Desktop Commander

Overview

From the repository's own README, as read at the audited commit.

# Desktop Commander MCP### Search, update, manage files and run terminal commands with AI[![npm downloads](https://img.shields.io/npm/dw/@wonderwhy-er/desktop-commander)](https://www.npmjs.com/package/@wonderwhy-er/desktop-commander)[![AgentAudit Verified](https://agentaudit.dev/api/badge/desktop-commander)](https://agentaudit.dev/skills/desktop-commander)[![Trust Score](https://archestra.ai/mcp-catalog/api/badge/quality/wonderwhy-er/DesktopCommanderMCP)](https://archestra.ai/mcp-catalog/wonderwhy-er__desktopcommandermcp)[![smithery badge](https://smithery.ai/badge/@wonderwhy-er/desktop-commander)](https://smithery.ai/server/@wonderwhy-er/desktop-commander)[![Buy Me A Coffee](https://img.shields.io/badge/Buy%20Me%20A%20Coffee-support-yellow.svg)](https://www.buymeacoffee.com/wonderwhyer)[![Discord](https://img.shields.io/badge/Join%20Discord-5865F2?style=for-the-badge&logo=discord&logoColor=white)](https://discord.gg/kQ27sNnZr7)Work with code and text, run processes, and automate tasks, going far beyond other AI editors - while using host client subscriptions instead of API token costs.<a href="https://glama.ai/mcp/servers/zempur9oh4">  <img width="380" height="200" src="https://glama.ai/mcp/servers/zempur9oh4/badge" alt="Desktop Commander MCP" /></a>## 🖥️ Try the Desktop Commander App (Beta)**Want a better experience?** The Desktop Commander App gives you everything the MCP server does, plus:- **Use any AI model** — Claude, GPT-4.5, Gemini 2.5, or any model you prefer- **See file changes live** — visual file previews as AI edits your files- **Add custom MCPs and context** — extend with your own tools, no config files- **Coming soon** — skills system, dictation, background scheduled tasks, and more**👉 [Download the App](https://desktopcommander.app/#download)** (macOS & Windows)> The MCP server below still works great with Claude Desktop and other MCP clients — the app is for those who want a dedicated, polished experience.## Table of Contents- [Features](#features)

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude mcp add desktop-commander -- npx -y @wonderwhy-er/[email protected]

Exposed tools (12) 7 read · 3 write · 2 destructive

Blast radius: 2 tools can delete or overwrite. An agent that can be talked into calling a tool can be talked into calling this one.

Details

Source

wonderwhy-er/desktopcommandermcp

npm

@wonderwhy-er/desktop-commander@0.2.51

Transports

stdio

License

MIT

Stars

9,629 · pushed 0d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (16 observation(s))

Network

declared (5 observation(s))

Shell

declared (10 observation(s))

Dependencies

not all pinned

Secrets in source

none-found

Findings (25)

payload-utils.ts

return exec(command, { silent: true, ...options });

exec(command);

exec(`git tag -f ${tag}`);

exec(`git push -f origin ${tag}`);

exec(options.skipTests ? 'npm run build' : 'npm test');

console.log(`${colors.cyan}🔢 Desktop Commander MCP — Token Counter${colors.reset}`);

(`curl ... | sh`) — that's untrusted code execution; show it and confirm first.

- Anything piping remote content into a shell (`curl ... | sh`).

force_terminate, kill_process

.codespellrc

console.log(`\n${failures ? '🔴' : '✅'} remote token rotation persistence: ${failures} failing test(s).`);

console.log(`  Symlink (file): ${SYMLINK_TO_RESTRICTED_FILE} → ${RESTRICTED_DIR}/secret.txt`);

const devPath = path.resolve(__dirname, '../../dist/index.js');

import { CONFIG_FILE } from '../../config.js';

import { createToolBridge } from '../../shared/tool-bridge.js';

import { createCompactRowShellController, type ToolShellController } from '../../shared/tool-shell.js';

import { renderCompactRow } from '../../shared/compact-row.js';

The Control UI default is `http://127.0.0.1:18789/`. (Some versions/setups use a

The Control UI default is `http://127.0.0.1:18789/`. (Some versions/setups use a

The Control UI default is `http://127.0.0.1:18789/`. (Some versions/setups use a

await fetch(`http://127.0.0.1:${port}/test`, {

await currentFetchPattern(`http://127.0.0.1:${port}/flags.json`);

AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

@modelcontextprotocol/sdk, @opendocsg/pdf2md, @supabase/supabase-js, @tiptap/core, @tiptap/extension-image, @tiptap/extension-table, @tiptap/extension-table-cell, @tiptap/extension-table-header

Gates applied: no_behavioural_pass.

Audited 2026-09-18 · audit v0.4.0 · source sha d7ae9c4abb15 · full audit: observations/trust-audit/mcp-server/wonderwhy-er__desktop-commander-1.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions