SecurePlaywrightMCP

What it does

SecurePlaywrightMCP is a security-focused reimplementation of the Playwright MCP server. It enables AI agents to automate web browsers while ensuring enterprise-grade isolation through Podman rootless containers, custom seccomp profiles, and SELinux enforcement.

Tools

• navigate: Direct the browser to specific URLs with origin whitelisting.
• evaluate: Execute JavaScript within the browser context.
• capture_screenshot: Take visual snapshots of the current page state.
• intercept_network: Monitor and control network traffic to prevent SSRF.
• manage_cookies: Controlled access to browser storage and session data.

Installation

Deploy using the provided Podman container for maximum isolation:

podman run -d --name secureplaywrightmcp --userns=auto --security-opt label=type:container_runtime_t --security-opt seccomp=/etc/containers/secureplaywrightmcp-seccomp.json --cap-drop=ALL --read-only secureplaywrightmcp:latest

Supported hosts

• Claude Desktop
• VS Code Copilot