Back to Home
xtr-dev icon

mcp-playwright-novnc

Verified Safe

by xtr-dev

Overview

Automated browser interaction (Playwright) with a virtual display (noVNC) for Model Context Protocol (MCP) clients.

Installation

Run Command
docker compose up -d playwright-display

Security Notes

The server uses Playwright's `--no-sandbox` flag for browser launch, which is a known security risk when navigating to untrusted websites as it disables a crucial browser security feature. Ports 3080 (MCP SSE) and 6080 (noVNC) are exposed; they should be firewalled if the service is deployed to an untrusted network. The `mcp-proxy` forwards `stdin` to a configurable SSE endpoint, which could be exploited if `PLAYWRIGHT_SSE_URL` is set to a malicious server, although the default is internal to the Docker network.

Similar Servers

Stats

Interest Score0
Security Score7
Cost ClassMedium
Avg Tokens100
Stars0
Forks0
Last Update2025-12-04

Tags

PlaywrightDockerBrowser AutomationVNCMCP Server