sincecutoff.com
← all changes

playwright-mcp restricts browser URLs and file access by default

Introduced 2026-01-09 · score 0.92

HOW TO USE IT

When browsing or uploading with Playwright MCP v0.0.55, keep URLs to `http:`, `https:`, `about:`, or `data:` and upload from workspace roots (or `cwd` if none are configured). If the task requires `file://` or files outside those roots, enable `--allow-unrestricted-file-access` or set `allowUnrestrictedFileAccess: true`.

npx @playwright/mcp@0.0.55 --allow-unrestricted-file-access
{"allowUnrestrictedFileAccess": true}

WHY THIS HELPS

Browse pages and upload files while automating a repository with Playwright MCP.

REQUIREMENTS AND LIMITATIONS

  • Version: v0.0.55
  • --allow-unrestricted-file-access: Allows access to files outside workspace roots and unrestricted `file://` URLs; otherwise file access is restricted to roots (or `cwd` if none are configured), and `file://` navigation is blocked.
  • allowUnrestrictedFileAccess: Boolean config key to opt out of file access restrictions when set to `true`.
  • Prerequisite: Playwright MCP requires Node.js 18 or newer.
  • File uploads through `setInputFiles`, file choosers, and MCP file tools are restricted to workspace root directories, or `cwd` if no roots are configured.
  • Browser navigation and API requests are limited to `http:`, `https:`, `about:`, and `data:` URLs; `file://` is blocked unless unrestricted file access is enabled.

FIRST-PARTY EVIDENCE

Check the installed version and the source before using it. Entry JSON

Report a problem with this card