
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
perplexity-web-mcp
Advanced tools
Lightweight MCP server for searching Perplexity.ai via browser automation
A lightweight MCP (Model Context Protocol) server that enables AI assistants to perform searches on Perplexity.ai through browser automation. No official API key required.
perplexity-web-mcp bridges your AI assistant (Claude, Cursor, etc.) with Perplexity.ai by automating a real browser session via Playwright. It reads search results directly from the DOM — making it indistinguishable from a real user — and returns the answer text along with cited sources.
login tool to authenticate once; your session persists across restartsPrerequisites:
npx playwright install chromiumnpx playwright install chromium
That's it — no clone, no build required.
claude mcp add perplexity-web -- npx perplexity-web-mcp@latest
Add to your MCP config (.claude.json):
{
"mcpServers": {
"perplexity-web": {
"command": "npx",
"args": ["perplexity-web-mcp@latest"]
}
}
}
Optional flag: --timeout=N — max seconds to wait for an answer (default: 20).
To authenticate, ask your AI client to call the login tool once. A Chromium window will open for you to sign in. Your session is persisted in .playwright/profile/ and reused on future runs.
Why is a browser window visible? Perplexity.ai uses Cloudflare Turnstile which blocks headless browsers. The window stays in the background and requires no interaction during normal use.
loginChecks if you are authenticated on Perplexity.ai. If not, opens a browser window so you can log in.
Parameters: none
Returns: A status message — either "Already authenticated" or "Login successful" after the user completes the login flow.
Your session is persisted in
.playwright/profile/— you only need to callloginonce, or after a session expiry.
searchPerforms a search on Perplexity.ai using default settings and returns the answer with sources. Prefer this for general queries.
Parameters:
| Name | Type | Required | Description |
|---|---|---|---|
query | string | Yes | The search query |
Returns:
The capital of France is Paris...
Sources:
1. [Capital City of France - CountryReports](https://www.countryreports.org/...)
search_advancedSame as search but lets you select which sources Perplexity searches. You can combine multiple sources. Uses browser UI automation to toggle the source checkboxes — more powerful but slightly less resilient to UI changes.
Parameters:
| Name | Type | Required | Description |
|---|---|---|---|
query | string | Yes | The search query |
sources | string[] | Yes | One or more sources: web, academic, social |
Example: sources: ["web", "academic"] searches both general web and scholarly articles simultaneously.
Returns: Same format as search.
┌─────────────────────────────────────────────────────────────────┐
│ AI Client (Claude Desktop / Claude Code / Cursor / ...) │
└────────────────────────┬────────────────────────────────────────┘
│ MCP stdio transport
▼
┌─────────────────────────────────────────────────────────────────┐
│ perplexity-web-mcp (FastMCP server) │
│ │
│ ┌─────────────────┐ ┌──────────────────────────────────────┐ │
│ │ CLI Arguments │ │ MCP Tools │ │
│ │ │ │ │ │
│ │ --timeout=N │ │ login() │ │
│ │ │ │ checks session, opens browser │ │
│ │ │ │ for login if not authenticated │ │
│ │ │ │ │ │
│ │ │ │ search(query, mode?) │ │
│ │ │ │ returns: { answer, sources[] } │ │
│ └────────┬────────┘ └──────────────┬───────────────────────┘ │
│ │ │ │
│ ▼ ▼ │
│ ┌────────────────────────────────────────────────────────────┐ │
│ │ Browser Manager (Playwright, always visible) │ │
│ │ │ │
│ │ (browser launches lazily on first tool call) │ │
│ │ │ │
│ │ login() │ │
│ │ ├── GET /api/auth/session │ │
│ │ │ ├── active ──► "already authenticated" │ │
│ │ │ └── none ──► open browser, wait for user login │ │
│ │ │ │
│ │ search(query) │ │
│ │ ├── open new tab, navigate to perplexity.ai │ │
│ │ ├── type query in search box │ │
│ │ ├── wait for answer to complete (DOM signal) │ │
│ │ ├── extract answer text from DOM │ │
│ │ ├── extract cited sources │ │
│ │ └── close tab │ │
│ │ │ │
│ │ search_advanced(query, sources[]) │ │
│ │ ├── open new tab, navigate to perplexity.ai │ │
│ │ ├── open "+" menu → "Connecteurs et sources" │ │
│ │ ├── toggle source checkboxes to match requested sources │ │
│ │ ├── type query, wait for answer, extract DOM │ │
│ │ └── close tab │ │
│ └────────────────────────────────────────────────────────────┘ │
└─────────────────────────────────────────────────────────────────┘
│
▼
┌──────────────────────┐
│ perplexity.ai │
│ (real browser req) │
└──────────────────────┘
# Run in development mode (hot reload)
npm run dev
# Build
npm run build
# Lint
npm run lint
# Type check
npm run typecheck
See docs/testing.md for a full step-by-step guide covering:
login or search) is called, not at server startup.login tool calls GET /api/auth/session to check the persisted session. If no session is found, a browser window opens and the server waits for the user to log in (up to 5 minutes).search tool opens a new tab, navigates to perplexity.ai, types the query, and waits for Perplexity's answer to complete (detected via a DOM signal — the "N sources" button appearing).search_advanced does the same but first opens the source selector menu and toggles the requested sources (identified by their SVG icon IDs, which are locale-independent).Contributions are welcome! Please open an issue before submitting large PRs.
git checkout -b feat/my-featureMIT — see LICENSE for details.
This project automates a browser session for personal use. It is not affiliated with Perplexity AI, Inc. Use responsibly and in accordance with Perplexity's Terms of Service.
FAQs
Lightweight MCP server for searching Perplexity.ai via browser automation
We found that perplexity-web-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.