puppeteer-mcp-server

The `puppeteer_evaluate` tool allows executing arbitrary JavaScript code in the browser, which is an inherent security risk, even with input validation. The `allowDangerous` flag in `puppeteer_navigate` can also expose the browser to less secure configurations if explicitly enabled. However, the project implements robust security measures including API key authentication, URL, script, and selector safety validations, Helmet.js, CORS, rate limiting, and runs Puppeteer in a sandboxed, non-root Docker environment. Binary image serving is not authenticated but relies on temporary, UUID-based URLs and automatic cleanup.