Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

io.github.microsoft/playwright-mcp

NPM · @PLAYWRIGHT/MCP · SCANNED AUG 3

Playwright Tools for MCP

Available components

−13 this week 78 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 1 of 3 dependencies flagged as unhealthy (1 deprecated). View diagnostics → Partial
Provenance & Transparency97
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to microsoft/playwright-mcp). View diagnostics → Pass
  • Clear OSI-approved license (Apache-2.0).Pass
  • Actively maintained (last published 0 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability70
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 2034 tokens (~84/item across 24 items; 24 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @playwright/mcp

# add to Claude Code
claude mcp add microsoft-playwright-mcp -- npx -y @playwright/mcp
# add to Codex CLI
codex mcp add microsoft-playwright-mcp -- npx -y @playwright/mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "microsoft-playwright-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@playwright/mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add microsoft-playwright-mcp --command npx --arg -y --arg @playwright/mcp
# ~/.hermes/config.yaml
mcp_servers:
  microsoft-playwright-mcp:
    command: "npx"
    args: ["-y", "@playwright/mcp"]
// mcp.json
{
  "mcpServers": {
    "microsoft-playwright-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@playwright/mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Aug 26 +15
    • Malware scan: unverified → pass security
    • Dependency health: 0.90 → 0.80 functional
  • 31 Jul 26 −10
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 −18
    • Malware scan: pass → unverified security
  • 27 Jul 26 +32
    • Tool coverage: unverified → 100 functional
    • First check of Schema quality: fail functional
    • First check of Schema quality: pass functional
    • First check of Schema quality: good functional
    • First check of Tool coverage: 100 functional
  • 26 Jul 26 59

    First indexed and scored.

    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@playwright/[email protected]

Provenance verified

Ecosystem: npm · Outcome: verified

Reason: verified

Source repo:
microsoft/playwright-mcp
Certificate issuer:
https://token.actions.githubusercontent.com
Certificate SAN:
https://github.com/microsoft/playwright-mcp/.github/workflows/publish.yml@refs/tags/v0.0.78
Rekor log index:
2130879440
Predicate type:
https://slsa.dev/provenance/v1
Subject digest:
sha512:5cb4d4780ea610df6c43e849e1d7c6f042240dbc52d0add3adcd91064509b9fd364e013615044d4ccb6afda25f87244c20db1197f61b738b317162ed1
Discovery method:
attestation_endpoint
Dependencies 3 packages

3 packages in the resolved dependency tree · 1 deprecated · 1 stale.

MCP tools — 24 exposed · ~2,034 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
browser_click ~100

Perform click on a web page

NameTypeReqDescription
buttonstringButton to click, defaults to left
doubleClickbooleanWhether to perform a double click instead of a single click
elementstringHuman-readable element description used to obtain permission to interact with the element
modifiersarrayModifier keys to press
targetstringyesExact target element reference from the page snapshot, or a unique element selector

No output schema declared.

No examples provided.

browser_close ~12

Close the page

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

browser_console_messages ~95

Returns all console messages

NameTypeReqDescription
allbooleanReturn all console messages since the beginning of the session, not just since the last navigation. Defaults to false.
filenamestringFilename to save the console messages to. If not provided, messages are returned as text.
levelstringyesLevel of the console messages to return. Each level includes the messages of more severe levels. Defaults to "info".

No output schema declared.

No examples provided.

browser_drag ~106

Perform drag and drop between two elements

NameTypeReqDescription
endElementstringHuman-readable target element description used to obtain the permission to interact with the element
endTargetstringyesExact target element reference from the page snapshot, or a unique element selector
startElementstringHuman-readable source element description used to obtain the permission to interact with the element
startTargetstringyesExact target element reference from the page snapshot, or a unique element selector

No output schema declared.

No examples provided.

browser_drop ~142

Drop files or MIME-typed data onto an element, as if dragged from outside the page. At least one of "paths" or "data" must be provided.

NameTypeReqDescription
dataobjectData to drop, as a map of MIME type to string value (e.g. {"text/plain": "hello", "text/uri-list": "https://example.com"}).
elementstringHuman-readable element description used to obtain permission to interact with the element
pathsarrayAbsolute paths to files to drop onto the element.
targetstringyesExact target element reference from the page snapshot, or a unique element selector

No output schema declared.

No examples provided.

browser_evaluate ~110

Evaluate JavaScript expression on page or element

NameTypeReqDescription
elementstringHuman-readable element description used to obtain permission to interact with the element
filenamestringFilename to save the result to. If not provided, result is returned as text.
functionstringyes() => { /* code */ } or (element) => { /* code */ } when element is provided
targetstringExact target element reference from the page snapshot, or a unique element selector

No output schema declared.

No examples provided.

browser_file_upload ~46

Upload one or multiple files

NameTypeReqDescription
pathsarrayThe absolute paths to the files to upload. Can be single file or multiple files. If omitted, file chooser is cancelled.

No output schema declared.

No examples provided.

browser_fill_form ~25

Fill multiple form fields

NameTypeReqDescription
fieldsarrayyesFields to fill in

No output schema declared.

No examples provided.

browser_find ~156

Search the accessibility snapshot of the current page for text or a regular expression. Returns matching snapshot nodes with a few lines of surrounding context (like search snippets), each shown under its path from the root of the tree, which is cheaper than capturing the whole snapshot when you only need to locate an element and its ref.

NameTypeReqDescription
regexstringRegular expression to search for in the page snapshot. Matching is case-sensitive by default; wrap the pattern in slashes to add flags, e.g. "/error/i" for case-insensitive. Provide either text or re…
textstringPlain text to search for in the page snapshot (case-insensitive substring match). Provide either text or regex, not both.

No output schema declared.

No examples provided.

browser_handle_dialog ~44

Handle a dialog

NameTypeReqDescription
acceptbooleanyesWhether to accept the dialog.
promptTextstringThe text of the prompt in case of a prompt dialog.

No output schema declared.

No examples provided.

browser_hover ~55

Hover over element on page

NameTypeReqDescription
elementstringHuman-readable element description used to obtain permission to interact with the element
targetstringyesExact target element reference from the page snapshot, or a unique element selector

No output schema declared.

No examples provided.

browser_navigate ~26

Navigate to a URL

NameTypeReqDescription
urlstringyesThe URL to navigate to

No output schema declared.

No examples provided.

browser_navigate_back ~20

Go back to the previous page in the history

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

browser_network_request ~107

Returns full details (headers and body) of a single network request, or a single part if `part` is set. Use the number from browser_network_requests.

NameTypeReqDescription
filenamestringFilename to save the result to. If not provided, output is returned as text.
indexintegeryes1-based index of the request, as printed by browser_network_requests.
partstringReturn only this part of the request. Omit to return full details.

No output schema declared.

No examples provided.

browser_network_requests ~106

Returns a numbered list of network requests since loading the page. Use browser_network_request with the number to get full details.

NameTypeReqDescription
filenamestringFilename to save the network requests to. If not provided, requests are returned as text.
filterstringOnly return requests whose URL matches this regexp (e.g. "/api/.*user").
staticbooleanyesWhether to include successful static resources like images, fonts, scripts, etc. Defaults to false.

No output schema declared.

No examples provided.

browser_press_key ~44

Press a key on the keyboard

NameTypeReqDescription
keystringyesName of the key to press or a character to generate, such as `ArrowLeft` or `a`

No output schema declared.

No examples provided.

browser_resize ~37

Resize the browser window

NameTypeReqDescription
heightnumberyesHeight of the browser window
widthnumberyesWidth of the browser window

No output schema declared.

No examples provided.

browser_run_code_unsafe ~134

Run a Playwright code snippet. Unsafe: executes arbitrary JavaScript in the Playwright server process and is RCE-equivalent.

NameTypeReqDescription
codestringA JavaScript function containing Playwright code to execute. It will be invoked with a single argument, page, which you can use for any page interaction. For example: `async (page) => { await page.ge…
filenamestringLoad code from the specified file. If both code and filename are provided, code will be ignored.

No output schema declared.

No examples provided.

browser_select_option ~82

Select an option in a dropdown

NameTypeReqDescription
elementstringHuman-readable element description used to obtain permission to interact with the element
targetstringyesExact target element reference from the page snapshot, or a unique element selector
valuesarrayyesArray of values to select in the dropdown. This can be a single value or multiple values.

No output schema declared.

No examples provided.

browser_snapshot ~115

Capture accessibility snapshot of the current page, this is better than screenshot

NameTypeReqDescription
boxesbooleanInclude each element's bounding box as [box=x,y,width,height] in the snapshot. Coordinates are viewport-relative, in CSS pixels (Element.getBoundingClientRect)
depthnumberLimit the depth of the snapshot tree
filenamestringSave snapshot to markdown file instead of returning it in the response.
targetstringExact target element reference from the page snapshot, or a unique element selector

No output schema declared.

No examples provided.

browser_tabs ~73

List, create, close, or select a browser tab.

NameTypeReqDescription
actionstringyesOperation to perform
indexnumberTab index, used for close/select. If omitted for close, current tab is closed.
urlstringURL to navigate to in the new tab, used for new.

No output schema declared.

No examples provided.

browser_take_screenshot ~218

Take a screenshot of the current page. You can't perform actions based on the screenshot, use browser_snapshot for actions.

NameTypeReqDescription
elementstringHuman-readable element description used to obtain permission to interact with the element
filenamestringFile name to save the screenshot to. Defaults to `page-{timestamp}.{png|jpeg}` if not specified. Prefer relative file names to stay within the output directory.
fullPagebooleanWhen true, takes a screenshot of the full scrollable page, instead of the currently visible viewport. Cannot be used with element screenshots.
scalestringyesImage resolution scale. "css" produces a screenshot sized in CSS pixels (smaller, consistent across devices). "device" produces a high-resolution screenshot using device pixels (larger, accounts for…
targetstringExact target element reference from the page snapshot, or a unique element selector
typestringyesImage format for the screenshot. Default is png.

No output schema declared.

No examples provided.

browser_type ~118

Type text into editable element

NameTypeReqDescription
elementstringHuman-readable element description used to obtain permission to interact with the element
slowlybooleanWhether to type one character at a time. Useful for triggering key handlers in the page. By default entire text is filled in at once.
submitbooleanWhether to submit entered text (press Enter after)
targetstringyesExact target element reference from the page snapshot, or a unique element selector
textstringyesText to type into the element

No output schema declared.

No examples provided.

browser_wait_for ~63

Wait for text to appear or disappear or a specified time to pass

NameTypeReqDescription
textstringThe text to wait for
textGonestringThe text to wait for to disappear
timenumberThe time to wait in seconds

No output schema declared.

No examples provided.