browser_cookie_get

What browser_cookie_get does on Playwright

AI agents call browser_cookie_get to retrieve information from Playwright without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Why browser_cookie_get is rated Low

Cookie retrieval is a Read operation—it queries and returns data without side effects. However, severity is elevated to 'medium' because cookies often contain sensitive session tokens, authentication credentials, or tracking identifiers that could be exposed if an agent misuses this tool to exfiltrate authentication material or personal data.

From the tool's definition Tool name 'browser_cookie_get' and sibling tools including 'browser_cookie_list' and 'browser_cookie_set' indicate read access to browser cookies. The description is empty, but the function name clearly indicates retrieval of cookie data without modification.

The rule that runs browser_cookie_get safely

PolicyLayer is an MCP gateway: it sits between your AI agents and Playwright, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For browser_cookie_get, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "browser_cookie_get": {}
  }
}

Questions about browser_cookie_get