playwright-stealth-mcp-server 0.0.7 → 0.0.9

package/README.md

@@ -97,6 +97,7 @@ Add to your Claude Desktop config file:
 | `PROXY_PASSWORD`          | Proxy authentication password                                                     | -                             |
 | `PROXY_BYPASS`            | Comma-separated list of hosts to bypass proxy                                     | -                             |
 | `BROWSER_PERMISSIONS`     | Comma-separated list of browser permissions to grant (see below)                  | All permissions               |
+| `IGNORE_HTTPS_ERRORS`     | Ignore HTTPS certificate errors (set to `false` for stricter security)            | `true`                        |
 
 ## Available Tools
 
@@ -277,6 +278,33 @@ The server supports HTTP/HTTPS proxies with optional authentication, making it c
 
 **Note:** When proxy is configured, the server performs a health check on startup to verify the proxy connection works. If the health check fails, the server will exit with an error.
 
+## HTTPS Certificate Errors
+
+By default, the server ignores HTTPS certificate errors (`IGNORE_HTTPS_ERRORS=true`). This is convenient for common automation scenarios:
+
+- **Docker environments** where SSL certificates may not match hostnames
+- **Corporate networks** with MITM proxies that re-sign certificates
+- **Self-signed certificates** in development or staging environments
+- **Residential proxies** that perform HTTPS inspection
+
+To enable strict certificate validation, set `IGNORE_HTTPS_ERRORS=false`:
+
+```json
+{
+  "mcpServers": {
+    "playwright": {
+      "command": "npx",
+      "args": ["-y", "playwright-stealth-mcp-server"],
+      "env": {
+        "IGNORE_HTTPS_ERRORS": "false"
+      }
+    }
+  }
+}
+```
+
+**Security Note:** For production environments where certificate validation is important, set `IGNORE_HTTPS_ERRORS=false` to protect against man-in-the-middle attacks.
+
 ## Browser Permissions
 
 By default, the server grants **all** browser permissions to the browser context. This enables testing of features that require permissions such as:

package/build/index.js

@@ -156,6 +156,11 @@ function validateEnvironment() {
             description: 'Comma-separated list of browser permissions to grant. If not set, ALL permissions are granted.',
             defaultValue: 'all (notifications, geolocation, camera, microphone, clipboard-read, etc.)',
         },
+        {
+            name: 'IGNORE_HTTPS_ERRORS',
+            description: 'Ignore HTTPS certificate errors (true/false). Set to false for stricter security.',
+            defaultValue: 'true',
+        },
     ];
     // Log configuration
     const stealthMode = process.env.STEALTH_MODE === 'true';
@@ -196,6 +201,9 @@ function validateEnvironment() {
     else {
         logInfo('config', 'Browser permissions: all (default)');
     }
+    if (process.env.IGNORE_HTTPS_ERRORS === 'false') {
+        logInfo('config', 'HTTPS certificate validation enabled (strict mode)');
+    }
     // Show optional configuration if DEBUG is set
     if (process.env.DEBUG) {
         console.error('\nOptional environment variables:');
@@ -236,14 +244,17 @@ async function main() {
             process.exit(1);
         }
     }
-    // Step 5: Create server using factory, passing proxy config and permissions
+    // Step 5: Parse IGNORE_HTTPS_ERRORS setting (default: true)
+    const ignoreHttpsErrors = process.env.IGNORE_HTTPS_ERRORS !== 'false';
+    // Step 6: Create server using factory, passing proxy config, permissions, and HTTPS error handling
     const { server, registerHandlers, cleanup } = createMCPServer({
         proxy: proxyConfig,
         permissions: browserPermissions,
+        ignoreHttpsErrors,
     });
-    // Step 6: Register all handlers (tools)
+    // Step 7: Register all handlers (tools)
     await registerHandlers(server);
-    // Step 7: Set up graceful shutdown
+    // Step 8: Set up graceful shutdown
     const handleShutdown = async () => {
         logWarning('shutdown', 'Received shutdown signal, closing browser...');
         await cleanup();
@@ -251,7 +262,7 @@ async function main() {
     };
     process.on('SIGINT', handleShutdown);
     process.on('SIGTERM', handleShutdown);
-    // Step 8: Start server with stdio transport
+    // Step 9: Start server with stdio transport
     const transport = new StdioServerTransport();
     await server.connect(transport);
     const stealthMode = process.env.STEALTH_MODE === 'true';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "playwright-stealth-mcp-server",
-  "version": "0.0.7",
+  "version": "0.0.9",
   "description": "Local implementation of Playwright Stealth MCP server",
   "mcpName": "com.pulsemcp.servers/playwright-stealth",
   "main": "build/index.js",

package/shared/server.d.ts

@@ -78,6 +78,12 @@ export interface CreateMCPServerOptions {
     proxy?: ProxyConfig;
     /** Browser permissions to grant. If undefined, all permissions are granted. */
     permissions?: BrowserPermission[];
+    /**
+     * Whether to ignore HTTPS errors (certificate validation failures).
+     * Defaults to true for convenience (Docker, staging environments, self-signed certs).
+     * Set to false for strict certificate validation in production environments.
+     */
+    ignoreHttpsErrors?: boolean;
 }
 export declare function createMCPServer(options?: CreateMCPServerOptions): {
     server: Server<{

package/shared/server.js

@@ -72,9 +72,9 @@ export class PlaywrightClient {
             // In stealth mode, let the plugin's user-agent-override handle the user agent
             // In non-stealth mode, use the provided user agent if any
             userAgent: this.config.stealthMode ? undefined : this.config.stealthUserAgent,
-            // Ignore HTTPS errors when using proxy (required for residential proxies like BrightData
-            // which perform HTTPS inspection and may re-sign certificates)
-            ignoreHTTPSErrors: !!this.config.proxy,
+            // Ignore HTTPS errors by default (convenient for Docker, staging environments, self-signed certs)
+            // Set IGNORE_HTTPS_ERRORS=false for strict certificate validation in production
+            ignoreHTTPSErrors: this.config.ignoreHttpsErrors ?? true,
         });
         // Grant browser permissions (defaults to all permissions if not specified)
         const permissionsToGrant = this.config.permissions ?? [...ALL_BROWSER_PERMISSIONS];
@@ -211,7 +211,7 @@ export function createMCPServer(options) {
     const stealthMode = process.env.STEALTH_MODE === 'true';
     const server = new Server({
         name: 'playwright-stealth-mcp-server',
-        version: '0.0.7',
+        version: '0.0.9',
     }, {
         capabilities: {
             tools: {},
@@ -242,6 +242,7 @@ export function createMCPServer(options) {
                     stealthMaskLinux,
                     stealthLocale,
                     permissions: options?.permissions,
+                    ignoreHttpsErrors: options?.ignoreHttpsErrors,
                 });
                 return activeClient;
             });

package/shared/tools.js

@@ -88,7 +88,11 @@ Returns information about the current browser session including the URL, page ti
 **Returns:**
 - \`currentUrl\`: Current page URL
 - \`title\`: Current page title
-- \`isOpen\`: Whether a browser session is active`;
+- \`isOpen\`: Whether a browser session is active
+- \`stealthMode\`: Whether stealth mode is enabled
+- \`headless\`: Whether running in headless mode
+- \`proxyEnabled\`: Whether a proxy is configured
+- \`ignoreHttpsErrors\`: Whether HTTPS certificate errors are being ignored`;
 const CLOSE_DESCRIPTION = `Close the browser session.
 
 Shuts down the browser and clears all state. A new browser will be launched on the next execute call.`;
@@ -270,6 +274,7 @@ export function createRegisterTools(clientFactory) {
                                     stealthMode: config.stealthMode,
                                     headless: config.headless,
                                     proxyEnabled: !!config.proxy,
+                                    ignoreHttpsErrors: config.ignoreHttpsErrors ?? true,
                                 }, null, 2),
                             },
                         ],

package/shared/types.d.ts

@@ -39,6 +39,12 @@ export interface PlaywrightConfig {
      * Use BROWSER_PERMISSIONS env var to constrain permissions (comma-separated list).
      */
     permissions?: BrowserPermission[];
+    /**
+     * Whether to ignore HTTPS errors (certificate validation failures).
+     * Defaults to true for convenience (Docker, staging environments, self-signed certs).
+     * Set to false for strict certificate validation in production environments.
+     */
+    ignoreHttpsErrors?: boolean;
 }
 export interface ExecuteResult {
     success: boolean;