{
  "entry": {
    "kind": "mcp",
    "slug": "playwright-mcp",
    "name": "Playwright MCP",
    "vendor": "Microsoft",
    "description": "Microsoft's official browser-automation MCP server, built on Playwright and one of the most widely installed servers in the ecosystem. It drives a real browser for an agent: navigating, clicking, filling forms, reading the accessibility tree, and capturing screenshots or traces.\n\nBrowser control is the capability to reason about, and it is broader than it sounds. A driven browser can reach internal sites, act inside sessions that are already authenticated, and read anything rendered on screen — and every page it visits is untrusted input flowing back into the agent's context. Combined with the filesystem writes it uses for traces and screenshots, a compromised loop can both act on your behalf and persist what it found. Run it against a dedicated profile rather than your daily browser, and never one holding production credentials.",
    "website": "https://github.com/microsoft/playwright-mcp",
    "repository": "https://github.com/microsoft/playwright-mcp",
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [
      "browser:control",
      "filesystem:write",
      "network:outbound"
    ],
    "packaging": null,
    "configFiles": null,
    "category": null,
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 20,
      "band": "low",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "1 high-risk capability: filesystem:write",
          "contribution": 10
        }
      ],
      "dangerousCombos": []
    },
    "dangerousCombos": []
  }
}