{
  "slug": "playwright-mcp-redacts-named-url-parameters-3f7d006e5e67",
  "title": "playwright-mcp redacts named URL parameters",
  "tools": [
    "playwright-mcp"
  ],
  "tags": [
    "agent"
  ],
  "introduced_at": "2026-10-31T15:20:06.000Z",
  "announced_at": "2026-10-31T15:20:06.000Z",
  "effective_at": null,
  "date_basis": "source-publication",
  "status": "unknown",
  "how": {
    "incantation": "When tool responses include URLs with runtime session or grant values, configure named query and fragment parameter redaction. Use `--redact-url-params=access_token,code`; values are replaced with `<redacted>`.",
    "examples": [
      "npx @playwright/mcp@0.0.84 --redact-url-params=access_token,code"
    ],
    "gotchas": [
      "Version: v0.0.84",
      "--redact-url-params <names>: Comma-separated query and fragment parameter names whose values are replaced with `<redacted>` in tool responses.",
      "redactUrlParams: Config array of query and fragment parameter names whose values are replaced in tool responses.",
      "PLAYWRIGHT_MCP_REDACT_URL_PARAMS: Environment variable for the comma-separated parameter names.",
      "This is a convenience, not a security feature."
    ]
  },
  "why_it_matters": "Inspect tool responses containing URLs with runtime session or grant values.",
  "sources": [
    "https://github.com/microsoft/playwright-mcp/releases/tag/v0.0.84",
    "https://github.com/microsoft/playwright-mcp/blob/main/README.md"
  ],
  "rank": 0.92027,
  "review_state": "approved",
  "provenance": {
    "run_id": "daily-20261031-20",
    "verdict_id": "daily-20261031-20:daily-20261031-20-4ed16df91a2ae7c3-1:gate",
    "evidence_hash": "8105ef3df07afd3c61abbda7767913a1538413773f1aea513ea00d14ef83c867"
  }
}