High-risk tools in Fast Playwright MCP

High severity Fast Playwright MCP MCP Server 21 of 34 tools

21 of the 34 tools in Fast Playwright MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.

Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.

Tools at high risk

browser_batch_execute Execute

Execute multiple browser actions in sequence. PREFER over individual tools for 2+ operations.
browser_navigate Execute

Navigate to a URL
browser_navigate_back Execute

Go back to previous page
browser_navigate_forward Execute

Go forward to next page
browser_tab_new Execute

Open a new tab
browser_wait_for Execute

Wait for text to appear or disappear or a specified time to pass
browser_click Execute

Perform click on web page
browser_drag Execute

Perform drag and drop between two elements
browser_evaluate Execute

Evaluate JavaScript expression on page or element and return result
browser_handle_dialog Execute

Handle a dialog (alert, confirm, prompt)
browser_hover Execute

Hover over element on page
browser_install Execute

Install the browser specified in the config. Call this if you get an error about the browser not being installed.
browser_mouse_click_xy Execute

Click at specific coordinates
browser_mouse_drag_xy Execute

Drag from one coordinate to another
browser_mouse_move_xy Execute

Move mouse to specific coordinates.Requires --caps=vision.x,y:coordinates.expectation:{includeSnapshot:false} for simple move,true to see hover effects.PREFER element-based inte...
browser_perform Execute

Perform a task with the browser. It can click, type, export, capture screenshot, drag, hover, select options, etc.
browser_press_key Execute

Press a key on the keyboard
browser_resize Execute

Resize the browser window
browser_select_option Execute

Select option in dropdown
browser_tab_select Execute

Select a tab by index
browser_type Execute

Type text into editable element

Attacks that target this class

High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.

Destructive Action Autonomy
Runaway Tool Loops
Prompt Injection via Tool Results

High-risk tools in Fast Playwright MCP

Tools at high risk

Attacks that target this class

More on Fast Playwright MCP

Enforce policy on every Fast Playwright MCP tool call.