MCP Virtual Computer MCP server

MCP Virtual Computer

<!-- mcp-name: io.github.flujo-app/mcp-virtual-computer -->

A VM for your agent. And for you.

• click the mug to switch between a virtual desktop or a real one
• unplug the network cable and cut network access
• use the computer screen like a normal screen
• copy and paste text between the host browser and the Xfce desktop
• model can use terminal, create/read/edit files, see the screen, click, type
• little fun thing: if either you or the llm types text, you see that on the keyboard; if one uses the cursor, you see the mouse move on the table.
• automatically installs Docker Desktop on Windows for local mode, or flyctl for Fly mode

MCP client example

Local Docker (default)

{
  "mcpServers": {
    "virtual-computer": {
      "command": "uvx",
      "args": ["mcp-virtual-computer"],
      "env": {
        "COMPUTER_ID": "agent-workstation",
        "DESKTOP_ENVIRONMENT": "true",
        "NETWORK_ACCESS": "true",
        "AUTO_INSTALL_DOCKER": "true",
        "EXPOSE_LIFECYCLE_TOOLS": "false"
      }
    }
  }
}

Fly.io Machine

On a fresh machine, start the MCP once, run the exact flyctl auth login command shown by its error, and restart the MCP client

{
  "mcpServers": {
    "virtual-computer-fly": {
      "command": "uvx",
      "args": ["mcp-virtual-computer", "--backend", "fly"],
      "env": {
        "COMPUTER_ID": "agent-workstation",
        "DESKTOP_ENVIRONMENT": "true",
        "NETWORK_ACCESS": "true",
        "AUTO_INSTALL_FLYCTL": "true",
        "EXPOSE_LIFECYCLE_TOOLS": "false"
      }
    }
  }
}

What it exposes

both the MCP App resourceuri and a real loopback url/dashboardurl that opens in an external browser, including for stdio clients.

• terminal_execute — run a command in the configured Docker container or Fly Machine.
• read_file — read a UTF-8 text file relative to /workspace or by absolute path.
• write_file — atomically write a UTF-8 text file.
• edit_file — replace one exact text match, or all matches when requested.
• computer_ui — open or attach the Three.js computer view. Its result includes

DESKTOP_ENVIRONMENT defaults to true. With the real desktop enabled it additionally exposes:

• lookatscreen — return the current PNG framebuffer, AT-SPI snapshot, or both.
• click, type, and scroll — interact by AT-SPI element reference or coordinates.
• listwindows and switchwindow — enumerate and activate real Xfce windows.
• movewindow, maximizewindow, restorewindow, minimizewindow, and close_window — control a selected window by ID, title, or class.
• computer://screen/current.png — current live framebuffer resource.
• computer://screen/accessibility.json — Playwright-like AT-SPI tree with element refs, roles, names, actions, focus state, and screen bounds.

The MCP App can always call runtimestatus, setnetworkaccess, and setdesktopenvironment. Set EXPOSELIFECYCLE_TOOLS=true to additionally expose those lifecycle controls to the model; they remain model-hidden by default.

Architecture

Demo: FLUJO

Demo: Claude Desktop

Demo: Goose

Permanent Fly Machine

Shortened. The full README is on GitHub.