
Research
Two Malicious Rust Crates Impersonate Popular Logger to Steal Wallet Keys
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
@ax-crew/playwright-mcp
Advanced tools
This is a fork of the original Playwright MCP with the following changes:
A Model Context Protocol (MCP) server that provides browser automation capabilities using Playwright. This server enables LLMs to interact with web pages through structured accessibility snapshots, bypassing the need for screenshots or visually-tuned models.
{
"mcpServers": {
"playwright": {
"command": "npx",
"args": [
"@ax-crew/playwright-mcp@latest"
]
}
}
}
Install the Playwright MCP server in VS Code using one of these buttons:
Alternatively, you can install the Playwright MCP server using the VS Code CLI:
# For VS Code
code --add-mcp '{"name":"playwright","command":"npx","args":["@ax-crew/playwright-mcp@latest"]}'
# For VS Code Insiders
code-insiders --add-mcp '{"name":"playwright","command":"npx","args":["@ax-crew/playwright-mcp@latest"]}'
After installation, the Playwright MCP server will be available for use with your GitHub Copilot agent in VS Code.
The Playwright MCP server supports the following command-line options:
--browser <browser>
: Browser or chrome channel to use. Possible values:
chrome
, firefox
, webkit
, msedge
chrome-beta
, chrome-canary
, chrome-dev
msedge-beta
, msedge-canary
, msedge-dev
chrome
--caps <caps>
: Comma-separated list of capabilities to enable, possible values: tabs, pdf, history, wait, files, install. Default is all.--cdp-endpoint <endpoint>
: CDP endpoint to connect to--executable-path <path>
: Path to the browser executable--headless
: Run browser in headless mode (headed by default)--port <port>
: Port to listen on for SSE transport--host <host>
: Host to bind server to. Default is localhost. Use 0.0.0.0 to bind to all interfaces.--user-data-dir <path>
: Path to the user data directory--vision
: Run server that uses screenshots (Aria snapshots are used by default)Playwright MCP will launch the browser with the new profile, located at
- `%USERPROFILE%\AppData\Local\ms-playwright\mcp-chrome-profile` on Windows
- `~/Library/Caches/ms-playwright/mcp-chrome-profile` on macOS
- `~/.cache/ms-playwright/mcp-chrome-profile` on Linux
All the logged in information will be stored in that profile, you can delete it between sessions if you'd like to clear the offline state.
This mode is useful for background or batch operations.
{
"mcpServers": {
"playwright": {
"command": "npx",
"args": [
"@ax-crew/playwright-mcp@latest",
"--headless"
]
}
}
}
When running headed browser on system w/o display or from worker processes of the IDEs,
run the MCP server from environment with the DISPLAY and pass the --port
flag to enable SSE transport.
npx @ax-crew/playwright-mcp@latest --port 8931
And then in MCP client config, set the url
to the SSE endpoint:
{
"mcpServers": {
"playwright": {
"url": "http://localhost:8931/sse"
}
}
}
When running in a remote server, you can use the --host
flag to bind the server to 0.0.0.0
to make it accessible from outside.
npx @ax-crew/playwright-mcp@latest --port 8931 --host 0.0.0.0`
In MCP client config, $server-ip
is the IP address of the server:
{
"mcpServers": {
"playwright": {
"url": "http://{$server-ip}:8931/sse"
}
}
}
NOTE: The Docker implementation only supports headless chromium at the moment.
{
"mcpServers": {
"playwright": {
"command": "docker",
"args": ["run", "-i", "--rm", "--init", "mcp/playwright"]
}
}
}
The tools are available in two modes:
To use Vision Mode, add the --vision
flag when starting the server:
{
"mcpServers": {
"playwright": {
"command": "npx",
"args": [
"@ax-crew/playwright-mcp@latest",
"--vision"
]
}
}
}
Vision Mode works best with the computer use models that are able to interact with elements using X Y coordinate space, based on the provided screenshot.
You can build the Docker image yourself.
docker build -t mcp/playwright .
import http from 'http';
import { createServer } from '@ax-crew/playwright-mcp';
import { SSEServerTransport } from '@modelcontextprotocol/sdk/server/sse.js';
http.createServer(async (req, res) => {
// ...
// Creates a headless Playwright MCP server with SSE transport
const mcpServer = await createServer({ headless: true });
const transport = new SSEServerTransport('/messages', res);
await mcpServer.connect(transport);
// ...
});
element
(string): Human-readable element description used to obtain permission to interact with the elementref
(string): Exact target element reference from the page snapshotstartElement
(string): Human-readable source element description used to obtain the permission to interact with the elementstartRef
(string): Exact source element reference from the page snapshotendElement
(string): Human-readable target element description used to obtain the permission to interact with the elementendRef
(string): Exact target element reference from the page snapshotelement
(string): Human-readable element description used to obtain permission to interact with the elementref
(string): Exact target element reference from the page snapshotelement
(string): Human-readable element description used to obtain permission to interact with the elementref
(string): Exact target element reference from the page snapshottext
(string): Text to type into the elementsubmit
(boolean, optional): Whether to submit entered text (press Enter after)slowly
(boolean, optional): Whether to type one character at a time. Useful for triggering key handlers in the page. By default entire text is filled in at once.element
(string): Human-readable element description used to obtain permission to interact with the elementref
(string): Exact target element reference from the page snapshotvalues
(array): Array of values to select in the dropdown. This can be a single value or multiple values.raw
(boolean, optional): Whether to return without compression (in PNG format). Default is false, which returns a JPEG image.element
(string, optional): Human-readable element description used to obtain permission to screenshot the element. If not provided, the screenshot will be taken of viewport. If element is provided, ref must be provided too.ref
(string, optional): Exact target element reference from the page snapshot. If not provided, the screenshot will be taken of viewport. If ref is provided, element must be provided too.element
(string): Human-readable element description used to obtain permission to interact with the elementx
(number): X coordinatey
(number): Y coordinateelement
(string): Human-readable element description used to obtain permission to interact with the elementx
(number): X coordinatey
(number): Y coordinateelement
(string): Human-readable element description used to obtain permission to interact with the elementstartX
(number): Start X coordinatestartY
(number): Start Y coordinateendX
(number): End X coordinateendY
(number): End Y coordinatetext
(string): Text to type into the elementsubmit
(boolean, optional): Whether to submit entered text (press Enter after)url
(string, optional): The URL to navigate to in the new tab. If not provided, the new tab will be blank.index
(number): The index of the tab to selectindex
(number, optional): The index of the tab to close. Closes current tab if not provided.url
(string): The URL to navigate tokey
(string): Name of the key to press or a character to generate, such as ArrowLeft
or a
paths
(array): The absolute paths to the files to upload. Can be a single file or multiple files.time
(number): The time to wait in secondswidth
(number): Width of the browser windowheight
(number): Height of the browser windowaccept
(boolean): Whether to accept the dialog.promptText
(string, optional): The text of the prompt in case of a prompt dialog.FAQs
Playwright Tools for MCP - Forked from @playwright/mcp
We found that @ax-crew/playwright-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.