Atlas / MCP servers / csl19980820 / chatgpt-local-workspace

chatgpt-local-workspaceBLOCK

Name: chatgpt-local-workspace
Author: csl19980820

mcp/csl19980820/chatgpt-local-workspace

MCP server by csl19980820 · apps sdk · chatgpt · command execution · Audited 2026-10-12

ChatGPT 网页对话直连 Windows 本机:文件读写、精确编辑、命令执行、Git 审阅(OpenAI 官方 Tunnel),桌面程序内嵌实时工作台按对话回放调用时间线。单 EXE、零安装。ChatGPT-driven local Windows workspace over OpenAI Tunnel with an embedded live dashboard; single EXE, zero install.

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

8 5r · 3w · 0d

Transport

—

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

简体中文 · English

让 ChatGPT 通过 OpenAI 官方 Tunnel 直接操作你的本机:读写文件、精确编辑、执行命令、查看 Git 变更。桌面程序内嵌实时工作台(WebView2,也可以在浏览器打开),按对话查看每一次工具调用的时间线、命令输出和补丁 diff。单个 EXE,免安装,运行时不需要 Node。

非官方社区项目,与 OpenAI 无隶属关系。

它解决什么:让 ChatGPT 网页对话直接驱动本机的文件、命令与 Git,并用实时工作台逐次回放每个工具调用。codex CLI、@modelcontextprotocol/server-filesystem 跑在终端或 TUI 里;这个插件跑在 ChatGPT 网页里,自带可视化时间线、diff 与命令输出,不用另开终端,也不依赖常驻的 Node 服务。同一个 EXE 也可以作为 stdio MCP 服务器给 Codex 使用(见“Codex 推荐配置”)。

当前版本 2.4.1(2026-10-09,上一公开版本 2.4.0)。各版本变化见升级说明,接口迁移和上游限制见 2.4.0 发行说明,验证结果见验证记录。

2.4.1 的变化 · 2.4.0 的变化
特性一览 · 环境要求 · 快速开始 · 怎么用
23 个工具(含 2.4.0 工具删合对照、Codex 推荐配置)
实时工作台 · 桌面程序
命令执行细节 · 过程可见性 · 版本历史
从源码构建 · 更新与替换 · 常见问题 · 安全说明 · 协议兼容性

2.4.1 的变化

原始日志折叠 Tunnel 启动噪声:Tunnel Client 0.0.16 在 --log.level info 下会把每一步 fx 依赖注入都打成 INFO(每次启动约 240 条),淹没有用的信息。桌面“原始日志”页签现在把这些行折叠为一行“已折叠 N 条 Tunnel 启动内部日志”,每次启动一行。只按精确的事件名折叠(provided、replaced、decorated、supplied、invoking、run、OnStart/OnStop hook executing/executed、initialized custom fxevent.Logger、started),且只折叠 INFO;WARN / ERROR、健

Read from source at commit 41fa207d9a14OBSERVED · 2026-10-12

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add devspace --env DEVSPACE_OAUTH_OWNER_TOKEN=${DEVSPACE_OAUTH_OWNER_TOKEN} --env WORKSPACE_TUNNEL_SMOKE_KEY=${WORKSPACE_TUNNEL_SMOKE_KEY} -- npx -y @waishnav/[email protected]

claude-desktop

{
  "mcpServers": {
    "devspace": {
      "command": "npx",
      "args": [
        "-y",
        "@waishnav/[email protected]"
      ],
      "env": {
        "DEVSPACE_OAUTH_OWNER_TOKEN": "${DEVSPACE_OAUTH_OWNER_TOKEN}",
        "WORKSPACE_TUNNEL_SMOKE_KEY": "${WORKSPACE_TUNNEL_SMOKE_KEY}"
      }
    }
  }
}

Exposed tools (8)

5 read · 3 write · 0 destructive.

Tool	Risk	Description
`apply_patch`	write
`claude`	read	A profile that shadows the raw provider.
`claude-reviewer`	read	Unavailable profile.
`custom`	read	Use a custom model.
`exec_command`	write
`reviewer`	read	Review changes.
`tdd`	read	Tests first
`write_stdin`	write

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	FAIL
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: declared (5 observation(s))
Shell: declared (4 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (13)

HIGHInventory / provenance · inv.suspicious_name · CWE-1104

vendor/devspace/src/ui/review-payload.tsx

review-payload.tsx

Why it matters. member named after an attack tool

Fix. remove or justify

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

vendor/devspace/src/local-agent-pi-sandbox.ts:464

join(home, ".netrc"),

Why it matters. touches a credential store

MEDIUMInventory / provenance · inv.binary · CWE-1104

vendor/webview2/Microsoft.Web.WebView2.Core.dll

Microsoft.Web.WebView2.Core.dll

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMInventory / provenance · inv.binary · CWE-1104

vendor/webview2/Microsoft.Web.WebView2.WinForms.dll

Microsoft.Web.WebView2.WinForms.dll

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMInventory / provenance · inv.binary · CWE-1104

vendor/webview2/WebView2Loader.dll

WebView2Loader.dll

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

vendor/devspace/src/artifact-download.test.ts:163

name: "../../generated.png",