get_local_storage

What get_local_storage does on Playwright MCP Server

AI agents call get_local_storage to retrieve information from Playwright MCP Server without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why get_local_storage is rated Low

Retrieving localStorage data is a non-destructive, non-modifying operation that only queries existing state. Within the Playwright context of webpage interaction, this is a data retrieval action with minimal security risk unless the stored data itself contains sensitive information, which is a concern of the calling context rather than the tool's capability. Low severity due to no side effects or mutations.

From the tool's definition The tool name is 'get_local_storage', which retrieves stored browser data. The empty description prevents detailed assessment, but the name clearly indicates a read operation—fetching (not modifying) localStorage values from a web page.

The rule that runs get_local_storage safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Playwright MCP Server, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For get_local_storage, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "get_local_storage": {}
  }
}

Questions about get_local_storage