Local MCP server that gives any AI agent safe cross-OS desktop control — the fallback execution layer for when APIs, CLIs, and direct integrations aren't available. Works with any tool-calling model (Claude, GPT, Gemini, Llama) on Windows, macOS, and Linu
Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
a11y_expandExpand a tree node, combo box, or disclosure element by accessibility name.Expand a tree node, combo box, or disclosure element by accessibility name.
No input schema was published for this tool.
a11y_collapseCollapse a tree node, combo box, or disclosure element by accessibility name.Collapse a tree node, combo box, or disclosure element by accessibility name.
No input schema was published for this tool.
set_field_valueSet the value of a named text field directly via accessibility — moreSet the value of a named text field directly via accessibility — more
No input schema was published for this tool.
a11y_toggleToggle a checkbox, switch, or toggle-button by accessibility name.Toggle a checkbox, switch, or toggle-button by accessibility name.
No input schema was published for this tool.
a11y_selectSelect a list item, tab, or radio button by accessibility name.Select a list item, tab, or radio button by accessibility name.
No input schema was published for this tool.
a11y_get_elementFetch a single element by accessibility name — returns name, role,Fetch a single element by accessibility name — returns name, role,
No input schema was published for this tool.
a11y_get_valueRead the current value of a named text field, slider, or editable elementRead the current value of a named text field, slider, or editable element
No input schema was published for this tool.
get_element_stateReturn only the state flags of a named element (focused, enabled/disabled,Return only the state flags of a named element (focused, enabled/disabled,
No input schema was published for this tool.
a11y_list_childrenList a11y elements geometrically contained within a named parent element.List a11y elements geometrically contained within a named parent element.
No input schema was published for this tool.
read_screenSTART HERE — cheapest perception. Read the accessibility tree of the screen: returns WINDOWS, FOCUSED WINDOW UI TREE (buttons, inputs, text elements with coordinates), and FOCUSED ELEMENT. If the focused window is a browser with CDP attached, also appends a BROWSER DOM section for canvas/SPA conten…START HERE — cheapest perception. Read the accessibility tree of the screen: returns WINDOWS, FOCUSED WINDOW UI TREE (buttons, inputs, text elements with coordinates), and FOCUSED ELEMENT. If the focused window is a browser with CDP attached, also appends a BROWSER DOM section for canvas/SPA conten…
No input schema was published for this tool.
get_windowsList all visible windows with their title, process name, PID, and bounds.List all visible windows with their title, process name, PID, and bounds.
No input schema was published for this tool.
get_active_windowGet the currently focused/foreground window.Get the currently focused/foreground window.
No input schema was published for this tool.
get_focused_elementGet the currently focused UI element (keyboard focus). Returns name, control type, value, bounds, and process ID.Get the currently focused UI element (keyboard focus). Returns name, control type, value, bounds, and process ID.
No input schema was published for this tool.
focus_windowBring a window to the foreground. Matches by process name, PID, or title substring. Verifies focus after attempt.Bring a window to the foreground. Matches by process name, PID, or title substring. Verifies focus after attempt.
No input schema was published for this tool.
find_elementSearch for UI elements by name, control type, or automation ID within a process. Returns matching elements with bounds. For browser windows with CDP attached, falls back to a DOM query when UIA returns empty so canvas / SPA content is reachable too (results are flagged with a "via CDP DOM" header a…Search for UI elements by name, control type, or automation ID within a process. Returns matching elements with bounds. For browser windows with CDP attached, falls back to a DOM query when UIA returns empty so canvas / SPA content is reachable too (results are flagged with a "via CDP DOM" header a…
No input schema was published for this tool.
read_clipboardRead the current text content of the OS clipboard.Read the current text content of the OS clipboard.
No input schema was published for this tool.
write_clipboardprivilegedWrite text to the OS clipboard. Tier 2 (mutation): overwrites the user's clipboard, which can hijack subsequent copy/paste flows. Reversibility is via a fresh user-initiated copy, not by the agent.Write text to the OS clipboard. Tier 2 (mutation): overwrites the user's clipboard, which can hijack subsequent copy/paste flows. Reversibility is via a fresh user-initiated copy, not by the agent.
No input schema was published for this tool.
minimize_windowMinimize a window. Matches by process name, PID, or title. Cross-platform: Windows (ShowWindow), macOS (miniaturize), Linux (wmctrl/xdotool).Minimize a window. Matches by process name, PID, or title. Cross-platform: Windows (ShowWindow), macOS (miniaturize), Linux (wmctrl/xdotool).
No input schema was published for this tool.
submit_taskSubmit a natural-language task to the autonomous agent. The agentSubmit a natural-language task to the autonomous agent. The agent
No input schema was published for this tool.
abort_taskSignal the running task to abort. The pipeline checks `isAborted()`Signal the running task to abort. The pipeline checks `isAborted()`
No input schema was published for this tool.
agent_statusReturn the autonomous agent's current state: status (idle | thinking |Return the autonomous agent's current state: status (idle | thinking |
No input schema was published for this tool.
screenshot_fullCapture the full primary display. Returns base64 image bytes plus aCapture the full primary display. Returns base64 image bytes plus a
No input schema was published for this tool.
task_logs_listList the last 50 task summaries from the daemon's structured log.List the last 50 task summaries from the daemon's structured log.
No input schema was published for this tool.
task_logs_currentReturn the structured log entries for the currently-executing taskReturn the structured log entries for the currently-executing task
No input schema was published for this tool.
batchRun SEVERAL known next actions in ONE call instead of one per turn (saves round-trips).Run SEVERAL known next actions in ONE call instead of one per turn (saves round-trips).
No input schema was published for this tool.
cdp_connectNo description publishedThis tool published no description. Forge does not invent one.
cdp_page_contextGet a structured list of interactive elements on the current browser page (inputs, buttons, links with selectors and positions).Get a structured list of interactive elements on the current browser page (inputs, buttons, links with selectors and positions).
No input schema was published for this tool.
cdp_read_textRead text content from a DOM element. Useful for extracting information from web pages.Read text content from a DOM element. Useful for extracting information from web pages.
No input schema was published for this tool.
cdp_clickClick a DOM element by CSS selector or by visible text content.Click a DOM element by CSS selector or by visible text content.
No input schema was published for this tool.
cdp_typeType text into a DOM input field by CSS selector or by associated label text.Type text into a DOM input field by CSS selector or by associated label text.
No input schema was published for this tool.
cdp_select_optionSelect an option in a <select> dropdown by value or visible text.Select an option in a <select> dropdown by value or visible text.
No input schema was published for this tool.
cdp_evaluateExecute JavaScript in the browser page context. Returns the result.Execute JavaScript in the browser page context. Returns the result.
No input schema was published for this tool.
cdp_wait_for_selectorWait for a DOM element matching a CSS selector to appear and become visible.Wait for a DOM element matching a CSS selector to appear and become visible.
No input schema was published for this tool.
cdp_list_tabsList all open browser tabs with their URLs and titles.List all open browser tabs with their URLs and titles.
No input schema was published for this tool.
cdp_switch_tabSwitch CDP connection to a different browser tab by URL or title substring.Switch CDP connection to a different browser tab by URL or title substring.
No input schema was published for this tool.
cdp_scrollScroll the browser page via DOM (window.scrollBy). Works regardless of mouse position — use for reliable page scrolling.Scroll the browser page via DOM (window.scrollBy). Works regardless of mouse position — use for reliable page scrolling.
No input schema was published for this tool.
computerDirect mouse/keyboard/screenshot control (Anthropic Computer-Use style).Direct mouse/keyboard/screenshot control (Anthropic Computer-Use style).
No input schema was published for this tool.
accessibilityInteract with the OS accessibility tree — read element names, find by name/role, invoke, toggle, expand/collapse, set value, query state.Interact with the OS accessibility tree — read element names, find by name/role, invoke, toggle, expand/collapse, set value, query state.
No input schema was published for this tool.
windowWindow, app, and display management. Open/focus/maximize/minimize/restore/close/resize windows; enumerate displays; switch browser tabs at the OS level; open apps/files/URLs.Window, app, and display management. Open/focus/maximize/minimize/restore/close/resize windows; enumerate displays; switch browser tabs at the OS level; open apps/files/URLs.
No input schema was published for this tool.
systemSystem integration — clipboard read/write, system time, OCR screen-reading, undo shortcut, named shortcuts registry, delegate to a sub-agent.System integration — clipboard read/write, system time, OCR screen-reading, undo shortcut, named shortcuts registry, delegate to a sub-agent.
No input schema was published for this tool.
39 of 40 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Local MCP server that gives any AI agent safe cross-OS desktop control — the fallback execution layer for when APIs, CLIs, and direct integrations aren't available. Works with any tool-calling model (Claude, GPT, Gemini, Llama) on Windows, macOS, and Linu
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the 60-package limit. The rest of the tree was never resolved.
36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
82 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+70 more not listed. The counts by reason above cover all of them.
Not followed: peerDependencies, optionalDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.