Umbriel MCP server
See and drive a whole Windows machine from Bun — apps, input, screen, OCR, registry, OS — via MCP.
2 stars68 downloads/wk
Reviews
Write oneNobody has reviewed Umbriel yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Umbriel tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- Code scan44 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 42 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
What the publisher says
From the Umbriel repository's README, as published. We do not edit it. Read it on GitHub
Umbriel · A set of hands for your AI agent — and Playwright for the Windows desktop
Drive any Windows app through five layers — fall back to OCR and pixel-matching when there's no other way in, see and manage windows even when they're hidden, use cursor-free semantic or posted input where Windows permits it, target controls by name and role, and reach past the GUI to drive the OS itself: processes, services, the registry, scheduled tasks, the firewall, network, power, displays, disks, environment, and the event log. Built for ChatGPT/Codex, Claude, and any AI agent that speaks MCP.
What is it?
Umbriel drives the Windows desktop the way a person would — through whatever channel actually works for the app in front of it:
- Pixels & OCR — when an app exposes no tree at all (canvas, custom-draw, games), fall back to full-screen capture, template matching, and text recognition.
- Semantic control — read the UI Automation tree an app exposes and target controls by name and role, not coordinates. Survives the DPI, layout, and theme changes that shatter pixel scripts.
- Sight & window control — capture the live pixels of any window (even fully GPU-composited or occluded), inspect raw HWND hierarchies, and move, raise, or size windows.
- Input routing — semantic UIA and posted-message input for background-capable controls, with a verified SendInput fallback only when an HWND-less editor or real pointer gesture actually needs the foreground.
- Drive the OS, not just GUIs — when the task is the machine, act on it directly: read and write the registry (values and keys), list / kill / suspend / reprioritize processes, query / start / stop / configure services, create / delete / enumerate scheduled tasks, read the firewall rules, enumerate network adapters and live connections, drive session power (lock / restart / sleep / hibernate), list volumes and free space, get and set environment variables, read the event log, and read or change the display mode — all native, no PowerShell or shelling out.
Underneath it's a few kilobytes of TypeScript on Bun's built-in FFI — no Appium server, no .NET, no node-gyp, no prebuilt binaries.
Install
bun add umbrielThat's the entire install story. No build step, nothing to compile.
Built for AI agents
This is what Umbriel is for. Register the published server with Codex (ChatGPT desktop, CLI, and the IDE share this configuration):
codex mcp add umbriel -- bunx umbrielOr register it with Claude:
claude mcp add umbriel -- bunx umbrielAny MCP-speaking agent can then ground itself in the accessibility tree in ~15 ms per step and use semantic, posted-message, synthetic-input, or pixel fallback as the target requires. Most classic controls remain driveable backgrounded; a no-own-HWND Chromium/WPF/WinUI editor needs a brief unlocked foreground lease for real input. Umbriel verifies that destination before injecting, can verify the resulting editor state, and restores the previous foreground window by default.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Install directly
Runs npx -y umbriel on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add umbriel -- npx -y umbriel
Umbriel: common questions
- Is Umbriel MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the Umbriel safety report
- How do I install Umbriel?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does Umbriel need an API key?
- No secret keys are declared. It reads 10 settings from the environment.
- Is Umbriel maintained?
- The last commit was 43 days ago (2026-08-15). The latest release is v1.14.0.
- What can I use instead of Umbriel?
- Servers from other publishers that do the same job: Argent MCP server, Flutter MCP Toolkit MCP server and Hunch MCP server. Compare all Umbriel alternatives.
Alternatives to Umbriel
Same job from other publishers: the closest match first, then the best rated.
- ArgentDrive iOS Simulators, Android emulators, TVs and Electron/web apps from your coding agentnot reviewedWidely usedA
Flutter MCP ToolkitInspect and drive Flutter debug apps/games: semantic snapshots, search, and custom client toolsnot reviewedGrowingA- HunchFocus-free macOS control for AI agents: drive your real Mac apps in the background, no stolen focus.not reviewedGrowingA
- rn-devtools-hubDrive a running React Native or Expo app from inside its JS runtime: see, act, prove.not reviewedGrowingA
- three.ws AgenCBrowse the AgenC on-chain task marketplace, query the agent registry, and link identities.not reviewedEstablishedA