Playwright MCP
37,713 starsMicrosoft's official MCP server: drives a real browser with Playwright, understanding pages through the accessibility tree instead of screenshots. Tools click, type, navigate and snapshot; a persistent browser profile is the default, --isolated switches to in-memory sessions, and --port serves the SSE transport.
- First published：2025-03-21
- data as of：
- 2026-09-30
- Licence：
- Apache-2.0
- Transport：
- stdio / sse
- Primitives exposed：
- tools
What it can touch
Controls a real browser: visits any URL, clicks, fills forms, uploads and downloads files (into a managed directory), and reads full page content. The persistent profile stores cookies and login state on disk; it can also attach to your existing signed-in browser.
Risk
The browser is a first-class prompt-injection surface: every visited page can try to instruct the model. With a persistent profile or an attached signed-in browser, the agent acts with your logged-in identity — it can click and submit inside your bank, mailbox and social accounts. An injected agent can transfer money, send mail or delete data while wearing your sessions.
Install prompt
從官方倉庫 README 取得你所用客戶端的設定片段（以 npx 啟動 @playwright/mcp@latest），加進客戶端的 MCP 設定檔後重啟客戶端。測試用途建議加 --isolated 參數，避免使用會保存登入狀態的持久 profile。Paste this to your agent. It deliberately contains no tool subcommands — check the tool's official docs for commands.