Windows computer-use MCP server (26 tools) with a human-in-the-loop approval gate: physical-input-only dialogs, signed guard switches, deny/launch lists, hash-chained audit log. 70+ unit tests, green
Give your agent hands — without giving away the keys.
A Windows computer-use MCP server where every risky action stops and waits for a real human — a physical keystroke or click, which injected input, posted window messages and UIAutomation invocations cannot fake. 26 tools: screenshot, mouse, keyboard, UI Automation, OCR, windows, clipboard.
Windows 10/11 · Node ≥ 18 · one runtime dependency (the official MCP SDK).
Clicking Send, closing a window or pressing alt+f4 pops a dialog that only a physical key or click can answer; password managers, banking pages and shells are refused outright, and every action lands in a hash-chained audit.jsonl. It is still not a sandbox — read SECURITY.md before pointing it at anything that matters, and Install for the full setup.
[!WARNING] This server moves your real mouse and keyboard, with your user's privileges, on your real desktop. There is no sandbox and no undo.
It can send messages as you, delete files, and read everything on your screen — and what it reads is transmitted to your model provider.
The approval gate and the policy lists reduce the blast radius. They do not eliminate it. Read Risks and disclaimer before you point an agent at this.
Most computer-use tools hand the model a keyboard and hope for the best. That is fine until the model mis-clicks into a chat window, an email, or a payment page — and there is no undo.
This one puts a gate in front of the dangerous part:
From the project README.
Add the radar badge to your README — it shows your project was picked up by MCP Radar and links to this page:
[](https://mcp.liqiwa.com/s/be1st6666--guarded-computer-use-mcp.html)
Give your AI its own Windows desktop session while you keep using yours. Local viewer, CLI and MCP. Experimental preview for Windows 11.
farshadmomo/lan-directSkill + browser MCP for Claude Code and Codex: your app and browser reach domestic services over the real ISP while the agent stays on the VPN. Per-socket binding, per-host routing, no admin, nothing
mrpulor-gh/nuphus-mcpDesktop automation MCP server — computer use for any AI agent: control screen, windows, mouse/keyboard, and Chrome via Model Context Protocol (stdio)
NotNull92/workforge-mcpWorkForge is a Windows MCP gateway that lets ChatGPT inspect files, resume Git work, make SHA-guarded edits, read images, and run supervised PowerShell jobs.
AIYantra/extraThe Open-Source Astra 6 for your PC. Your AI can see, click, type, navigate, and get real work done on Windows.
DigitalDog1/desk-mcpWindows desktop automation MCP server - screenshots, OCR, mouse and keyboard, and accessibility trees via UI Automation, MSAA and Chrome DevTools Protocol. Node.js + built-in PowerShell, no Python and
The top new MCP servers of the week, every Monday. No spam, unsubscribe anytime.