io.github.microsoft/playwright-mcp

Automate browser testing, web interaction, and page data capture with Playwright.

Stars

★ 34,640

Source

Official Registry

Updated

2026-07-09

// securityCaution

Runs locally
Official / curated
Open source
Community-trusted

Summary

This MCP tool has very limited documentation, but it comes from the official registry, is open-source under a Microsoft repository, and appears recently maintained, which are strong trust signals. It is known to execute local code/processes, so code execution and data access warrant caution, but the provided material shows no key requirement, no declared remote egress, and no clear red flags.

CredentialsLow risk

The material explicitly states that no keys or environment variables are required, and there is no sign of token collection, storage, or credential misuse; based on the available information, credential risk is low.

Network egressLow risk

No remote host is declared in the material, and there is no description of sending user data to external services; the current evidence does not indicate a data egress risk.

Code executionCaution

The system check explicitly marks executes-code, indicating the tool can start local processes or perform automation actions. This is a normal capability for this type of MCP tool; it warrants caution because it may drive local browsers/processes, but this alone is not a high-risk red flag.

Data accessCaution

As an MCP tool that performs local automation, it may normally interact with local browser sessions, page content, or related local resources during operation; however, the material does not show requests for system permissions beyond its stated purpose, nor any obvious overreach.

Supply chainLow risk

It comes from the official registry, the repository is under the Microsoft GitHub organization, and the source is open to audit with updates within the last year. Although the README and license information are sparse and community stars are low, the overall provenance is strong and no clear supply-chain red flags are evident.

Recommendations

Run it in an isolated environment and limit access to only the local browser profiles and directories needed for the task.
Before installation, review the GitHub source, release artifacts, and dependency pinning to ensure they match the registry entry.
If used with sensitive web data, use least-privilege accounts and temporary browser profiles.
Monitor the repository for future README, license, and security advisory updates.

Audited by: gpt-5.4 · 2026-06-17

// install

Copy the install command and let the AI configure it · recommended for beginners

Please install the "io.github.microsoft/playwright-mcp" MCP server from askskill:
Run: claude mcp add 'io-github-microsoft-playwright-mcp' -- npx -y @playwright/mcp