OfficialClaude connector: not verified

Playwright MCP server & Claude connector

Does Playwright have an official MCP server or Claude connector?

Official

As of October 2026, Playwright has an official MCP server published by Microsoft (microsoft/playwright-mcp, npm @playwright/mcp). It runs locally on your machine over stdio via npx, needs no account or API key, and drives a real browser. Caveat: the project states it is not a security boundary, and it has no server-wide read-only mode.

Last checked October 18, 2026

Verdict and evidence

What we checked: Playwright MCP
Published by: Microsoft (official)
Runs: Runs locally
Sign-in: None
Stage: Generally available
Plan: Free and open source; requires Node.js and a locally installed browser.

Evidence

microsoft/playwright-mcp README (github.com, seen October 18, 2026)
Playwright MCP Introduction (playwright.dev, seen October 18, 2026)

What an AI can do in Playwright

Read

Read the page as an accessibility snapshotbrowser_snapshot
Take a screenshotbrowser_take_screenshot
List network requestsbrowser_network_requests

Update

Fill multiple form fieldsbrowser_fill_form

Run

Navigate to a URLbrowser_navigate
Click an elementbrowser_click
Evaluate JavaScript on the pagebrowser_evaluate
Run arbitrary Playwright code (described as unsafe, RCE-equivalent)browser_run_code_unsafe

From the publisher’s documentation for the version we checked. Not every tool is listed.

Setup

Claude Code

Add the server with the Claude Code CLI.

claude mcp add playwright npx @playwright/mcp@latest

Source

Claude (claude.ai / Desktop)

Claude Desktop: use the standard config in your claude_desktop_config.json.

{
  "mcpServers": {
    "playwright": {
      "command": "npx",
      "args": [
        "@playwright/mcp@latest"
      ]
    }
  }
}

Source

Cursor

Cursor Settings, MCP, Add new MCP Server, type command, with the command npx @playwright/mcp@latest.

npx @playwright/mcp@latest

Source

VS Code

VS Code install button or CLI is documented in the README; the standard config also works.

Source

Safety check

Pass
Publisher verified
Repo is in the verified microsoft GitHub organization; package is @playwright/mcp, linked from playwright.dev official docs.
Pass
Auth model
No account or API key; runs locally. By default uses a persistent browser profile that keeps logins and cookies between sessions, so the agent can act inside signed-in sites. --isolated keeps the profile in memory.
Flag
Write and delete access
Exposes click, type, fill_form, file upload, JavaScript evaluation and browser_run_code_unsafe. The README marks tools read-only or not per tool, but no server-wide read-only switch was found; the README says it is not a security boundary.
Pass
Tool-description injection scan
Read the README tool list (core, config, network, storage, vision, devtools groups). Descriptions are functional; none addressed to the AI to change behavior or hide actions. Tool 'browser_run_code_unsafe' is labeled RCE-equivalent. Page content the browser loads is untrusted and can still inject instructions.
Pass
Repo maintenance
microsoft/playwright-mcp: not archived, last push 2026-10-16, about 38,300 stars.

FAQ

Is the Playwright MCP server official?

Yes. It is published by Microsoft at github.com/microsoft/playwright-mcp and documented on playwright.dev.

Does Playwright MCP cost anything?

No account or API key is required. It is open source and runs locally with npx; you only need Node.js and a browser.

Does it work with Claude and Cursor?

Yes. The README documents Claude Code (claude mcp add playwright npx @playwright/mcp@latest), Claude Desktop, Cursor, VS Code and many other clients.

Is Playwright MCP safe to use?

The README says it is not a security boundary. It can click, type, upload files and evaluate JavaScript, and the default profile keeps your logins, so use --isolated and avoid signed-in accounts you do not want an agent to touch.

Is there a read-only mode?

No server-wide read-only mode was found in the README as of October 2026. Individual tools are labeled read-only or not, and extra capabilities such as network, storage and devtools are opt-in via --caps.

Last reviewed October 18, 2026.

Get your badge

Work at Playwright? Show that your MCP server is independently checked. The badge reflects this page: it updates when we re-check, and it links readers to the evidence.

Markdown (README)

[![MCP or Not: Official · Checked Oct 2026](https://mcpornot.com/badge/playwright.svg)](https://mcpornot.com/playwright)

HTML

<a href="https://mcpornot.com/playwright"><img src="https://mcpornot.com/badge/playwright.svg" alt="MCP or Not: Official · Checked Oct 2026" height="20"></a>

Compare Playwright

Something changed?

Vendors ship MCP updates often. If Playwright launched, changed or retired a server, tell us and we will re-check it against primary sources. Submit a correction.

New official MCP servers, weekly

One short email when vendors ship, change or retire an official server or Claude connector. Checked against primary sources, like every verdict here.