OpenAdapt: your agent decides, OpenAdapt enters it and checks it saved MCP server

OpenAdapt Agent

mcp-name: io.github.OpenAdaptAI/openadapt-agent

OpenAdapt compiles demonstrated GUI workflows into programs. This package invokes them over MCP.

pip install openadapt includes this package. Point a local MCP client at openadapt-agent serve --allow-run and the calling agent can invoke a compiled GUI program on this computer. Healthy runs make no model calls. Flow still runs the program. Policy, identity, verification, pauses, repair, and audit stay in openadapt-flow. --allow-run is an explicit opt-in. Admission stays fail-closed.

The calling agent operates. A named human is authority. They watch if the agent clicked, then they admit. Compliance samples Seals, and that is a different job than running the program. Computer-use agents are the user of OpenAdapt. They are not the executor inside OpenAdapt.

Don't name this skill computer use.

Install

Python 3.10 through 3.12. Local Claude Code, Cursor, Codex, and Grok CLI speak stdio MCP. Author in the chat you already use.

claude mcp add openadapt -- \
  uvx --from 'openadapt-agent[tutorial]' openadapt-agent \
  serve --allow-run

The server generates the public synthetic tutorial at serve time. It isn't in the wheel.

python -m pip install --upgrade openadapt
openadapt flow tutorial
openadapt-agent serve --allow-run

openadapt quickstart --break-it is the halt demo. After the verified run, the same certified bundle hits a backend that paints a success banner and rejects the write. An independent system-of-record read catches the lie. The record did not change.

Local unsigned replay is free. If the tool returns unsigned success, treat it as failure. Production success without a Seal is failure. HALTED does not mint a Seal.

A first demo over stdio uses a second MCP server. --authoring does not enable run tools. First-demo compile needs a human ok before the tool is callable, and that ok is the whole approval.

claude mcp add openadapt-authoring -- \
  uvx --from 'openadapt-agent[tutorial]' openadapt-agent \
  serve --authoring

--bundles is omitted. Probe tools are observe, startrecord, click, and halt. This process stays stdio. Pass --url --headed to pin a fresh Playwright Chromium with empty cookies. Sign in in that window with pauseforinput; continueinput records it. --url is not the Chrome you already signed into, and it does not attach over CDP. Omit --url after you sign in in Chrome, and the unique frontmost window pins on macOS (no DOM identity). Windows native, Citrix, and RDP stay coach-only here, as does any macOS or Linux session without a unique frontmost window.

Private customer bundles still use --bundles. Those stay on the operator's disk and are never shipped here.

uvx openadapt-agent serve --bundles /path/to/bundles
uvx openadapt-agent serve --bundles /path/to/bundles --allow-run

ChatGPT.com and Claude.ai

Hosted ChatGPT.com and Claude.ai can't talk to localhost stdio. Don't tell those tabs to run openadapt-agent serve. Send them to https://openadapt.ai/start.

Those tabs still can't click the user's GUI.

Once a job exists at https://openadapt.ai/j/{id}, Desktop Connect this computer claims openadapt://runner. Copy from that page and paste into the chat.

Pip users start the mailbox client:

openadapt-agent authoring connect \
  'openadapt://runner?pack=p.…&bind=oab_…&origin=https://openadapt.ai'

Shortened. The full README is on GitHub.