playwright-stealth
mcpkey · packagecom.pulsemcp/playwright-stealth · v0.2.3
Browser automation using Playwright with optional stealth mode to bypass anti-bot protection.
run it
on your own machines, one way per deploy methodgenerated from the record, not tested yet
#!/usr/bin/env bash # playwright-stealth (com.pulsemcp/playwright-stealth), recipe baremetal (generated). # Generated by Hub for toolset "my-agent"; started by mcp-my-agent-playwright-stealth.service. set -euo pipefail export HOST=127.0.0.1 PORT=8101 exec npx -y supergateway@4 --stdio 'npx -y [email protected]' --outputTransport streamableHttp --stateful --host 127.0.0.1 --port 8101 --streamableHttpPath /mcp --healthEndpoint /healthz [Unit] Description=MCP server playwright-stealth (toolset my-agent), generated by Hub After=network-online.target Wants=network-online.target [Service] Type=simple User=mcp Group=mcp EnvironmentFile=/etc/mcp/my-agent.env Environment=HOME=/var/lib/mcp/playwright-stealth WorkingDirectory=/var/lib/mcp/playwright-stealth ExecStart=/opt/mcp/my-agent/bin/playwright-stealth.sh Restart=on-failure RestartSec=5 NoNewPrivileges=true ProtectSystem=strict ProtectHome=true PrivateTmp=true ReadWritePaths=/var/lib/mcp/playwright-stealth [Install] WantedBy=multi-user.target
generated from the record, not tested yet
docker run --rm -p 127.0.0.1:8101:8000 -e STEALTH_MODE -e STEALTH_USER_AGENT -e STEALTH_MASK_LINUX -e STEALTH_LOCALE -e HEADLESS -e TIMEOUT -e NAVIGATION_TIMEOUT -e SCREENSHOT_STORAGE_PATH -e VIDEO_STORAGE_PATH -e PROXY_URL -e PROXY_USERNAME -e PROXY_PASSWORD -e PROXY_BYPASS -e BROWSER_PERMISSIONS -e IGNORE_HTTPS_ERRORS node:22-alpine sh -c 'npx -y supergateway@4 --stdio '"'"'npx -y [email protected]'"'"' --outputTransport streamableHttp --stateful --host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz'
generated from the record, not tested yet
# Generated by Hub for toolset "my-agent" (2026-10-18T09:56:57+00:00).
# Each package server runs behind a stdio->HTTP bridge and listens on localhost only.
# cp .env.example .env # fill the ${VAR}s
# docker compose up -d && bash smoke.sh
# Remote servers are not here: clients reach them directly (see clients/).
name: mcp-my-agent
services:
playwright-stealth:
image: node:22-alpine
command:
- sh
- -c
- npx -y supergateway@4 --stdio 'npx -y [email protected]' --outputTransport streamableHttp
--stateful --host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz
ports:
- 127.0.0.1:8101:8000
volumes:
- npm-cache:/root/.npm
healthcheck:
test:
- CMD-SHELL
- wget -qO- http://127.0.0.1:8000/healthz || exit 1
interval: 30s
timeout: 5s
retries: 5
start_period: 2m
restart: unless-stopped
environment:
STEALTH_MODE: ${STEALTH_MODE}
STEALTH_USER_AGENT: ${STEALTH_USER_AGENT}
STEALTH_MASK_LINUX: ${STEALTH_MASK_LINUX}
STEALTH_LOCALE: ${STEALTH_LOCALE}
HEADLESS: ${HEADLESS}
TIMEOUT: ${TIMEOUT}
NAVIGATION_TIMEOUT: ${NAVIGATION_TIMEOUT}
SCREENSHOT_STORAGE_PATH: ${SCREENSHOT_STORAGE_PATH}
VIDEO_STORAGE_PATH: ${VIDEO_STORAGE_PATH}
PROXY_URL: ${PROXY_URL}
PROXY_USERNAME: ${PROXY_USERNAME}
PROXY_PASSWORD: ${PROXY_PASSWORD}
PROXY_BYPASS: ${PROXY_BYPASS}
BROWSER_PERMISSIONS: ${BROWSER_PERMISSIONS}
IGNORE_HTTPS_ERRORS: ${IGNORE_HTTPS_ERRORS}
volumes:
npm-cache: {}
uv-cache: {}
generated from the record, not tested yet
# Generated by Hub for toolset "my-agent" (2026-10-18T09:56:57+00:00).
# kubectl create namespace mcp
# kubectl -n mcp create secret generic mcp-credentials --from-env-file=.env
# kubectl apply -f kubernetes.yaml
# Services are cluster-internal: <name>.mcp.svc.cluster.local:8000/mcp. Put an ingress
# with auth in front before exposing any of them.
apiVersion: v1
kind: Namespace
metadata:
name: mcp
---
apiVersion: apps/v1
kind: Deployment
metadata:
name: playwright-stealth
namespace: mcp
labels: &id001
app: playwright-stealth
spec:
replicas: 1
selector:
matchLabels: *id001
template:
metadata:
labels: *id001
spec:
containers:
- name: playwright-stealth
image: node:22-alpine
ports:
- containerPort: 8000
name: http
env:
- name: STEALTH_MODE
valueFrom:
secretKeyRef:
name: mcp-credentials
key: STEALTH_MODE
- name: STEALTH_USER_AGENT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: STEALTH_USER_AGENT
- name: STEALTH_MASK_LINUX
valueFrom:
secretKeyRef:
name: mcp-credentials
key: STEALTH_MASK_LINUX
- name: STEALTH_LOCALE
valueFrom:
secretKeyRef:
name: mcp-credentials
key: STEALTH_LOCALE
- name: HEADLESS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: HEADLESS
- name: TIMEOUT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: TIMEOUT
- name: NAVIGATION_TIMEOUT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: NAVIGATION_TIMEOUT
- name: SCREENSHOT_STORAGE_PATH
valueFrom:
secretKeyRef:
name: mcp-credentials
key: SCREENSHOT_STORAGE_PATH
- name: VIDEO_STORAGE_PATH
valueFrom:
secretKeyRef:
name: mcp-credentials
key: VIDEO_STORAGE_PATH
- name: PROXY_URL
valueFrom:
secretKeyRef:
name: mcp-credentials
key: PROXY_URL
- name: PROXY_USERNAME
valueFrom:
secretKeyRef:
name: mcp-credentials
key: PROXY_USERNAME
- name: PROXY_PASSWORD
valueFrom:
secretKeyRef:
name: mcp-credentials
key: PROXY_PASSWORD
- name: PROXY_BYPASS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: PROXY_BYPASS
- name: BROWSER_PERMISSIONS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: BROWSER_PERMISSIONS
- name: IGNORE_HTTPS_ERRORS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: IGNORE_HTTPS_ERRORS
command:
- sh
- -c
- npx -y supergateway@4 --stdio 'npx -y [email protected]' --outputTransport
streamableHttp --stateful --host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint
/healthz
readinessProbe:
httpGet:
path: /healthz
port: http
initialDelaySeconds: 10
---
apiVersion: v1
kind: Service
metadata:
name: playwright-stealth
namespace: mcp
spec:
selector:
app: playwright-stealth
ports:
- port: 8000
targetPort: http
name: http
generated from the record, not tested yet
# Generated by Hub for toolset "my-agent" (2026-10-18T09:56:57+00:00).
# Credentials come from the Secret 'mcp-credentials' (kubectl create secret generic ... --from-env-file=.env).
# Each server under `servers` is one Deployment + Service; the keys after it configure
# upstream charts a worker verified.
servers:
playwright-stealth:
enabled: true
replicas: 1
port: 8000
path: /mcp
container:
name: playwright-stealth
image: node:22-alpine
ports:
- containerPort: 8000
name: http
env:
- name: STEALTH_MODE
valueFrom:
secretKeyRef:
name: mcp-credentials
key: STEALTH_MODE
- name: STEALTH_USER_AGENT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: STEALTH_USER_AGENT
- name: STEALTH_MASK_LINUX
valueFrom:
secretKeyRef:
name: mcp-credentials
key: STEALTH_MASK_LINUX
- name: STEALTH_LOCALE
valueFrom:
secretKeyRef:
name: mcp-credentials
key: STEALTH_LOCALE
- name: HEADLESS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: HEADLESS
- name: TIMEOUT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: TIMEOUT
- name: NAVIGATION_TIMEOUT
valueFrom:
secretKeyRef:
name: mcp-credentials
key: NAVIGATION_TIMEOUT
- name: SCREENSHOT_STORAGE_PATH
valueFrom:
secretKeyRef:
name: mcp-credentials
key: SCREENSHOT_STORAGE_PATH
- name: VIDEO_STORAGE_PATH
valueFrom:
secretKeyRef:
name: mcp-credentials
key: VIDEO_STORAGE_PATH
- name: PROXY_URL
valueFrom:
secretKeyRef:
name: mcp-credentials
key: PROXY_URL
- name: PROXY_USERNAME
valueFrom:
secretKeyRef:
name: mcp-credentials
key: PROXY_USERNAME
- name: PROXY_PASSWORD
valueFrom:
secretKeyRef:
name: mcp-credentials
key: PROXY_PASSWORD
- name: PROXY_BYPASS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: PROXY_BYPASS
- name: BROWSER_PERMISSIONS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: BROWSER_PERMISSIONS
- name: IGNORE_HTTPS_ERRORS
valueFrom:
secretKeyRef:
name: mcp-credentials
key: IGNORE_HTTPS_ERRORS
command:
- sh
- -c
- npx -y supergateway@4 --stdio 'npx -y [email protected]' --outputTransport streamableHttp
--stateful --host 0.0.0.0 --port 8000 --streamableHttpPath /mcp --healthEndpoint /healthz
readinessProbe:
httpGet:
path: /healthz
port: http
initialDelaySeconds: 10
# helm install my-agent helm/my-agent -n mcp
in the cloud
one click: the provider's deploy form opens filled in, in your own account- koyeb
-
The form opens with CHANGE_ME for each value you supply: STEALTH_MODE, STEALTH_USER_AGENT, STEALTH_MASK_LINUX, STEALTH_LOCALE, HEADLESS, TIMEOUT, NAVIGATION_TIMEOUT, SCREENSHOT_STORAGE_PATH, VIDEO_STORAGE_PATH, PROXY_URL, PROXY_USERNAME, PROXY_PASSWORD, PROXY_BYPASS, BROWSER_PERMISSIONS, IGNORE_HTTPS_ERRORS. Fill them in before you deploy.
Clients connect to the service's https://…koyeb.app address plus /mcp.
- azure
-
A Container Apps environment with one app per server, each with HTTPS ingress and one replica. The portal asks for each value you supply as a secure parameter; the deployment's outputs list the endpoints.
connect to it
copy what your client needsnpx -y [email protected] # env: STEALTH_MODE, STEALTH_USER_AGENT, STEALTH_MASK_LINUX, STEALTH_LOCALE, HEADLESS, TIMEOUT, NAVIGATION_TIMEOUT, SCREENSHOT_STORAGE_PATH, VIDEO_STORAGE_PATH, PROXY_URL, PROXY_USERNAME, PROXY_PASSWORD, PROXY_BYPASS, BROWSER_PERMISSIONS, IGNORE_HTTPS_ERRORS
{
"mcpServers": {
"playwright-stealth": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"STEALTH_MODE": "${STEALTH_MODE}",
"STEALTH_USER_AGENT": "${STEALTH_USER_AGENT}",
"STEALTH_MASK_LINUX": "${STEALTH_MASK_LINUX}",
"STEALTH_LOCALE": "${STEALTH_LOCALE}",
"HEADLESS": "${HEADLESS}",
"TIMEOUT": "${TIMEOUT}",
"NAVIGATION_TIMEOUT": "${NAVIGATION_TIMEOUT}",
"SCREENSHOT_STORAGE_PATH": "${SCREENSHOT_STORAGE_PATH}",
"VIDEO_STORAGE_PATH": "${VIDEO_STORAGE_PATH}",
"PROXY_URL": "${PROXY_URL}",
"PROXY_USERNAME": "${PROXY_USERNAME}",
"PROXY_PASSWORD": "${PROXY_PASSWORD}",
"PROXY_BYPASS": "${PROXY_BYPASS}",
"BROWSER_PERMISSIONS": "${BROWSER_PERMISSIONS}",
"IGNORE_HTTPS_ERRORS": "${IGNORE_HTTPS_ERRORS}"
}
}
}
}
#!/usr/bin/env bash
# Registers every server with Claude Code (run once; `claude mcp list` to check).
set -euo pipefail
set -a; [ -f .env ] && source .env; set +a
claude mcp add playwright-stealth -e "STEALTH_MODE=${STEALTH_MODE}" -e "STEALTH_USER_AGENT=${STEALTH_USER_AGENT}" -e "STEALTH_MASK_LINUX=${STEALTH_MASK_LINUX}" -e "STEALTH_LOCALE=${STEALTH_LOCALE}" -e "HEADLESS=${HEADLESS}" -e "TIMEOUT=${TIMEOUT}" -e "NAVIGATION_TIMEOUT=${NAVIGATION_TIMEOUT}" -e "SCREENSHOT_STORAGE_PATH=${SCREENSHOT_STORAGE_PATH}" -e "VIDEO_STORAGE_PATH=${VIDEO_STORAGE_PATH}" -e "PROXY_URL=${PROXY_URL}" -e "PROXY_USERNAME=${PROXY_USERNAME}" -e "PROXY_PASSWORD=${PROXY_PASSWORD}" -e "PROXY_BYPASS=${PROXY_BYPASS}" -e "BROWSER_PERMISSIONS=${BROWSER_PERMISSIONS}" -e "IGNORE_HTTPS_ERRORS=${IGNORE_HTTPS_ERRORS}" -- npx -y [email protected]
{
"mcpServers": {
"playwright-stealth": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"STEALTH_MODE": "${STEALTH_MODE}",
"STEALTH_USER_AGENT": "${STEALTH_USER_AGENT}",
"STEALTH_MASK_LINUX": "${STEALTH_MASK_LINUX}",
"STEALTH_LOCALE": "${STEALTH_LOCALE}",
"HEADLESS": "${HEADLESS}",
"TIMEOUT": "${TIMEOUT}",
"NAVIGATION_TIMEOUT": "${NAVIGATION_TIMEOUT}",
"SCREENSHOT_STORAGE_PATH": "${SCREENSHOT_STORAGE_PATH}",
"VIDEO_STORAGE_PATH": "${VIDEO_STORAGE_PATH}",
"PROXY_URL": "${PROXY_URL}",
"PROXY_USERNAME": "${PROXY_USERNAME}",
"PROXY_PASSWORD": "${PROXY_PASSWORD}",
"PROXY_BYPASS": "${PROXY_BYPASS}",
"BROWSER_PERMISSIONS": "${BROWSER_PERMISSIONS}",
"IGNORE_HTTPS_ERRORS": "${IGNORE_HTTPS_ERRORS}"
}
}
}
}
{
"servers": {
"playwright-stealth": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"STEALTH_MODE": "${STEALTH_MODE}",
"STEALTH_USER_AGENT": "${STEALTH_USER_AGENT}",
"STEALTH_MASK_LINUX": "${STEALTH_MASK_LINUX}",
"STEALTH_LOCALE": "${STEALTH_LOCALE}",
"HEADLESS": "${HEADLESS}",
"TIMEOUT": "${TIMEOUT}",
"NAVIGATION_TIMEOUT": "${NAVIGATION_TIMEOUT}",
"SCREENSHOT_STORAGE_PATH": "${SCREENSHOT_STORAGE_PATH}",
"VIDEO_STORAGE_PATH": "${VIDEO_STORAGE_PATH}",
"PROXY_URL": "${PROXY_URL}",
"PROXY_USERNAME": "${PROXY_USERNAME}",
"PROXY_PASSWORD": "${PROXY_PASSWORD}",
"PROXY_BYPASS": "${PROXY_BYPASS}",
"BROWSER_PERMISSIONS": "${BROWSER_PERMISSIONS}",
"IGNORE_HTTPS_ERRORS": "${IGNORE_HTTPS_ERRORS}"
}
}
}
}
name: my-agent target: local servers: - hub: com.pulsemcp/playwright-stealth
- not probed yet: tools unpinned, ingest lists them
tools
Not probed yetThe tools appear once the hub or its worker has listed this entry. Running it still works: your client lists them on first start.