microsoft/playwright-mcp v0.0.55

on GitHub

🔐 Security & Safety

• MCP now enforces protocol and filesystem access restrictions by default:
  • Browser navigation and API requests are limited to http:, https:, about:, and data: URLs; file:// is blocked.
  • File uploads (setInputFiles, file choosers, MCP file tools) are restricted to workspace root directories (or cwd if no roots are configured).
• Added --allow-unrestricted-file-access (and allowUnrestrictedFileAccess config) to explicitly opt out, allowing:
  • Access to files outside workspace roots.
  • Navigation and requests to file:// URLs.

📁 Artifacts & Output

• MCP-recorded videos are now saved under outputDir/videos