sincecutoff.com
← all changes

playwright-mcp redacts named URL parameters

Introduced 2026-10-31 · score 0.92

HOW TO USE IT

When tool responses include URLs with runtime session or grant values, configure named query and fragment parameter redaction. Use `--redact-url-params=access_token,code`; values are replaced with `<redacted>`.

npx @playwright/mcp@0.0.84 --redact-url-params=access_token,code

WHY THIS HELPS

Inspect tool responses containing URLs with runtime session or grant values.

REQUIREMENTS AND LIMITATIONS

  • Version: v0.0.84
  • --redact-url-params <names>: Comma-separated query and fragment parameter names whose values are replaced with `<redacted>` in tool responses.
  • redactUrlParams: Config array of query and fragment parameter names whose values are replaced in tool responses.
  • PLAYWRIGHT_MCP_REDACT_URL_PARAMS: Environment variable for the comma-separated parameter names.
  • This is a convenience, not a security feature.

FIRST-PARTY EVIDENCE

Check the installed version and the source before using it. Entry JSON

Report a problem with this card