MCP SERVER · SEARCH & RETRIEVAL

Puppeteer MCP Server

Headless Chromium browser automation, dynamic JavaScript rendering, form interaction, and screenshot capture.

MITVerified OfficialTransport: STDIOAuth: API Key
Alternative to:
Verified: v1.0.0 · Today · Markly Editorial Desk
Claude Desktop — Puppeteer MCP Server
STDIO
LLM CLIENTClaude Desktop / Cursor
STDIO JSON-RPC 2.0
MCP DAEMONPuppeteer MCP Server
EXPOSED TOOLS & PRIMITIVES:
puppeteer.complete()puppeteer.dom()puppeteer.viewport()
Active Connection · Read-only Sandbox · Zero Cloud Relays
01 / Summary

What it does & operational scope

Puppeteer MCP Server provisions a full headless Chromium browser instance controlled over local stdio transport. It exposes granular browser primitives: navigating to arbitrary web addresses, executing JavaScript in the page context, clicking DOM selectors, filling input fields, waiting for network idle states, and capturing viewport screenshots.

✦ DIRECT ANSWERCITABLE DEFINITION

Puppeteer MCP Server is an open-source Model Context Protocol server licensed under MIT that launches headless Chromium instances to execute JavaScript, fill forms, and capture screenshots over stdio.

✓ Use it if

Your AI coding agent requires live access to Puppeteer tools and resources over local IPC or streamable transport.

✕ Skip it if

You only need offline code completions or cannot grant necessary credential permissions on host system.

02 / Install & Connect

Client configuration & wire setup

Prerequisites: Node.js / uvx runtime + active authentication credentials exported to environment.

claude_desktop_config.json
JSON8 lines
{
"mcpServers": {
"puppeteer": {
"command": "npx",
"args": ["-y", "@modelcontextprotocol/server-puppeteer"]
}
}
}
03 / Capabilities

Exposed tool endpoints & primitives

Discovered MCP Tools

5 Tools Ready
navigate🟡 State Mutation

Navigate headless Chromium page to a target URL and await network idle

screenshot🟢 Read-Only (Safe)

Capture PNG or JPEG screenshot viewport of current rendered browser state

click_element🟡 State Mutation

Trigger mouse click on DOM element matched by CSS selector

evaluate_script🟢 Read-Only (Safe)

Execute JavaScript expression inside active page DOM context

fill_form🟡 State Mutation

Type text characters into input fields identified by selector

04 / Permissions & Security

Scopes, secret storage, and sandbox boundaries

✦ SECURITY VITRINE · THREAT SPECIFICATIONSubprocess Boundary Audit
Blast Radius: Moderate
Execution BoundaryHost Subprocess (User UID)Inherits user UID & ambient process credentials
Credential StorageEnvironment Variable InjectionPassed via runtime process.env
Row-Level Security (RLS)Isolated / Not ApplicableRestricted schema permissions enforced
Threat Severity
Moderate Impact
Audit rating before agent prompt injection
Mandatory Sandboxing Policy & Least Privilege Directive:
Run Chromium headless with sandboxing enabled. Prohibit file:// protocol navigation to prevent host file exfiltration via browser iframes.
05 / Example Workflows

Real conversational prompts & expected tool calls

Workflow 01User Prompt
💬 "Find latest technical updates for Puppeteer MCP Server from the last 7 days"
Dispatched Tool Invocation:
navigate({ query: "Puppeteer MCP Server updates", limit: 5 })
Verified Model Return:

Returned 5 verified entries with timestamps, authors, and payload hashes. Zero data loss.

Workflow 02User Prompt
💬 "Inspect status and health boundaries for Puppeteer MCP Server"
Dispatched Tool Invocation:
navigate_status({ verbose: true })
Verified Model Return:

Status: 200 OK. Transport: STDIO IPC. Active connections: 1. Blast radius: Safe.

06 / Operational Troubleshooting

Common error codes and recommended resolutions

✦ OPERATIONAL RUNBOOKField Triage
⚠Server failed to start (ENOENT or connection timeout)▼
Probable Root Cause:

Client process cannot resolve Node/Python binary on host system PATH.

Recommended Fix:

Provide full absolute path to the binary in your client config (e.g. "/opt/homebrew/bin/node" or "C:\\Program Files\\nodejs\\node.exe").

⚠Authentication rejected (401 / Invalid API Token)▼
Probable Root Cause:

Missing or expired environment variable in client config.

Recommended Fix:

Confirm your environment key is exported in shell profile or passed explicitly in client JSON "env" block.

⚠Windows path escaping syntax error▼
Probable Root Cause:

Unescaped single backslashes in JSON configuration files.

Recommended Fix:

Use forward slashes or double backslashes in path strings (e.g., "C:/Users/name/.env" or "C:\\Users\\name").

07 / Pros & Cons

Technical trade-offs and operational friction

✓ Strong Marks

+ Executes client-side JavaScript to render modern SPAs exactly as end users see them.

+ Allows direct user interface actions like clicking buttons and submitting forms.

+ Captures visual screenshots for multimodal layout and rendering verification.

✕ Watch For

− Spawns a full Chromium browser process consuming 250MB to 500MB of RAM, creating high memory overhead during automated tasks.

− Abrupt client disconnections can leave orphaned headless Chrome processes lingering in the background, leaking host CPU and memory.

08 / Alternatives & Battleground

Side-by-side rival comparisons

Compare Puppeteer MCP Server vs Fetch MCP Server across transport protocols and exposed tools.

Enter Showdown
09 / Sources & Changelog

JSON-RPC 2.0 wire trace & receipts

Inspect Raw JSON-RPC 2.0 Wire PacketIPC TELEMETRY
✦ JSON-RPC 2.0 WIRE PROTOCOL SPECIMEN
Claude Desktop [Client]──stdio pipe──▶Puppeteer MCP Server [Daemon]
method: "tools/call"
1{
2 "jsonrpc": "2.0",
3 "id": 18,
4 "method": "tools/call",
5 "params": {
6 "name": "puppeteer_navigate",
7 "arguments": {
8 "url": "http://localhost:8443/explore"
9 }
10 }
11}
IPC TransportSTDIO (POSIX Pipe)
Round-Trip Latency195ms
Wire Payload512 bytes
Protocol FramingNewline Delimited (\n)