Playwright MCP

by microsoft• 39k•• Scanned•Claim this listing•Request removal
Browser Automationmcpplaywright

Playwright MCP server

Playwright MCP is an open-source mcp server by microsoft, written mainly in TypeScript, with 38,930 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 31, 2026. The latest npm release is @playwright/mcp 0.0.85, published Nov 9, 2026, with 10,815,609 downloads last week.

Scan summary: scanned Nov 5, 2026 at commit 50b004f. Seen able to run shell commands, run dynamic code, read environment and secrets, control a web browser. 1 published advisory for its package. Scan policy

aboutREADMEsecurityreviews

How to install Playwright MCP

Built from the start command in the project's README: npx @playwright/mcp@latest. Check the README for required keys or settings.

Claude Code · Terminal
claude mcp add playwright-mcp -- npx @playwright/mcp@latest
Claude Desktop · claude_desktop_config.json
{
  "mcpServers": {
    "playwright-mcp": {
      "command": "npx",
      "args": [
        "@playwright/mcp@latest"
      ]
    }
  }
}
Cursor · .cursor/mcp.json
{
  "mcpServers": {
    "playwright-mcp": {
      "command": "npx",
      "args": [
        "@playwright/mcp@latest"
      ]
    }
  }
}
VS Code · Terminal
code --add-mcp '{"name":"playwright-mcp","command":"npx","args":["@playwright/mcp@latest"]}'

What Playwright MCP can touch

  • Run shell commandsFound in the code by our scan
  • Run dynamic codeListed as a tool: browser_evaluate
  • Read or write filesNot seen in this scan
  • Read environment and secretsFound in the code by our scan
  • Control a web browserListed as a tool: browser_close
  • Connect to databasesNot seen in this scan
  • Read or send messagesNot seen in this scan
  • Touch money or tradingNot seen in this scan
  • Connect to the internetNo connections seen while running

"Not seen" means our checks did not find it, and the tool may still do it. Covers commit 50b004f, Nov 5, 2026. See the scan policy.

Before you install Playwright MCP

AgenticMart scanned Playwright MCP on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What it can access

  • An MCP server is a program your AI app starts and talks to. A local one runs with your user's permissions: it can see the files, environment variables and network your account can.
  • Based on its description and topics, it likely needs to control a web browser (visit sites, fill in and submit forms).

Before you install

  1. Run it in a separate browser profile without your logged-in accounts.
  2. Pin the version you reviewed instead of always installing the latest release.
  3. Read the tool list or scripts before the first run, and keep approval prompts on for actions that write, send or delete.
  • Maintained by microsoft on GitHub, 38,930 stars and 3,359 forks. Popularity is not proof of safety.
  • Last code change: Oct 31, 2026.
  • Open-source license: Apache-2.0.
Read the scan reportWhat our scan checks

Published advisories for @playwright/mcp

From the OSV database, for this npm package. Check that your installed version is past any fix.

  • CVE-2025-9611Microsoft Playwright MCP Server vulnerable to DNS Rebinding Attack; Allows Attackers Access to All Server ToolsFixed in 0.0.40.

Tools Playwright MCP exposes (25)

Listed by the server itself during our scan of commit 50b004f.

  • browser_close

    Close the page

  • browser_resize

    Resize the browser window

  • browser_console_messages

    Returns all console messages

  • browser_handle_dialog

    Handle a dialog

  • browser_emulate_media

    Emulate CSS media features for the page, for example switch between the light and dark color scheme. Omitted parameters are left unchanged; null clears an override.

  • browser_evaluate

    Evaluate JavaScript expression on page or element

  • browser_file_upload

    Upload one or multiple files

  • browser_drop

    Drop files or MIME-typed data onto an element, as if dragged from outside the page. At least one of "paths" or "data" must be provided.

  • browser_find

    Search the accessibility snapshot of the current page for text or a regular expression. Returns matching snapshot nodes with a few lines of surrounding context (like search snippets), each shown under its path from the root of the tree, which is cheaper than capturing the whole snapshot when you onl

  • browser_fill_form

    Fill multiple form fields

  • browser_press_key

    Press a key on the keyboard

  • browser_type

    Type text into editable element

  • browser_navigate

    Navigate to a URL

  • browser_navigate_back

    Go back to the previous page in the history

  • browser_network_requests

    Returns a numbered list of network requests since loading the page. Use browser_network_request with the number to get full details.

  • browser_network_request

    Returns full details (headers and body) of a single network request, or a single part if `part` is set. Use the number from browser_network_requests.

  • browser_run_code_unsafe

    Run a Playwright code snippet. Unsafe: executes arbitrary JavaScript in the Playwright server process and is RCE-equivalent.

  • browser_take_screenshot

    Take a screenshot of the current page. You can't perform actions based on the screenshot, use browser_snapshot for actions.

  • browser_snapshot

    Capture accessibility snapshot of the current page, this is better than screenshot

  • browser_click

    Perform click on a web page

  • browser_drag

    Perform drag and drop between two elements

  • browser_hover

    Hover over element on page

  • browser_select_option

    Select an option in a dropdown

  • browser_tabs

    List, create, close, or select a browser tab.

  • browser_wait_for

    Wait for text to appear or disappear or a specified time to pass. When both text and textGone are provided, waits for the first one to happen

Playwright MCP is an open-source mcp server by microsoft, written mainly in TypeScript. Playwright MCP server

At a glance

Stars
39k
Forks
3.4k
Language
TypeScript
License
Apache-2.0
Created
Mar 2025
Last update
Oct 31, 2026
Type
MCP Server
Price
Free

Topics

mcpplaywright

Questions about Playwright MCP

What is Playwright MCP?

Playwright MCP server

Who maintains Playwright MCP?

Playwright MCP is maintained by microsoft on GitHub (microsoft/playwright-mcp). AgenticMart lists it from public repository data.

Is Playwright MCP safe to use?

AgenticMart scanned Playwright MCP on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What license does Playwright MCP use?

It is published under the Apache-2.0 license.

Playwright MCP alternatives

View more →

Similar mcp servers in Browser Automation, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Playwright MCP (this page)
microsoft
39kApache-2.0Oct 31, 2026Scanned, no flagged issues
Chrome Devtools MCP
ChromeDevTools
55kApache-2.0Nov 1, 2026Scanned, no flagged issues
MCP Chrome
hangwin
13kMITJan 6, 2026Scanned, no flagged issues
Browser Tools MCP
AgentDeskAI
7.3kMITOct 28, 2026Scanned, no flagged issues
MCP
BrowserMCP
7.3kApache-2.0Oct 30, 2026Scanned, no flagged issues
MCP Playwright
executeautomation
5.7kMITDec 13, 2025Scanned, no flagged issues