Remote Macos UseSAFE
The only general AI agent that does NOT requires extra API key, giving you full control on your local and remote MacOs from Claude Desktop App
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
The first open-source MCP server that enables AI to fully control remote macOS systems.
A direct alternative to OpenAI Operator, optimized specifically for autonomous AI agents with complete desktop capabilities, requiring no additional software installation.
[](https://hub.docker.com/r/buryhuang/mcp-remote-macos-use) [](https://opensource.org/licenses/MIT)
Showcases
- Research Twitter and Post Twitter(https://www.youtube.com/watch?v=--QHz2jcvcs)
- Use CapCut to create short highlight video(https://www.youtube.com/watch?v=RKAqiNoU8ec)
- AI Recruiter: Automated candidate information collection, qualifying applications and sending screening sessions using Mail App
- AI Marketing Intern: LinkedIn engagement - automated following, liking, and commenting with relevant users
- AI Marketing Intern: Twitter engagement - automated following, liking, and commenting with relevant users
To-Do List (Prioritized)
- Performance Optimization - Match speed of Ubuntu desktop alternatives
- Apple Scripts Generation - Reduce execution time while maintaining flexibility
- VNC Cursor Visibility - Improve debugging and demo experience
We welcome contributions!
Features
- No Extra API Costs: Free screen processing with your existing Claude Pro plan
- Minimal Setup: Just enable Screen Sharing on the target Mac – no additional software needed
- Universal Compatibility: Works with all macOS versions, current and future
Why We Built This
Native macOS Experience Without Compromise
The macOS native ecosystem remains u
2b05542ecc5aOBSERVED · 2026-09-30Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mcp_remote_macos_use --env LIVEKIT_API_KEY=${LIVEKIT_API_KEY} --env LIVEKIT_API_SECRET=${LIVEKIT_API_SECRET} --env MACOS_PASSWORD=${MACOS_PASSWORD} -- uvx mcp_remote_macos_use{
"mcpServers": {
"mcp_remote_macos_use": {
"command": "uvx",
"args": [
"mcp_remote_macos_use"
],
"env": {
"LIVEKIT_API_KEY": "${LIVEKIT_API_KEY}",
"LIVEKIT_API_SECRET": "${LIVEKIT_API_SECRET}",
"MACOS_PASSWORD": "${MACOS_PASSWORD}"
}
}
}
}Exposed tools (8)
5 read · 2 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
remote_macos_get_screen | read | Connect to a remote MacOs machine and get a screenshot of the remote desktop. Uses environment variables for connection details. |
remote_macos_mouse_click | read | Perform a mouse click at specified coordinates on a remote MacOs machine, with automatic coordinate scaling. Uses environment variables for connection details. |
remote_macos_mouse_double_click | read | Perform a mouse double-click at specified coordinates on a remote MacOs machine, with automatic coordinate scaling. Uses environment variables for connection details. |
remote_macos_mouse_drag_n_drop | destructive | Perform a mouse drag operation from start point and drop to end point on a remote MacOs machine, with automatic coordinate scaling. |
remote_macos_mouse_move | write | Move the mouse cursor to specified coordinates on a remote MacOs machine, with automatic coordinate scaling. Uses environment variables for connection details. |
remote_macos_mouse_scroll | read | Perform a mouse scroll at specified coordinates on a remote MacOs machine, with automatic coordinate scaling. Uses environment variables for connection details. |
remote_macos_open_application | read | Opens/activates an application and returns its PID for further interactions. |
remote_macos_send_keys | write | Send keyboard input to a remote MacOs machine. Uses environment variables for connection details. |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (1)
remote_macos_mouse_drag_n_drop
Gates applied: no_behavioural_pass.
2b05542ecc5afull audit observations/trust-audit/mcp-server/baryhuang__remote-macos-use.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-09-30 | 2b05542ecc5a | SAFE | B | 89 | first audit |
Questions
What is the Remote Macos Use MCP server?
The only general AI agent that does NOT requires extra API key, giving you full control on your local and remote MacOs from Claude Desktop App
What tools does Remote Macos Use expose?
8 in total: 5 read-only, 2 that write, and 1 that can delete or overwrite (remote_macos_mouse_drag_n_drop). Every one is listed on this page with its risk.
Is Remote Macos Use safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Remote Macos Use need?
It reads LIVEKIT_API_KEY, LIVEKIT_API_SECRET and MACOS_PASSWORD from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Remote Macos Use run?
It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as mcp_remote_macos_use.
How current is this page?
The grade is for one exact copy of the source (2b05542ecc5a), read on 2026-09-30. The repository is watched and re-audited when it changes.