Skip to content

Browser Automation MCP Server

Playwright MCP

Official Microsoft Playwright MCP server, enabling LLMs to interact with web pages through structured accessibility snapshots

Scan found nothing by microsoft29,036Apache-2.0TypeScriptBeginnerstdio
View on GitHub Install Guide

Install

Claude Code

claude mcp add microsoft-playwright-mcp -- npx -y @playwright/mcp@latest

Safety Report

100% Scan found nothing
Scanned 5 months ago
7 passed
Security
Authentication
details

Local browser instance, no remote auth needed

Pass
CORS Policy
details

stdio transport

N/A
Rate Limiting
details

Browser-level throttling

Info
Known CVEs
details

No public CVEs

Pass
Code Quality
Dependency Audit
details

No known vulnerabilities

Pass
Dangerous Patterns
details

No dangerous code patterns detected

Pass
License
details

Apache-2.0 License

Pass
Code Source
details

Microsoft official repository

Pass
Community
Maintenance Status
details

Active development by Microsoft

Pass

Learn about our security methodology →

Compatibility

Claude CodeFull support
Tested
CursorFull support
Tested
VS CodeFull support
Tested
WindsurfFull support
Tested
Claude DesktopFull support
Tested

Tools Provided (5)

browser_navigate

Navigate to a URL

browser_click

Click an element on the page

browser_fill

Fill a form field

browser_snapshot

Take an accessibility snapshot

browser_take_screenshot

Take a screenshot

Frequently Asked Questions

What is Playwright MCP?

Official Microsoft Playwright MCP server, enabling LLMs to interact with web pages through structured accessibility snapshots

What tools does Playwright MCP provide?

Playwright MCP provides 5 tools including browser_navigate, browser_click, browser_fill, browser_snapshot. Each tool can be called by AI agents to perform specific operations.

Is Playwright MCP safe to use?

We cannot tell you that, and nobody scanning at this scale can. What we did in March 2026 was shallow-clone Playwright MCP and run five keyword searches over its source: auth identifiers, CORS configuration, rate-limit identifiers, the dependency manifest against a hardcoded list of 18 known-vulnerable packages, and unguarded eval/exec calls. None of them matched. A text search cannot follow a variable, judge intent, or tell you what a server does once it is running, so "nothing matched" is not "safe". What the scan does and does not cover is written out at /mcp/security.

What are alternatives to Playwright MCP?

Similar MCP servers include Scrapling MCP Server, Chrome DevTools MCP, MCP Server Browser. Each serves a similar purpose but may differ in features, language, and compatibility.

Similar MCP Servers

Scrapling MCP Server

Scan flagged something
by D4Vinci

Web scraping with stealth HTTP, real browsers, and Cloudflare bypass. CSS selectors supported.

browser automation Python stdio
claude mcp add scrapling -- uvx scrapling
30.2k 6 tools
View

Chrome DevTools MCP

Scan flagged something
by ChromeDevTools

MCP server for Chrome DevTools

browser automation TypeScript stdio
claude mcp add chromedevtools-chrome-devtools-mcp -- npx -y chrome-devtools-mcp
29.4k 29 tools
View

MCP Server Browser

Scan flagged something
by bytedance

Browser automation capabilities using Puppeteer, both support local and remote browser connection.

browser automation TypeScript stdio
28.9k 23 tools
View
Was this helpful?

Free AI writing tools

Check a draft for AI tells, then fix what the check finds.

Stay Updated on MCP Servers

New servers, safety alerts, and install guides — weekly.