P
MCP server · Browser
Govern the Playwright MCP server.
The Playwright/browser MCP server lets an agent drive a real browser. Allow-list domains and deny logins, downloads, and form submits to unknown sites.
Per-tool policy
An MCP server is a bag of tools. Enable them one at a time.
Connect Playwright once; HiveKey gates each tool per role. Read-only by default, writes on purpose, destructive ops denied.
mcp / playwright governed
navigate allow
read_page allow
click allow
fill_form review
download review
submit (off-allow-list) deny
Browse allow-listed domains; review form fills and downloads; deny off-list submits.
In the path
HiveKey sits between the agent and Playwright.
Agent
wants a tool call
HiveKey
scope · guard · log
Playwright MCP
only allowed tools
Put the Playwright MCP server under one policy.
Connect Playwright, gate each tool per role, and log every call — across your whole agent fleet.