Is @playwright/mcp safe?
1 fixed advisory Facts from the mcp-audit registry about the npm package @playwright/mcp. The same data is served as JSON.
Check it from your terminal
mcp-audit vet @playwright/mcpOffline: it uses the registry bundled with mcp-audit. mcp-audit update-registry fetches the newest one.
Registry facts
| Maintainer | Microsoft |
|---|---|
| Verified publisher | no |
| Entry last checked | 2026-08-20 |
| Hash pins | none recorded |
| Provenance expected | no |
| Repository | https://github.com/microsoft/playwright-mcp |
Recorded advisories 1
| Advisory | CVSS | Summary | Fixed in |
|---|---|---|---|
| CVE-2025-9611 | not recorded | Microsoft Playwright MCP Server vulnerable to DNS Rebinding Attack; Allows Attackers Access to All Server Tools | 0.0.40 |
Advisories with no recorded fix are listed first. CVE IDs link to NVD, GHSA IDs to GitHub and other IDs to OSV. A fixed advisory affects only versions below its fix; vet exits 1 only for advisories with no fix.
What it can do
- It can control a web browser.
- It can make outbound network requests.
Capability tags come from the registry. mcp-audit uses them to find dangerous combinations with your other servers.
Check how you run it
This page describes the public package. What matters is your setup: which version you pin, which secrets you pass, and which other servers sit next to it.
mcp-audit checkBadge for your README
mcp-audit1 fixed CVE
Preview drawn by this page. The real badge is rendered by shields.io from this JSON and updates when the registry does.
[](https://mcp-audit.dev/servers/npm/at-playwright-mcp/)