Observed MCP server

computer-use

Provides a JSON-RPC computer use runtime for macOS, exposing 7 MCP tools (observe/act/inspect/session/cancel/trace) as image content blocks so external agents like Claude Code, Pi, OpenCode, or Codex CLI can capture screenshots and drive the desktop with clicks, keys, and typing while enforcing session locking, stale-frame protection, and trace redaction server-side.

Security score

—/100

Awaiting a completed comparable scan.

Seven-category assessment pending: authentication, tool poisoning, prompt injection, dangerous capabilities, dependency risk, data exfiltration, and transport security.

Score history

Pending

Immutable methodology-versioned snapshots

Schema drift

Pending

No normalized tool schema observed

Fingerprint

Pending

Repository/package-backed identity

Public findings

No public findings recorded

This is not a safety claim. Check the coverage and revision status before relying on absence of findings.