Playwriter

Overview

From the repository's own README, as read at the audited commit.

# ChangesetsThis folder contains **pending release notes** for public packages. Each `.md` file describes one user-facing fix or feature that should appear in the next generated changelog.## What to put here- Add one descriptive kebab-case `.md` file per logical change, for example `fix-auth-token-refresh.md`.- Use `patch` for fixes and `minor` for new features.- Write in present tense, focused on what users see.- Check GitHub issues first. If the change fixes one, include `Fixes #123` on its own line.## What not to put here- Do not add changesets for private packages or packages without a `version` field.- Do not edit `CHANGELOG.md` directly.- Do not run the interactive changeset CLI.- Do not add vague entries like "misc improvements" or "update internals".

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add website --env CLOUDFLARE_D1_TOKEN=${CLOUDFLARE_D1_TOKEN} --env PLAYWRITER_API_KEY=${PLAYWRITER_API_KEY} --env PLAYWRITER_CLOUD_TOKEN=${PLAYWRITER_CLOUD_TOKEN} --env PLAYWRITER_TOKEN=${PLAYWRITER_TOKEN} -- npx -y website

{
  "mcpServers": {
    "website": {
      "command": "npx",
      "args": [
        "-y",
        "website"
      ],
      "env": {
        "CLOUDFLARE_D1_TOKEN": "${CLOUDFLARE_D1_TOKEN}",
        "PLAYWRITER_API_KEY": "${PLAYWRITER_API_KEY}",
        "PLAYWRITER_CLOUD_TOKEN": "${PLAYWRITER_CLOUD_TOKEN}",
        "PLAYWRITER_TOKEN": "${PLAYWRITER_TOKEN}"
      }
    }
  }
}

Exposed tools (2) 0 read · 1 write · 1 destructive

Blast radius: 1 tool can delete or overwrite. An agent that can be talked into calling a tool can be talked into calling this one.

Details

Source

remorses/playwriter

npm

website

Transports

stdio

Credentials it reads

CLOUDFLARE_D1_TOKENPLAYWRITER_API_KEYPLAYWRITER_CLOUD_TOKENPLAYWRITER_TOKEN

License

MIT

Stars

3,899 · pushed 0d ago

Trust audit

Install with care. The audit found things worth knowing before you trust its output.

What the source does

Filesystem

declared (6 observation(s))

Network

declared (5 observation(s))

Shell

none-observed

Dependencies

not all pinned

Secrets in source

found

Findings (25)

console.log(`  Token: ${token ? '(configured)' : '(none)'}`)

console.log(`CDP endpoint: http://${options.host}:${RELAY_PORT}${token ? '?token=<token>' : ''}`)

'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCJoq5UYhOo5x8s50pVBUHjQ8idyUHnZFDj1JspWJPe6kvM7RFIaE/y5WTAH05kuK0R7v/ipcGA4ywA5wKdPKHZzkl5xstlNPj0Ivu4CqLobU7eY5G3k3Gq7wql2pbwb/A8Nat4VLbfBjQLA6TGWd3LQOHS

body: JSON.stringify({ password: 'recorded-body-secret', operation: 'recorder-test' }),

reset

.agentignore

.gitmodules

.prettierignore

.prettierrc.json

expect(() => new Function(wrapped)).not.toThrow()

expect(() => new Function(wrapped)).not.toThrow()

const locatorFromString = eval('testPage.' + locatorString);

import ghostCursorBundleCode from '../../playwriter/dist/ghost-cursor-client.js?raw'

import bippyBundleCode from '../../playwriter/dist/bippy.js?raw'

import { cn } from '../../lib/utils.ts'

import playwriterSkillMd from '../../skills/playwriter/SKILL.md?raw'

const browser = await chromium.connectOverCDP('http://127.0.0.1:19988')

- Allows `chromium.connectOverCDP('http://127.0.0.1:19988')` without needing to call `getCdpUrl` first

baseUrl: `http://127.0.0.1:${address.port}`,

['src/cli.ts', 'session', 'new', '--host', `http://127.0.0.1:${port}`],

const response = await fetch(`http://127.0.0.1:${TEST_PORT}/extension/status`)

const binary = atob(value)

const bin = atob(base64)

ulid, @types/node, typescript

string-dedent, zustand, @types/chrome, typescript, vite, vite-plugin-static-copy

Gates applied: no_behavioural_pass.

Audited 2026-09-17 · audit v0.4.0 · source sha d3e91f5401d4 · full audit: observations/trust-audit/mcp-server/remorses__playwriter.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions