Verified

Playwright MCP Server (Hyhfish)

Browser automation for LLMs using structured accessibility trees instead of screenshots.

Data last scanned 3 days ago · Reviewed 3 days ago

3630 tools0TypeScriptApache-2.0

Overview

This server leverages Playwright to provide LLMs with direct access to web pages through an accessibility tree. By focusing on structured data rather than pixel-based visual input, it aims to deliver deterministic interactions for tasks like form-filling, data extraction, and automated testing.

Our verdict

With a security score of 31/100, this tool is categorized as high risk and should be used with caution. The repository has not been updated in over 435 days, and its security profile regarding OAuth and read-only mode has not been reviewed. Given the lack of recent maintenance, users should carefully evaluate its suitability for any environment requiring up-to-date dependencies or active security patches.

  • Uses accessible structured data for deterministic LLM interactions
  • Supports multiple browser engines including Chrome, Firefox, and WebKit
  • Includes only 4 direct dependencies to limit supply-chain surface
  • Licensed under the permissive Apache-2.0 license
  • High-risk security score of 31/100
  • Last code commit occurred over 435 days ago
  • Authentication and read-only modes remain unreviewed

Setup

Claude Desktop
{
  "mcpServers": {
    "hyhfish-playwright-mcp": {
      "args": [
        "-y",
        "@hyhfish/mcp-hyh"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

ToolDescriptionRisk
browser_snapshotCapture accessibility snapshot of the current page, this is better than screenshotlow
browser_clickPerform click on a web pagemedium
browser_dragPerform drag and drop between two elementsmedium
browser_hoverHover over element on pagelow
browser_typeType text into editable elementmedium
browser_select_optionSelect an option in a dropdownmedium
browser_take_screenshotTake a screenshot of the current page. You can't perform actions based on the screenshot, use browser_snapshot for actions.low
browser_screen_captureTake a screenshot of the current pagelow
browser_screen_move_mouseMove mouse to a given positionlow
browser_screen_clickClick left mouse buttonmedium

Compatibility

ClientLocalDockerRemoteRead-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

How does this server interact with web pages?

This server uses Playwright's accessibility tree rather than pixel-based screenshots to interact with web pages, which makes it suitable for non-vision models.

Can I use this server with a non-Chrome browser?

Yes, you can specify different browsers such as firefox, webkit, or other Chrome/Edge channels using the --browser command-line option.

Where does the server store my logged-in information and sessions?

The server stores browser profiles in platform-specific directories, such as AppData on Windows, Library/Caches on macOS, or .cache on Linux, which can be deleted to clear your session state.

Is it possible to run the browser in headless mode?

Yes, you can enable headless mode by passing the --headless flag to the command or setting the headless property within the browser configuration object.

How can I restrict network requests from the browser?

You can use the --allowed-origins and --blocked-origins flags to provide semicolon-separated lists of domains to permit or restrict respectively.

What if I need to use screenshots instead of accessibility snapshots?

While the server uses accessibility trees by default, you can enable screenshot-based interaction by providing the --vision flag.

Alternatives

Badge

Playwright MCP Server (Hyhfish) security score, rated on RepoAI

Maintain this server? Add the live badge to your README.