chore: mark v0.0.49 (#1232 )

chore: generate config section from config.d.ts (#1224 )
chore: mark v0.0.48 (#1218 )
2026-01-30 22:42:03 +00:00 · 2025-11-30 11:28:12 -08:00 · 2025-11-28 15:38:42 -08:00 · 2025-11-21 14:34:32 -08:00 · 2025-11-21 11:28:37 -08:00 · 2025-11-19 17:06:43 +01:00
11 changed files with 302 additions and 62 deletions
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -147,3 +147,49 @@ jobs:
           GITHUB_TOKEN: ${{ github.token }}
        run: |
            gh release upload ${{github.event.release.tag_name}} ./extension/playwright-mcp-extension-${{ steps.get-version.outputs.version }}.zip
+
+  publish-release-mcp-registry:
+    if: github.event_name == 'workflow_dispatch'
+    runs-on: ubuntu-latest
+    environment: allow-mcp-registry-publishing
+    permissions:
+      contents: read
+      id-token: write # Needed for GitHub OIDC authentication
+    steps:
+      - uses: actions/checkout@v5
+      - name: Clone MCP Registry and build publisher tool
+        shell: pwsh
+        run: |
+          cd ${{ runner.temp }}
+
+          # Install Microsoft Go
+          go run github.com/microsoft/go-infra/goinstallscript@v1.1.0
+          ./go-install.ps1 -GitHubActionsPath
+
+          # Enable compliant crypto
+          $env:GOEXPERIMENT = "systemcrypto"
+
+          # Clone and build the publisher tool
+          git clone --branch "v1.3.7" https://github.com/modelcontextprotocol/registry
+          cd registry
+          go build -o ${{ runner.temp }}/mcp-publisher ./cmd/publisher
+
+          # show help for the tool to ensure it's working
+          ${{ runner.temp }}/mcp-publisher --help
+      - name: Azure Login via OIDC
+        uses: azure/login@v2
+        with:
+          client-id: ${{ secrets.AZURE_MCP_REGISTRY_CLIENT_ID }}
+          tenant-id: ${{ secrets.AZURE_MCP_REGISTRY_TENANT_ID }}
+          subscription-id: ${{ secrets.AZURE_MCP_REGISTRY_SUBSCRIPTION_ID }}
+      - name: Publish to the MCP Registry
+        shell: pwsh
+        run: |
+          # log in using Key Vault
+          ${{ runner.temp }}/mcp-publisher `
+              login dns azure-key-vault `
+              -vault "${{ secrets.KV_NAME }}" -key "${{ secrets.KV_KEY_NAME }}" `
+              -domain microsoft.com
+
+          # publish the server.json
+          ${{ runner.temp }}/mcp-publisher publish ./.mcp/server.json
--- a/.mcp/server.json
+++ b/.mcp/server.json
@@ -0,0 +1,22 @@
+{
+  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-10-17/server.schema.json",
+  "name": "com.microsoft/playwright-mcp",
+  "title": "Playwright",
+  "description": "Automate web browsers using accessibility trees for testing and data extraction.",
+  "repository": {
+    "url": "https://github.com/microsoft/playwright-mcp",
+    "source": "github"
+  },
+  "websiteUrl": "https://github.com/microsoft/playwright-mcp",
+  "version": "0.0.49",
+  "packages": [
+    {
+      "registryType": "npm",
+      "identifier": "@playwright/mcp",
+      "version": "0.0.49",
+      "transport": {
+        "type": "stdio"
+      }
+    }
+  ]
+}
--- a/README.md
+++ b/README.md
@@ -270,6 +270,21 @@ Playwright MCP server supports following arguments. They can be provided in the
                                        server is allowed to serve from.
                                        Defaults to the host the server is bound
                                        to. Pass '*' to disable the host check.
+  --allowed-origins <origins>           semicolon-separated list of TRUSTED
+                                        origins to allow the browser to request.
+                                        Default is to allow all.
+                                        Important: *does not* serve as a
+                                        security boundary and *does not* affect
+                                        redirects.
+  --blocked-origins <origins>           semicolon-separated list of origins to
+                                        block the browser from requesting.
+                                        Blocklist is evaluated before allowlist.
+                                        If used without the allowlist, requests
+                                        not matching the blocklist are still
+                                        allowed.
+                                        Important: *does not* serve as a
+                                        security boundary and *does not* affect
+                                        redirects.
  --block-service-workers               block service workers
  --browser <browser>                   browser or chrome channel to use,
                                        possible values: chrome, firefox,
@@ -436,75 +451,171 @@ npx @playwright/mcp@latest --config path/to/config.json
 <details>
 <summary>Configuration file schema</summary>

+<!--- Config generated by update-readme.js -->
+
 ```typescript
 {
-  // Browser configuration
+  /**
+   * The browser to use.
+   */
  browser?: {
-    // Browser type to use (chromium, firefox, or webkit)
+    /**
+     * The type of browser to use.
+     */
    browserName?: 'chromium' | 'firefox' | 'webkit';

-    // Keep the browser profile in memory, do not save it to disk.
+    /**
+     * Keep the browser profile in memory, do not save it to disk.
+     */
    isolated?: boolean;

-    // Path to user data directory for browser profile persistence
+    /**
+     * Path to a user data directory for browser profile persistence.
+     * Temporary directory is created by default.
+     */
    userDataDir?: string;

-    // Browser launch options (see Playwright docs)
-    // @see https://playwright.dev/docs/api/class-browsertype#browser-type-launch
-    launchOptions?: {
-      channel?: string;        // Browser channel (e.g. 'chrome')
-      headless?: boolean;      // Run in headless mode
-      executablePath?: string; // Path to browser executable
-      // ... other Playwright launch options
-    };
+    /**
+     * Launch options passed to
+     * @see https://playwright.dev/docs/api/class-browsertype#browser-type-launch-persistent-context
+     *
+     * This is useful for settings options like `channel`, `headless`, `executablePath`, etc.
+     */
+    launchOptions?: playwright.LaunchOptions;

-    // Browser context options
-    // @see https://playwright.dev/docs/api/class-browser#browser-new-context
-    contextOptions?: {
-      viewport?: { width: number, height: number };
-      // ... other Playwright context options
-    };
+    /**
+     * Context options for the browser context.
+     *
+     * This is useful for settings options like `viewport`.
+     */
+    contextOptions?: playwright.BrowserContextOptions;

-    // CDP endpoint for connecting to existing browser
+    /**
+     * Chrome DevTools Protocol endpoint to connect to an existing browser instance in case of Chromium family browsers.
+     */
    cdpEndpoint?: string;

-    // Remote Playwright server endpoint
+    /**
+     * CDP headers to send with the connect request.
+     */
+    cdpHeaders?: Record<string, string>;
+
+    /**
+     * Remote endpoint to connect to an existing Playwright server.
+     */
    remoteEndpoint?: string;
+
+    /**
+     * Paths to TypeScript files to add as initialization scripts for Playwright page.
+     */
+    initPage?: string[];
+
+    /**
+     * Paths to JavaScript files to add as initialization scripts.
+     * The scripts will be evaluated in every page before any of the page's scripts.
+     */
+    initScript?: string[];
  },

-  // Server configuration
  server?: {
-    port?: number;  // Port to listen on
-    host?: string;  // Host to bind to (default: localhost)
+    /**
+     * The port to listen on for SSE or MCP transport.
+     */
+    port?: number;
+
+    /**
+     * The host to bind the server to. Default is localhost. Use 0.0.0.0 to bind to all interfaces.
+     */
+    host?: string;
+
+    /**
+     * The hosts this server is allowed to serve from. Defaults to the host server is bound to.
+     * This is not for CORS, but rather for the DNS rebinding protection.
+     */
+    allowedHosts?: string[];
  },

-  // List of additional capabilities
-  capabilities?: Array<
-    'tabs' |    // Tab management
-    'install' | // Browser installation
-    'pdf' |     // PDF generation
-    'vision' |  // Coordinate-based interactions
-  >;
+  /**
+   * List of enabled tool capabilities. Possible values:
+   *   - 'core': Core browser automation features.
+   *   - 'pdf': PDF generation and manipulation.
+   *   - 'vision': Coordinate-based interactions.
+   */
+  capabilities?: ToolCapability[];

-  // Directory for output files
+  /**
+   * Whether to save the Playwright session into the output directory.
+   */
+  saveSession?: boolean;
+
+  /**
+   * Whether to save the Playwright trace of the session into the output directory.
+   */
+  saveTrace?: boolean;
+
+  /**
+   * If specified, saves the Playwright video of the session into the output directory.
+   */
+  saveVideo?: {
+    width: number;
+    height: number;
+  };
+
+  /**
+   * Reuse the same browser context between all connected HTTP clients.
+   */
+  sharedBrowserContext?: boolean;
+
+  /**
+   * Secrets are used to prevent LLM from getting sensitive data while
+   * automating scenarios such as authentication.
+   * Prefer the browser.contextOptions.storageState over secrets file as a more secure alternative.
+   */
+  secrets?: Record<string, string>;
+
+  /**
+   * The directory to save output files.
+   */
  outputDir?: string;

-  // Network configuration
  network?: {
-    // List of origins to allow the browser to request. Default is to allow all. Origins matching both `allowedOrigins` and `blockedOrigins` will be blocked.
+    /**
+     * List of origins to allow the browser to request. Default is to allow all. Origins matching both `allowedOrigins` and `blockedOrigins` will be blocked.
+     */
    allowedOrigins?: string[];

-    // List of origins to block the browser to request. Origins matching both `allowedOrigins` and `blockedOrigins` will be blocked.
+    /**
+     * List of origins to block the browser to request. Origins matching both `allowedOrigins` and `blockedOrigins` will be blocked.
+     */
    blockedOrigins?: string[];
  };
- 
+
  /**
-   * Whether to send image responses to the client. Can be "allow" or "omit". 
-   * Defaults to "allow".
+   * Specify the attribute to use for test ids, defaults to "data-testid".
+   */
+  testIdAttribute?: string;
+
+  timeouts?: {
+    /*
+     * Configures default action timeout: https://playwright.dev/docs/api/class-page#page-set-default-timeout. Defaults to 5000ms.
+     */
+    action?: number;
+
+    /*
+     * Configures default navigation timeout: https://playwright.dev/docs/api/class-page#page-set-default-navigation-timeout. Defaults to 60000ms.
+     */
+    navigation?: number;
+  };
+
+  /**
+   * Whether to send image responses to the client. Can be "allow", "omit", or "auto". Defaults to "auto", which sends images if the client can display them.
   */
  imageResponses?: 'allow' | 'omit';
 }
 ```
+
+<!--- End of config generated section -->
+
 </details>

 ### Standalone MCP server
--- a/config.d.ts
+++ b/config.d.ts
@@ -69,6 +69,11 @@ export type Config = {
     */
    remoteEndpoint?: string;

+    /**
+     * Paths to TypeScript files to add as initialization scripts for Playwright page.
+     */
+    initPage?: string[];
+
    /**
     * Paths to JavaScript files to add as initialization scripts.
     * The scripts will be evaluated in every page before any of the page's scripts.
--- a/extension/README.md
+++ b/extension/README.md
@@ -45,4 +45,33 @@ Configure Playwright MCP server to connect to the browser using the extension by

 When the LLM interacts with the browser for the first time, it will load a page where you can select which browser tab the LLM will connect to. This allows you to control which specific page the AI assistant will interact with during the session.

+### Bypassing the Connection Approval Dialog
+
+By default, you'll need to approve each connection when the MCP server tries to connect to your browser. To bypass this approval dialog and allow automatic connections, you can use an authentication token.
+
+#### Using Your Unique Authentication Token
+
+1. After installing the extension, click on the extension icon or navigate to the extension's status page
+2. Copy the `PLAYWRIGHT_MCP_EXTENSION_TOKEN` value displayed in the extension UI
+3. Add it to your MCP server configuration:
+
+```json
+{
+  "mcpServers": {
+    "playwright-extension": {
+      "command": "npx",
+      "args": [
+        "@playwright/mcp@latest",
+        "--extension"
+      ],
+      "env": {
+        "PLAYWRIGHT_MCP_EXTENSION_TOKEN": "your-token-here"
+      }
+    }
+  }
+}
+```
+
+This token is unique to your browser profile and provides secure authentication between the MCP server and the extension. Once configured, you won't need to manually approve connections each time.
+

--- a/extension/manifest.json
+++ b/extension/manifest.json
@@ -1,7 +1,7 @@
 {
  "manifest_version": 3,
  "name": "Playwright MCP Bridge",
-  "version": "0.0.47",
+  "version": "0.0.49",
  "description": "Share browser tabs with Playwright MCP server",
  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nMS2b0WCohjVHPGb8D9qAdkbIngDqoAjTeSccHJijgcONejge+OJxOQOMLu7b0ovt1c9BiEJa5JcpM+EHFVGL1vluBxK71zmBy1m2f9vZF3HG0LSCp7YRkum9rAIEthDwbkxx6XTvpmAY5rjFa/NON6b9Hlbo+8peUSkoOK7HTwYnnI36asZ9eUTiveIf+DMPLojW2UX33vDWG2UKvMVDewzclb4+uLxAYshY7Mx8we/b44xu+Anb/EBLKjOPk9Yh541xJ5Ozc8EiP/5yxOp9c/lRiYUHaRW+4r0HKZyFt0eZ52ti2iM4Nfk7jRXR7an3JPsUIf5deC/1cVM/+1ZQIDAQAB",
  "permissions": [
--- a/extension/package-lock.json
+++ b/extension/package-lock.json
@@ -1,12 +1,12 @@
 {
  "name": "@playwright/mcp-extension",
-  "version": "0.0.47",
+  "version": "0.0.49",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@playwright/mcp-extension",
-      "version": "0.0.47",
+      "version": "0.0.49",
      "license": "Apache-2.0",
      "devDependencies": {
        "@types/chrome": "^0.0.315",
--- a/extension/package.json
+++ b/extension/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@playwright/mcp-extension",
-  "version": "0.0.47",
+  "version": "0.0.49",
  "description": "Playwright MCP Browser Extension",
  "private": true,
  "repository": {
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,23 +1,23 @@
 {
  "name": "@playwright/mcp",
-  "version": "0.0.47",
+  "version": "0.0.49",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "@playwright/mcp",
-      "version": "0.0.47",
+      "version": "0.0.49",
      "license": "Apache-2.0",
      "dependencies": {
-        "playwright": "1.57.0-alpha-2025-11-14",
-        "playwright-core": "1.57.0-alpha-2025-11-14"
+        "playwright": "1.58.0-alpha-2025-11-30",
+        "playwright-core": "1.58.0-alpha-2025-11-30"
      },
      "bin": {
        "mcp-server-playwright": "cli.js"
      },
      "devDependencies": {
        "@modelcontextprotocol/sdk": "^1.17.5",
-        "@playwright/test": "1.57.0-alpha-2025-11-14",
+        "@playwright/test": "1.58.0-alpha-2025-11-30",
        "@types/node": "^24.3.0",
        "zod-to-json-schema": "^3.24.6"
      },
@@ -50,13 +50,13 @@
      }
    },
    "node_modules/@playwright/test": {
-      "version": "1.57.0-alpha-2025-11-14",
-      "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.57.0-alpha-2025-11-14.tgz",
-      "integrity": "sha512-CtIvv2qi3Wji3G2Oiwj26QeGosdj6z6IgzQyw3Jp2t8uVWDTQtNekdHi8Q8ONJqlJID8Lf45DMl4o31uOMzVOw==",
+      "version": "1.58.0-alpha-2025-11-30",
+      "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.58.0-alpha-2025-11-30.tgz",
+      "integrity": "sha512-9E+WsHsV8x3Xw+m4Sw2k1+mR9umfJHb3AFl9gdouMyTB2UsS6Cavo/KLcugottf+lI0nxXC72n+U/R/8xKrsFw==",
      "dev": true,
      "license": "Apache-2.0",
      "dependencies": {
-        "playwright": "1.57.0-alpha-2025-11-14"
+        "playwright": "1.58.0-alpha-2025-11-30"
      },
      "bin": {
        "playwright": "cli.js"
@@ -825,12 +825,12 @@
      }
    },
    "node_modules/playwright": {
-      "version": "1.57.0-alpha-2025-11-14",
-      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.57.0-alpha-2025-11-14.tgz",
-      "integrity": "sha512-B91cAwJw+dlsPi6GnJD6bAUfso/ygmrxsXHnbFqOd5UmGo8bZzFf7WvSkB/47lOSYIP+9szVXwMwIsZ4Fj+rAQ==",
+      "version": "1.58.0-alpha-2025-11-30",
+      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.58.0-alpha-2025-11-30.tgz",
+      "integrity": "sha512-dzAIbd9MED4dQsPM6leA9rhKEXBf8L7mf+/CgYTeOrDuGNCznEr4PYQSvGPviLfiVyLFPpnPur1N0bVu8ZgJww==",
      "license": "Apache-2.0",
      "dependencies": {
-        "playwright-core": "1.57.0-alpha-2025-11-14"
+        "playwright-core": "1.58.0-alpha-2025-11-30"
      },
      "bin": {
        "playwright": "cli.js"
@@ -843,9 +843,9 @@
      }
    },
    "node_modules/playwright-core": {
-      "version": "1.57.0-alpha-2025-11-14",
-      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.57.0-alpha-2025-11-14.tgz",
-      "integrity": "sha512-Elz1kUiW8naXjunmfgaYh9inaqxT04FjR/CDOi2IH7ZBDTov6tTcNV4bObNeHSBV76YVPHsRK/96v3kG9F+5sQ==",
+      "version": "1.58.0-alpha-2025-11-30",
+      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.58.0-alpha-2025-11-30.tgz",
+      "integrity": "sha512-Fp4yazc8jiZsMTMMfNIstrIEW3koKsQWjbvDlzir+r6TctZHV/ZGqaxBN+Bbaoqkd1EsR1+Q7wGdwMZh3aP7XQ==",
      "license": "Apache-2.0",
      "bin": {
        "playwright-core": "cli.js"
--- a/package.json
+++ b/package.json
@@ -1,7 +1,8 @@
 {
  "name": "@playwright/mcp",
-  "version": "0.0.47",
+  "version": "0.0.49",
  "description": "Playwright Tools for MCP",
+  "mcpName": "com.microsoft/playwright-mcp",
  "repository": {
    "type": "git",
    "url": "git+https://github.com/microsoft/playwright-mcp.git"
@@ -37,15 +38,15 @@
    }
  },
  "dependencies": {
-    "playwright": "1.57.0-alpha-2025-11-14",
-    "playwright-core": "1.57.0-alpha-2025-11-14"
+    "playwright": "1.58.0-alpha-2025-11-30",
+    "playwright-core": "1.58.0-alpha-2025-11-30"
  },
  "bin": {
    "mcp-server-playwright": "cli.js"
  },
  "devDependencies": {
    "@modelcontextprotocol/sdk": "^1.17.5",
-    "@playwright/test": "1.57.0-alpha-2025-11-14",
+    "@playwright/test": "1.58.0-alpha-2025-11-30",
    "@types/node": "^24.3.0",
    "zod-to-json-schema": "^3.24.6"
  }
--- a/update-readme.js
+++ b/update-readme.js
@@ -135,12 +135,38 @@ async function updateOptions(content) {
  ]);
 }

+/**
+ * @param {string} content
+ * @returns {Promise<string>}
+ */
+async function updateConfig(content) {
+  console.log('Updating config schema from config.d.ts...');
+  const configPath = path.join(__dirname, 'config.d.ts');
+  const configContent = await fs.promises.readFile(configPath, 'utf-8');
+  
+  // Extract the Config type definition
+  const configTypeMatch = configContent.match(/export type Config = (\{[\s\S]*?\n\});/);
+  if (!configTypeMatch)
+    throw new Error('Config type not found in config.d.ts');
+  
+  const configType = configTypeMatch[1]; // Use capture group to get just the object definition
+  
+  const startMarker = `<!--- Config generated by ${path.basename(__filename)} -->`;
+  const endMarker = `<!--- End of config generated section -->`;
+  return updateSection(content, startMarker, endMarker, [
+    '```typescript',
+    configType,
+    '```',
+  ]);
+}
+
 async function updateReadme() {
  const readmePath = path.join(__dirname, 'README.md');
  const readmeContent = await fs.promises.readFile(readmePath, 'utf-8');
  const withTools = await updateTools(readmeContent);
  const withOptions = await updateOptions(withTools);
-  await fs.promises.writeFile(readmePath, withOptions, 'utf-8');
+  const withConfig = await updateConfig(withOptions);
+  await fs.promises.writeFile(readmePath, withConfig, 'utf-8');
  console.log('README updated successfully');
 }
Author	SHA1	Message	Date
Pavel Feldman	0fcb25d118	chore: mark v0.0.49 (#1232 )	2025-11-30 11:28:12 -08:00
Simon Knott	f4df37ca71	chore: generate config section from config.d.ts (#1224 )	2025-11-28 15:38:42 -08:00
Pavel Feldman	64f65ccd10	chore: mark v0.0.48 (#1218 )	2025-11-21 14:34:32 -08:00
AJ (@techfren)	3f7e2d1b45	docs: add authentication token instructions to extension README (#1207 )	2025-11-21 11:28:37 -08:00
Simon Knott	e0cb424dea	docs: update config file section (#1209 ) Copy-paste of `7671e2b7f0/packages/playwright/src/mcp/config.d.ts (L21)`.	2025-11-19 17:06:43 +01:00
Joel Verhagen	86e0020b4a	Update version to 0.0.47 in server.json (#1204 )	2025-11-18 08:47:32 -08:00
Joel Verhagen	009aa9275b	Add step for publishing to MCP Registry (#1197 ) This adds a new step for the `release` event to publish to the Official MCP Registry. Summary of changes: - Add `server.json` which is the MCP Server manifest - Used metadata from the GH MCP Registry - Used the name `com.microsoft/playwright-mcp` - Add `publish-release-mcp-registry` job that runs manually - Install Microsoft Go for compliant Go crypto - Log in to Azure for Key Vault access - Publish to the MCP Registry in the `microsoft.com` namespace. - Add `mcpName` to the `package.json` which the MCP Registry validates. The publishing requires some secret variables: - `AZURE_MCP_REGISTRY_CLIENT_ID` - service principal client ID (app ID) with Get Key and Sign access to a Key Vault - `AZURE_MCP_REGISTRY_TENANT_ID` - tenant ID for the service principal (should be a production tenant) - `AZURE_MCP_REGISTRY_SUBSCRIPTION_ID` - Azure subscription ID holding the Key Vault - `KV_NAME` - the Key Vault name, e.g. `mykeyvault` - `KV_KEY_NAME` - the name of a Key in the Key Vault, needs to be ECDSA P-384. I can provide internal documentation for how to set up the service principal (managed identity is easiest), vault, and key as well as registering the key so it can be used for the `microsoft.com` namespace. Note: after the new job is proven to work as expected, we can switch it to automatically running after the `publish-release-npm` job on the `release` event.	2025-11-17 13:43:07 -08:00