playwright-mcp redacts named URL parameters
Introduced 2026-10-31 · score 0.92
HOW TO USE IT
When tool responses include URLs with runtime session or grant values, configure named query and fragment parameter redaction. Use `--redact-url-params=access_token,code`; values are replaced with `<redacted>`.
npx @playwright/mcp@0.0.84 --redact-url-params=access_token,codeWHY THIS HELPS
Inspect tool responses containing URLs with runtime session or grant values.
REQUIREMENTS AND LIMITATIONS
- Version: v0.0.84
- --redact-url-params <names>: Comma-separated query and fragment parameter names whose values are replaced with `<redacted>` in tool responses.
- redactUrlParams: Config array of query and fragment parameter names whose values are replaced in tool responses.
- PLAYWRIGHT_MCP_REDACT_URL_PARAMS: Environment variable for the comma-separated parameter names.
- This is a convenience, not a security feature.
FIRST-PARTY EVIDENCE
- https://github.com/microsoft/playwright-mcp/releases/tag/v0.0.84
- https://github.com/microsoft/playwright-mcp/blob/main/README.md
Check the installed version and the source before using it. Entry JSON