MCP server for browser automation using Playwright
Pentest MCP server exists for a simple reason — assistants are far more useful when they can act on Pentest directly instead of describing what you should do. MCP server for browser automation using Playwright.
The installation process will automatically add the following configuration to your Claude config file:
Once Pentest is connected, these are the calls the assistant has available:
Installing — The Installing tool exposed by this serverTools — The Tools tool exposed by this serverbroser_url_reflected_xss — Test whether the URL has an XSS vulnerability javascript { "url": "https://test.com", "paramName":"text" }browser_url_sql_injection — The browser_url_sql_injection tool exposed by this serverbrowser_navigate — Navigate to any URL in the browser javascript { "url": "https://stealthbrowser.cloud" }browser_screenshot — Capture screenshots of the entire page or specific elements javascript { "name": "screenshot-name", // required "selector": "#element-id", //browser_click — Click elements on the page using CSS selector javascript { "selector": "#button-id" }browser_click_text — Click elements on the page by their text content javascript { "text": "Click me" }browser_hover — Hover over elements on the page using CSS selector javascript { "selector": "#menu-item" }browser_hover_text — Hover over elements on the page by their text content javascript { "text": "Hover me" }browser_fill — Fill out input fields javascript { "selector": "#input-field", "value": "Hello World" }browser_select — Select an option in a SELECT element using CSS selector javascript { "selector": "#dropdown", "value": "option-value" }The server ships on npm as playwright, so your MCP client can launch it on demand — there is no separate build step. Add the server block to your client's configuration, restart it, and the tools register themselves.
This sits in the browser automation group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. Pentest's toolset — Installing, Tools, broser_url_reflected_xss and 11 more — is a fair guide to whether it matches your workflow. It is maintained by 9olidity; worth a glance at recent repository activity before you build anything load-bearing on it.
This entry was verified against Pentest's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.
| Tool | What it does |
|---|---|
| Installing | The Installing tool exposed by this server. |
| Tools | The Tools tool exposed by this server. |
| broser_url_reflected_xss | Test whether the URL has an XSS vulnerability javascript { "url": "https://test.com", "paramName":"text" } |
| browser_url_sql_injection | The browser_url_sql_injection tool exposed by this server. |
| browser_navigate | Navigate to any URL in the browser javascript { "url": "https://stealthbrowser.cloud" } |
| browser_screenshot | Capture screenshots of the entire page or specific elements javascript { "name": "screenshot-name", // required "selector": "#element-id", // optional "fullPage": true // optional, default: false } |
| browser_click | Click elements on the page using CSS selector javascript { "selector": "#button-id" } |
| browser_click_text | Click elements on the page by their text content javascript { "text": "Click me" } |
| browser_hover | Hover over elements on the page using CSS selector javascript { "selector": "#menu-item" } |
| browser_hover_text | Hover over elements on the page by their text content javascript { "text": "Hover me" } |
| browser_fill | Fill out input fields javascript { "selector": "#input-field", "value": "Hello World" } |
| browser_select | Select an option in a SELECT element using CSS selector javascript { "selector": "#dropdown", "value": "option-value" } |
| browser_select_text | Select an option in a SELECT element by its text content javascript { "text": "Choose me", "value": "option-value" } |
| browser_evaluate | Execute JavaScript in the browser console javascript { "script": "document.title" } |
{
"mcpServers": {
"playwright": {
"command": "npx",
"args": [
"-y",
"/Users/...../dist/index.js"
],
"disabled": false,
"autoApprove": []
}
}
}Configuration as documented by the project. Restart the client after saving.
Microsoft's official browser automation server — drive a real browser through the accessibility tree, no screenshots needed.
Industrial-strength web extraction — render, scrape, crawl and search entire sites into clean markdown.
The original Chromium automation reference server — simple, screenshot-driven browser control.
Give your coding agent the full DevTools toolbox: traces, network, console, heap snapshots and Lighthouse.
Puppeteer-powered browser control that drives pages from the accessibility tree instead of pixels.
Cloud browsers for AI agents — automation sessions that run in Browserbase's fleet, not on your machine.