Mmcp.market

Umbriel MCP server

by ObscuritySRL·io.github.ObscuritySRL/umbriel·v1.14.0

See and drive a whole Windows machine from Bun — apps, input, screen, OCR, registry, OS — via MCP.

A88/100grade A
What users say
No reviews yet
Be the first
Safety scan
A88/100

full report

Adoption
Growing

2 stars68 downloads/wk

Reviews

Write one

Nobody has reviewed Umbriel yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Umbriel tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it

no findings
  • Code scan44 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 42 days ago12/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 88/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the Umbriel repository's README, as published. We do not edit it. Read it on GitHub

Umbriel · A set of hands for your AI agent — and Playwright for the Windows desktop

Drive any Windows app through five layers — fall back to OCR and pixel-matching when there's no other way in, see and manage windows even when they're hidden, use cursor-free semantic or posted input where Windows permits it, target controls by name and role, and reach past the GUI to drive the OS itself: processes, services, the registry, scheduled tasks, the firewall, network, power, displays, disks, environment, and the event log. Built for ChatGPT/Codex, Claude, and any AI agent that speaks MCP.

What is it?

Umbriel drives the Windows desktop the way a person would — through whatever channel actually works for the app in front of it:

  1. Pixels & OCR — when an app exposes no tree at all (canvas, custom-draw, games), fall back to full-screen capture, template matching, and text recognition.
  2. Semantic control — read the UI Automation tree an app exposes and target controls by name and role, not coordinates. Survives the DPI, layout, and theme changes that shatter pixel scripts.
  3. Sight & window control — capture the live pixels of any window (even fully GPU-composited or occluded), inspect raw HWND hierarchies, and move, raise, or size windows.
  4. Input routing — semantic UIA and posted-message input for background-capable controls, with a verified SendInput fallback only when an HWND-less editor or real pointer gesture actually needs the foreground.
  5. Drive the OS, not just GUIs — when the task is the machine, act on it directly: read and write the registry (values and keys), list / kill / suspend / reprioritize processes, query / start / stop / configure services, create / delete / enumerate scheduled tasks, read the firewall rules, enumerate network adapters and live connections, drive session power (lock / restart / sleep / hibernate), list volumes and free space, get and set environment variables, read the event log, and read or change the display mode — all native, no PowerShell or shelling out.

Underneath it's a few kilobytes of TypeScript on Bun's built-in FFI — no Appium server, no .NET, no node-gyp, no prebuilt binaries.

Install

bun add umbriel

That's the entire install story. No build step, nothing to compile.

Built for AI agents

This is what Umbriel is for. Register the published server with Codex (ChatGPT desktop, CLI, and the IDE share this configuration):

codex mcp add umbriel -- bunx umbriel

Or register it with Claude:

claude mcp add umbriel -- bunx umbriel

Any MCP-speaking agent can then ground itself in the accessibility tree in ~15 ms per step and use semantic, posted-message, synthetic-input, or pixel fallback as the target requires. Most classic controls remain driveable backgrounded; a no-own-HWND Chromium/WPF/WinUI editor needs a brief unlocked foreground lease for real input. Umbriel verifies that destination before injecting, can verify the resulting editor state, and restores the previous foreground window by default.

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

Runs npx -y umbriel on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add umbriel -- npx -y umbriel
Add to Cursor

Umbriel: common questions

Is Umbriel MCP server safe?
Yes, by our scan: it is graded A (88/100). Read the Umbriel safety report
How do I install Umbriel?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Umbriel need an API key?
No secret keys are declared. It reads 10 settings from the environment.
Is Umbriel maintained?
The last commit was 43 days ago (2026-08-15). The latest release is v1.14.0.
What can I use instead of Umbriel?
Servers from other publishers that do the same job: Argent MCP server, Flutter MCP Toolkit MCP server and Hunch MCP server. Compare all Umbriel alternatives.

Alternatives to Umbriel

Same job from other publishers: the closest match first, then the best rated.

All Umbriel alternatives →
  • Argent
    Drive iOS Simulators, Android emulators, TVs and Electron/web apps from your coding agent
    A
  • Flutter MCP Toolkit
    Inspect and drive Flutter debug apps/games: semantic snapshots, search, and custom client tools
    A
  • Hunch
    Focus-free macOS control for AI agents: drive your real Mac apps in the background, no stolen focus.
    A
  • rn-devtools-hub
    Drive a running React Native or Expo app from inside its JS runtime: see, act, prove.
    A
  • three.ws AgenC
    Browse the AgenC on-chain task marketplace, query the agent registry, and link identities.
    A

More from ObscuritySRL →