playwright-mcp restricts browser URLs and file access by default
Introduced 2026-01-09 · score 0.92
HOW TO USE IT
When browsing or uploading with Playwright MCP v0.0.55, keep URLs to `http:`, `https:`, `about:`, or `data:` and upload from workspace roots (or `cwd` if none are configured). If the task requires `file://` or files outside those roots, enable `--allow-unrestricted-file-access` or set `allowUnrestrictedFileAccess: true`.
npx @playwright/mcp@0.0.55 --allow-unrestricted-file-access{"allowUnrestrictedFileAccess": true}WHY THIS HELPS
Browse pages and upload files while automating a repository with Playwright MCP.
REQUIREMENTS AND LIMITATIONS
- Version: v0.0.55
- --allow-unrestricted-file-access: Allows access to files outside workspace roots and unrestricted `file://` URLs; otherwise file access is restricted to roots (or `cwd` if none are configured), and `file://` navigation is blocked.
- allowUnrestrictedFileAccess: Boolean config key to opt out of file access restrictions when set to `true`.
- Prerequisite: Playwright MCP requires Node.js 18 or newer.
- File uploads through `setInputFiles`, file choosers, and MCP file tools are restricted to workspace root directories, or `cwd` if no roots are configured.
- Browser navigation and API requests are limited to `http:`, `https:`, `about:`, and `data:` URLs; `file://` is blocked unless unrestricted file access is enabled.
FIRST-PARTY EVIDENCE
- https://github.com/microsoft/playwright-mcp/releases/tag/v0.0.55
- https://github.com/microsoft/playwright-mcp/blob/v0.0.55/README.md
Check the installed version and the source before using it. Entry JSON