Playwright
Official@playwright/mcp · by microsoft
Playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API.
No known CVEs
Apache-2.0 license
Actively maintained
Last commit 0d ago
Works with most clients
Transport: stdio, sse, http
0 tools
Grade F
MCPpedia last refreshed this data
This server has been archived and is no longer actively maintained.
Playwright is an MCP server that playwright is a framework for Web Testing and Automation. It allows testing Chromium, Firefox and WebKit with a single API. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 53/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"playwright": {
"args": [
"@playwright/mcp@latest"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/playwright)
Read me
What Playwright does
Playwright is a framework for web automation and testing. It drives Chromium, Firefox, and WebKit with a single API — in your tests, in your scripts, and as a tool for AI agents.
Test This Server
This server supports HTTP transport. Be the first to test it — help the community know if it works.
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
53/100across 5 weighted dimensions
0255075100
18
10
15
10
−47
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev1 fixed
CVE-2025-9611high · fixed
Microsoft Playwright MCP Server vulnerable to DNS Rebinding Attack; Allows Attackers Access to All Server Tools
Microsoft Playwright MCP Server versions prior to 0.0.40 fails to validate the Origin header on incoming connections. This allows an attacker to perform a DNS rebinding attack via a victim’s web browser and send unauthorized requests to a locally running MCP server, resulting in unintended invocation of MCP tool endpoints.
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Playwright safe to use?
- Playwright has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
- How do I install Playwright?
- Playwright supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What AI clients work with Playwright?
- Playwright is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is Playwright actively maintained?
- Playwright is actively maintained — last commit was 0 days ago. It has 95,152 GitHub stars.
Related
Similar servers
Others in browser / developer-tools
Context797Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors
61.2k 2
G
Mcp Gitlab96MCP server for using the GitLab API
1.9k 12
Supabase MCP Server96Manage Supabase projects — databases, auth, storage, and edge functions
2.9k 4
Chrome Devtools Mcp96Chrome DevTools for coding agents
49.7k 10
MCP Security Weekly
Get CVE alerts and security updates for Playwright and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.