Desktop Commander MCPBLOCK
This is MCP server for Claude that gives it terminal control, file system search and diff file editing capabilities
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Search, update, manage files and run terminal commands with AI
[](https://www.npmjs.com/package/@wonderwhy-er/desktop-commander) [](https://agentaudit.dev/skills/desktop-commander) [](https://archestra.ai/mcp-catalog/wonderwhy-er__desktopcommandermcp) [](https://smithery.ai/server/@wonderwhy-er/desktop-commander) [](https://www.buymeacoffee.com/wonderwhyer)
[](https://discord.gg/kQ27sNnZr7)
Work with code and text, run processes, and automate tasks, going far beyond other AI editors - while using host client subscriptions instead of API token costs.
Table of Contents
- Features
- How to install
- Getting Started
- Usage
- File Preview UI & Markdown Editor
- Handling Long-Running Commands
- Work in Progress and TODOs
- Sponsors and Supporters
- Website
- Media
- Testimonials
- Frequently Asked Questions
- Contributing
- License
All of your AI development tools in one place. Desktop Commander puts all dev tools in one chat. Execute long-running terminal commands on your comp
1bae3949bca1OBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add desktop-commander -- npx -y @wonderwhy-er/[email protected]
Exposed tools (11)
6 read · 3 write · 2 destructive. Blast radius: 2 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
force_terminate | destructive | Force terminate a running terminal session. ${CMD_PREFIX_DESCRIPTION} |
get_more_search_results | read | Get more results from an active search with offset-based pagination. Supports partial result reading with: - |
get_usage_stats | read | Get usage statistics for debugging and analysis. Returns summary of tool usage, success/failure rates, and performance metrics. ${CMD_PREFIX_DESCRIPTION} |
kill_process | destructive | Terminate a running process by PID. Use with caution as this will forcefully terminate the specified process. ${CMD_PREFIX_DESCRIPTION} |
list_directory | read | Get a detailed listing of all files and directories in a specified path. Use this instead of |
list_processes | read | List all running processes. Returns process information including PID, command name, CPU usage, and memory usage. ${CMD_PREFIX_DESCRIPTION} |
read_multiple_files | read | Read the contents of multiple files simultaneously. Each file |
read_process_output | read | Read output from a running process with file-like pagination support. Supports partial output reading with offset and length parameters (like read_file): - |
stop_search | write | Stop an active search. Stops the background search process gracefully. Use this when you |
write_file | write | Write or append to file contents. IMPORTANT: DO NOT use this tool to create PDF files. Use |
write_pdf | write | Create a new PDF file or modify an existing one. THIS IS THE ONLY TOOL FOR CREATING AND MODIFYING PDF FILES. RULES ABOUT FILENAMES: - When creating a new PDF, |
Trust audit
BLOCKgrade F · trust 53/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | FAIL |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (16 observation(s))
- Network
- declared (5 observation(s))
- Shell
- declared (10 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (25)
payload-utils.ts
return exec(command, { silent: true, ...options });exec(command);
exec(`git tag -f ${tag}`);exec(`git push -f origin ${tag}`);exec(options.skipTests ? 'npm run build' : 'npm test');
console.log(`${colors.cyan}🔢 Desktop Commander MCP — Token Counter${colors.reset}`);const LEADING = /^(?:\s|\[DEBUG\]|[-–•→✓✗]|\p{Extended_Pictographic}|️|)+/u;force_terminate, kill_process
.codespellrc
console.log(`\n${failures ? '🔴' : '✅'} remote token rotation persistence: ${failures} failing test(s).`);const devPath = path.resolve(__dirname, '../../dist/index.js');
import { VERSION } from '../../version.js';import { parseConfig } from '../../config-manager.js';import { VERSION } from '../../version.js';const { exitProcess, EXIT_GRACE_MS } = await import('../../utils/exit-process.js')The Control UI default is `http://127.0.0.1:18789/`. (Some versions/setups use a
The Control UI default is `http://127.0.0.1:18789/`. (Some versions/setups use a
The Control UI default is `http://127.0.0.1:18789/`. (Some versions/setups use a
standIn.url = `http://127.0.0.1:${server.address().port}`;DC_FLAG_URL: process.env.DC_FLAG_URL ?? 'http://127.0.0.1:9/',
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
@modelcontextprotocol/sdk, @opendocsg/pdf2md, @supabase/supabase-js, @tiptap/core, @tiptap/extension-image, @tiptap/extension-table, @tiptap/extension-table-cell, @tiptap/extension-table-header
1080_60.mp4
- `allowedDirectories` — `[]` means full access; otherwise commands/paths are
Gates applied: no_behavioural_pass.
1bae3949bca1full audit observations/trust-audit/mcp-server/wonderwhy-er__desktopcommandermcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 1bae3949bca1 | BLOCK | F | 53 | first audit |
Questions
What is the @wonderwhy-er/desktop-commander MCP server?
This is MCP server for Claude that gives it terminal control, file system search and diff file editing capabilities
What tools does @wonderwhy-er/desktop-commander expose?
11 in total: 6 read-only, 3 that write, and 2 that can delete or overwrite (force_terminate, kill_process). Every one is listed on this page with its risk.
Is @wonderwhy-er/desktop-commander safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (53/100) and found 6 critical or high issues in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 2 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does @wonderwhy-er/desktop-commander need?
No credential environment variables were found in its source, so it appears to need none.
How does @wonderwhy-er/desktop-commander run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as @desktop-commander/telemetry-contract at 0.1.1.
How current is this page?
The grade is for one exact copy of the source (1bae3949bca1), read on 2026-10-12. The repository is watched and re-audited when it changes.