ultranix-mcp server
io.github.jxoesneon/ultranix-mcp·v1.4.0Secure Linux desktop automation - input, screen/OCR/vision, AT-SPI2 UI tree, window, clipboard
0 stars
Reviews
Write oneNobody has reviewed ultranix-mcp yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
ultranix-mcp tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it
- –Code scanpackage could not be scannedn/a
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 16 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How ultranix-mcp compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 73/100
- higher than 39% of 48,255 servers
Install ultranix-mcp in Claude Code, Cursor or VS Code
claude mcp add ultranix-mcp -- docker run -i --rm ghcr.io/jxoesneon/ultranix-mcp:1.4.0
What the publisher says
From the ultranix-mcp repository's README, as published. We do not edit it. Read it on GitHub
ultranix-mcp
ultranix-mcp is the enterprise-grade, secure Linux desktop-automation layer for AI agents.It gives Model Context Protocol (MCP) clients - Claude Desktop, Claude Code, Cursor, Windsurf, and any MCP-enabled assistant - the ability to see, click, type, and drive a Wayland desktop: mouse, keyboard, screenshots, OCR, icon finding, window management, and accessibility-tree inspection.
ultranix-mcp is Wayland-native by design: compositor protocols first, uinput/evdev second, XDG Desktop Portals last - behind the same governance-and-trust surface as its siblings (ultramac on macOS, ultrawin on Windows): audit logging, rate limiting, input sanitization, and AES-256-GCM-encrypted action history. It is the first Linux desktop MCP to combine a cross-compositor fallback ladder, a full governance surface, and a tri-OS sibling contract - organisations can let agents control a Linux desktop without giving up control themselves.
Status:v1.4.0 implemented. Phases 0-5 of
ROADMAP.md have shipped, plus the v1.1.0 wave (layer-shell
overlay, X11-native providers, PipeWire portal capture, opt-in Sentry,
OCR cache, additional metrics), the v1.2.0 breadth wave (clipboard
tools, plugin tool-macros, screen_record, sway/Wayfire/river/KDE/GNOME
session detection, per-backend cargo features, framed history v2), the
v1.3.0 policy wave (runtime access-control policy with per-key
roles, --readonly/--allow-tools/--deny-tools, per-backend
invocation metrics, optional HMAC-signed audit lines), and the v1.4.0
reach wave (Wayfire/river/GNOME window rungs, live screen_stream
capture, plugin-exposed dynamic tools, OCI image + -bin package) - see
CHANGELOG.md for per-release notes. The verified target
environment is CachyOS (Arch) + Hyprland on Wayland, PipeWire,
xdg-desktop-portal-hyprland, and a live AT-SPI2 bus, on Rust 1.98.1.
Features
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
ultranix-mcp: common questions
- Is ultranix-mcp server safe?
- Mostly: it is graded B (73/100). Read the ultranix-mcp safety report
- How do I install ultranix-mcp?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does ultranix-mcp need an API key?
- Yes. The registry entry asks for
ULTRANIX_MCP_API_KEY,ULTRANIX_MCP_HISTORY_SECRET,ULTRANIX_MCP_SENTRY_DSN,ULTRANIX_MCP_AUDIT_SECRET. - Is ultranix-mcp maintained?
- The last commit was 48 days ago (2026-09-17). The latest release is v1.4.0.
- What can I use instead of ultranix-mcp?
- Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server and Mobilerun MCP server.
Alternatives to ultranix-mcp
Same job from other publishers: the closest match first, then the best rated.
- SSH — policy-gated remote accessPolicy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.not reviewedEstablishedB
- MobilerunLet AI agents control Android and iOS devices on Mobilerun Cloud: screen, input, apps, workflows.not reviewedEstablishedA