Umbriel MCP server
io.github.ObscuritySRL/umbriel·v1.14.0·3 starsSee and drive a whole Windows machine from Bun — apps, input, screen, OCR, registry, OS — via MCP.
3 stars71 downloads/wk
Reviews
Write oneNobody has reviewed Umbriel yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Umbriel tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.10 · 2026-11-08 · same rubric, same numbers if you re-run it
- Code scan44 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 86 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Umbriel compares
Against every graded Productivity MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 88/100
- higher than 75% of 1,293 Productivity servers
- GitHub stars
- 3
- more than 65% of 858 Productivity servers
- Downloads a week
- 71
- more than 41% of 488 Productivity servers with a package
Install Umbriel in Claude Code, Cursor or VS Code
Runs npx -y umbriel on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add umbriel -- npx -y umbriel
What the publisher says
From the Umbriel repository's README, as published. We do not edit it. Read it on GitHub
Umbriel · A set of hands for your AI agent — and Playwright for the Windows desktop
Drive any Windows app through five layers — fall back to OCR and pixel-matching when there's no other way in, see and manage windows even when they're hidden, use cursor-free semantic or posted input where Windows permits it, target controls by name and role, and reach past the GUI to drive the OS itself: processes, services, the registry, scheduled tasks, the firewall, network, power, displays, disks, environment, and the event log. Built for ChatGPT/Codex, Claude, and any AI agent that speaks MCP.
What is it?
Umbriel drives the Windows desktop the way a person would — through whatever channel actually works for the app in front of it:
- Pixels & OCR — when an app exposes no tree at all (canvas, custom-draw, games), fall back to full-screen capture, template matching, and text recognition.
- Semantic control — read the UI Automation tree an app exposes and target controls by name and role, not coordinates. Survives the DPI, layout, and theme changes that shatter pixel scripts.
- Sight & window control — capture the live pixels of any window (even fully GPU-composited or occluded), inspect raw HWND hierarchies, and move, raise, or size windows.
- Input routing — semantic UIA and posted-message input for background-capable controls, with a verified SendInput fallback only when an HWND-less editor or real pointer gesture actually needs the foreground.
- Drive the OS, not just GUIs — when the task is the machine, act on it directly: read and write the registry (values and keys), list / kill / suspend / reprioritize processes, query / start / stop / configure services, create / delete / enumerate scheduled tasks, read the firewall rules, enumerate network adapters and live connections, drive session power (lock / restart / sleep / hibernate), list volumes and free space, get and set environment variables, read the event log, and read or change the display mode — all native, no PowerShell or shelling out.
Underneath it's a few kilobytes of TypeScript on Bun's built-in FFI — no Appium server, no .NET, no node-gyp, no prebuilt binaries.
Install
bun add umbrielThat's the entire install story. No build step, nothing to compile.
Built for AI agents
This is what Umbriel is for. Register the published server with Codex (ChatGPT desktop, CLI, and the IDE share this configuration):
codex mcp add umbriel -- bunx umbrielOr register it with Claude:
claude mcp add umbriel -- bunx umbrielAny MCP-speaking agent can then ground itself in the accessibility tree in ~15 ms per step and use semantic, posted-message, synthetic-input, or pixel fallback as the target requires. Most classic controls remain driveable backgrounded; a no-own-HWND Chromium/WPF/WinUI editor needs a brief unlocked foreground lease for real input. Umbriel verifies that destination before injecting, can verify the resulting editor state, and restores the previous foreground window by default.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Umbriel: common questions
- Is Umbriel MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Umbriel safety report
- How do I install Umbriel?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Umbriel need an API key?
- No secret keys are declared. It reads 10 settings from the environment.
- Is Umbriel maintained?
- The last commit was 92 days ago (2026-08-15). The latest release is v1.14.0.
- What can I use instead of Umbriel?
- Servers from other publishers that do the same job: Argent MCP server, Flutter MCP Toolkit MCP server and iPhone Use MCP server. Compare all Umbriel alternatives.
- How does Umbriel compare with other Productivity MCP servers?
- safety score 88/100 (higher than 75% of 1,293 Productivity servers); github stars 3 (more than 65% of 858 Productivity servers); downloads a week 71 (more than 41% of 488 Productivity servers with a package). Full comparison.
Alternatives to Umbriel
Same job from other publishers: the closest match first, then the best rated.
- ArgentDrive iOS Simulators, Android emulators, TVs and Electron/web apps from your coding agentnot reviewedWidely usedA
Flutter MCP ToolkitInspect and drive Flutter debug apps/games: semantic snapshots, search, and custom client toolsnot reviewedGrowingA
iPhone UseDrive a real iPhone from a Mac: read the screen as text, tap, type, scroll, replay saved flows.not reviewedGrowingB- HunchFocus-free macOS control for AI agents: drive your real Mac apps in the background, no stolen focus.not reviewedGrowingA
- SparewiseWhy is my Windows drive full? Free space within limits you set. Never deletes permanently.not reviewedGrowingA