fetcher-mcp

The server uses Playwright to navigate to arbitrary URLs, which is its core function. It sets `ignoreHTTPSErrors: true` for browser contexts, potentially exposing the client to MITM attacks if fetching from untrusted sources, though this may be a functional choice for broad compatibility in web scraping. However, it disables media resources by default, which is a positive security feature reducing attack surface and improving performance. No 'eval', hardcoded secrets, or obvious malicious patterns are present in the provided source code. Running a full browser engine (Chromium) inherently carries a risk of sandbox escape, but Playwright aims to mitigate this.