Playwright MCP
Hosted Playwright MCP server for web testing
Meandr runs Microsoft's Playwright MCP server from the Docker MCP catalog. Your QA agent gets its own key, and a policy keeps the browser on your staging URLs.
The setup
Set up a hosted Playwright MCP server for a QA agent on staging
-
01 Run
Run Playwright from the catalog on a shared machine
In Run a server, pick Playwright and give the hosted Playwright MCP server a share of the machine's memory.
- Machine Shared 512 MB, Memory allocation 194 MB
- Max processes 2, Idle timeout 60 seconds
- Hosted servers have internet access, so the browser reaches your public staging site
- Staging behind a VPN or IP allowlist: run Playwright on a machine in your network with the Meandr CLI, under the same policies and Traffic
PlaywrightPlaywright MCP server.
1. Machine › 2. Configuration
NamePlaywrightHow it appears in your server list.RuntimeRuns on hosted instances you order.
Machine Shared 512 MB running Memory allocation194MBUp to 194 MB on this machine. Minimum is 80 MB.
ScalingMax processes ?2Idle timeout (s) ?60Each agent that connects gets its own process, and they share the memory above. More processes serve more agents at once; each one has less to work with.
BackRun server -
02 Tools
Switch on the browser tools the tests need
The Server catalog lists Playwright's tools, marking the ones that only read the page as read-only and the rest as destructive.
- Upload files and Run Playwright code stay off, since the signup test doesn't need them
- Tools you switch off never reach the agent
Server catalogDiscover what
Playwrightexposes — tools, resource templates, and prompts.RegionsPlaywright 1.64.0-alpha-1790635538000MCP 2025-06-18FRA · 25 tools iIAD · 25 tools iTools- Navigate to a URLdestructive
browser_navigate{ }› - Take a screenshotread-only
browser_take_screenshot{ }› - Upload filesdestructive
browser_file_upload{ }› - Run Playwright code (unsafe)destructive
browser_run_code_unsafe{ }›
ResyncCloseSaved -
03 Agent key
Give the QA agent its own key
Add an agent named qa-agent and a key for it, then use the workspace connection URL your Claude Code or Cursor already points at.
- Only agents with a Meandr key can drive the hosted browser
- Rotate or revoke it on the Keys page; other agents keep working
KeysMain+ Add keyEvery key issued under this workspace. Plaintext is shown once on create or rotate — rotate or revoke from here, or drill into an agent for a per-agent view.
- qa-agent
tok_Hq7r2w…Agent:qa-agentNever used · No expiryRotateRevoke - claude-code
tok_c3Nf8k…Agent:claude-codeLast used: 2 min ago · No expiryRotateRevoke - support-bot
tok_Vd5p1m…Agent:support-botLast used: 9 min ago · No expiryRotateRevoke
-
04 URL policy
Keep the browser on staging and allow the other browser actions
Add three policies on the Playwright server, in this order.
- #1 staging only: Allow opening pages and new tabs whose address starts with https://staging.acme.com/
- #2 off staging: Deny opening any other site in a page or a new tab, with a reason code
- #3 browser tools: Allow the rest, so page reads, form filling, waits and tabs work
PoliciesMainSort+ Add policyRules evaluated against every proxied call. Lower priority fires first. The default policy is the fallback when nothing else matches.
Default policyApplies when no other rule matches.Record responses ?ActionDeny- staging only#1AllowView
- off staging#2DenyView
- browser tools#3AllowView
-
05 Test
Test the signup page and read the run in Traffic
Prompt: “Test signup on staging.acme.com/signup with a new user and screenshot the result.”
- The agent opens the signup page and reads it to find the fields
- Playwright fills the form, clicks Sign up and takes a screenshot
- Result: the welcome page loads and the screenshot returns to the agent
- The agent tried to open the Terms page on www.acme.com, the off staging policy denied it, and the agent got an error instead of the page
srv Playwright2026-10-12▾11:20:022002.48sallowPolicy staging onlyFrom 203.0.113.24⌄Request 158 Btools/callbrowser_navigate#612904417url: https://staging.acme.com/signup▸11:20:04200733msallow▸11:20:092001.09sallow▸11:20:112002.13sallow▸11:20:152001.44sallow▸11:20:184034msdeny:off_staging
Questions about hosted Playwright
Do I need to deploy anything?
Where do the screenshots go?
Can two testers use one hosted Playwright?
Can the agent open a site outside staging?
Which clients can drive the browser?
Run Playwright for your QA agent
Pick Playwright from the catalog, allow your staging URLs, and connect from the client you already use.
Try for freeQuestions? Email us