Agent-readable docs index: /llms.txt. Full docs in one file: /llms-full.txt. Download /docs.zip to grep all markdown files locally.

Remote Control Security

Remote control shares your Chrome with a person or agent. The link is a secret. Anyone who has it gets the same access as a local Playwriter agent.
Only share it with people you fully trust.

What you give away

The recipient can use every tab where Playwriter is enabled, and it can open new tabs. New tabs open in the background, in the agent's remote tab group. In those tabs it can see and use:
  • Screenshots of the page
  • Page content, URLs, and what you type
  • Clicks, scrolls, and other input
  • Network data, cookies, and site storage
This is not a sandbox. Playwriter blocks only whole-profile cookie APIs and cache clears, so an agent cannot wipe every login by accident. It does not make a malicious recipient safe.
   Your Chrome                         playwriter.dev                    Recipient
  ┌──────────────────────┐            ┌────────────────┐            ┌────────────────┐
  │  Playwriter tabs     │            │  Encrypted     │            │  Agent CLI or  │
  │  Remote ON           │ ──────────> │  tunnel        │ ──────────> │  live viewer   │
  │                      │            │  (in memory)   │            │                │
  └──────────────────────┘            └────────────────┘            └────────────────┘
          ^                                                                   │
          └────────── CDP commands, frames, cookies, page data <──────────────┘

How sharing starts

  1. Click Remote control in the toolbar
  2. Read the short confirm and optionally Read more (this page)
  3. Click Share. Playwriter copies an agent prompt that includes the secret URL
The same URL is also a live view. Open it in any browser to watch the tab where sharing started.

How to revoke

Open the Remote ON dropdown in any Playwriter tab and click Stop sharing. The link dies at once and is never reused. Tabs the agent opened are detached from Playwriter and left open.
The share also ends if you close or disconnect the tab where you started it, or close Chrome.
Treat the URL like a password. Do not paste it in public channels, issues, or logs.

What Playwriter does not do

  • It does not store tunnel payloads. Frames are relayed in memory.
  • It does not send your Google account email or install id in the handshake.
  • The secret sits in the URL fragment (#id), so the first viewer-page request omits it. The viewer then connects to the tunnel host, which the tunnel service and Cloudflare process.
Cloudflare can still see connection metadata. Read the privacy policy before sharing a sensitive tab.

Full relay access

Remote control runs from the extension, with no local CLI install.
Exposing your entire relay (playwriter serve plus a tunnel) is a different mode with the same tab access. It needs a token and a local relay. See Remote access.