EapilSkillMarket/plugins/codex/plugins/mcp-playwright/KEYINFO_MCP_SOURCE.json at fca5c80516d15677a21ee630d8d7573b80e12e2e - EapilSkillMarket - PLAYONES-Gitea

arechen/EapilSkillMarket

Files

T

KeyInfo Bot fca5c80516 Expose only public MCP support in marketplace

Constraint: The public marketplace must not contain internal MCP endpoints, shared keys, project keys, or user-token workflows.

Rejected: Publishing every configured KeyInfo MCP server | internal knowledge, Firecrawl, and Outline servers are not public distribution targets.

Confidence: high

Scope-risk: moderate

Directive: Keep MCP publication behind an explicit allowlist and verify hidden plugin metadata before pushing.

Tested: python scripts/validate_marketplace.py; temporary CODEX_HOME marketplace list/add/remove for mcp-playwright; hidden rg scan for internal MCP URLs and key markers.

Not-tested: Live Playwright MCP browser tool invocation inside a fresh Codex session.

2026-06-12 17:42:38 +08:00

8 lines

159 B

JSON

Raw Blame History

 {
   "id": "playwright",
   "name": "playwright浏览器自动化操作",
   "version": "20260605",
   "keySource": "none",
   "syncedAt": "2026-06-12T09:39:35Z"
 }