwright_validate_pdf_content

Validate that a PDF contains specific text content. Returns success if text is found, error if not.

playwright_count_pdf_pages

Count the number of pages in a PDF file and get PDF metadata information.

playwright_download_and_extract_pdf

Download a PDF file by clicking a trigger element and optionally extract its text content. Useful for testing PDF download functionality.

playwright_assert_element_state

Assert element state (visible, hidden, enabled, disabled, editable, readonly, checked, unchecked)

playwright_assert_element_count

Assert exact count of elements matching a selector with flexible comparison

playwright_assert_text_content

Assert element text content with fuzzy search support (exact, contains, startsWith, endsWith, regex)

playwright_assert_attribute

Assert element attribute value with flexible matching

playwright_assert_css_property

Assert CSS property value using computed styles

playwright_assert_request_made

Assert that a network request was made matching URL pattern and optional method

playwright_start_video_recording

Start recording video of browser session. Useful for test debugging and documentation.

playwright_stop_video_recording

Stop video recording and save the file with optional annotations

playwright_add_video_annotation

Add a timestamped annotation/marker to the current video recording

playwright_configure_video_settings

Configure default video recording settings (output directory, quality, FPS)

playwright_get_video_status

Get current video recording status including duration and annotation count

// known CVEs in dependencies3 high2 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@1.11.1GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

high@modelcontextprotocol/sdk@1.11.1GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.11.1GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

lowmailparser@3.9.0GHSA-7gmj-h9xc-mcxc

mailparser vulnerable to Cross-site Scripting

lowuuid@11.1.0GHSA-w5hq-g745-h8pq

uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configCHROME_EXECUTABLE_PATH
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

91/91 tools missing one or more hints — start_codegen_session (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); end_codegen_session (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_codegen_session (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +88 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

License file

No license file

Add a LICENSE file (MIT, Apache-2.0, etc.).

Tests exist

No test files found

Add tests that exercise each declared tool.

Shell command execution

1 child_process call — runs shell commands

Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.

Production dependencies are patched

0 critical, 3 high severity in production deps — @modelcontextprotocol/sdk@1.11.1 (high), @modelcontextprotocol/sdk@1.11.1 (high)

Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.

Dependency freshness

2/13 production deps stale: imap-simple@2022-06-19 (4.1y), pngjs@2023-02-20 (3.5y)

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/tayyabakmal1/runautomation-mcpserver?variant=verified)](https://m8ven.ai/mcp/tayyabakmal1/runautomation-mcpserver)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 80a5637cd817e0ea3dd8ab3268fcccb4c721b960
code hash: c89aa055b4fb5715c66034caee8f6cf5e5d3a1a5ea22810e8ddca8e3169bff8f
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client