Glasswarp

by glasswarp.com · remote · no sign-in to list tools · v0.1.0 · published by com.glasswarp

Eyes and hands on real Windows PCs — observe, click, type via Glasswarp API.

Deletes · 10

Compare Registry entry

16 tools: 10 can delete or cancel things and 6 only read.

Scanned Oct 21, 2026

Deletes or cancels10Claude Code: deny: see these tools
Can't be undone0Claude Code: ask
Changes things0Claude Code: ask
Only reads6Claude Code: allow: see these tools

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http glasswarp https://mcp.glasswarp.com/mcp --header 'Authorization: <your-authorization>'

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

16 tools

Deletes or cancels 10Removes, cancels or revokes something.Claude Code: deny

app.launchLaunch an executable on the remote Windows rig (name on PATH or absolute path), optional args.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Launch an executable on the remote Windows rig (name on PATH or absolute path), optional args. Side effects: starts a process; Glasswarp tracks it and closes it on session.end. Use for notepad.exe, mspaint.exe, chrome with URL args, etc. Wait/re-observe after launch before clicking — do not assume the window is focused immediately.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
input.click_targetLeft/right/middle-click a UIA target by id from the latest screen.observe (uses native center coords).No findings
Why it is in this group
- The name "input.click_target" says "click": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Left/right/middle-click a UIA target by id from the latest screen.observe (uses native center coords). Prefer over input.click_xy. Side effect: real mouse click on the remote Windows desktop. Do not reuse target_id after the screen may have changed — re-observe first. For click→type→keys sequences, use input.send_actions (one turn) instead of chaining this tool.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
input.click_xyClick at native screen coordinates (0…native_width-1, 0…native_height-1 from screen.observe).No findings
Why it is in this group
- The name "input.click_xy" says "click": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Click at native screen coordinates (0…native_width-1, 0…native_height-1 from screen.observe). Last resort when no suitable UIA target exists — prefer input.click_target. Never use JPEG/downscaled pixel coords. Side effect: real mouse click on the remote desktop.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
input.dragPress-move-release mouse drag in native capture coordinates.No findings
Why it is in this group
- The name "input.drag" says "drag": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Press-move-release mouse drag in native capture coordinates. Use for drawing, sliders, selection boxes, and drag-and-drop. Side effect: mouse_down → moves → mouse_up on the remote desktop. Prefer input.send_actions if the drag is one step in a longer predictable sequence.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
input.scrollMove the cursor to native (x,y) then apply a vertical mouse-wheel delta.No findings
Why it is in this group
- The description's first verb is "move": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Move the cursor to native (x,y) then apply a vertical mouse-wheel delta. Side effect: scroll on whatever is under that point. Negative delta scrolls toward the bottom of the page. Prefer input.send_actions when scroll is part of a multi-step sequence. Re-observe after scrolling lists/pages before clicking targets.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
input.send_actionsPREFERRED multi-step tool: run 1–10 predictable UI actions in one call (input.click_target, input.click_xy, input.type_text, input.send_keys, input.drag, input.scroll).No findings
Why it is in this group
- The name "input.send_actions" says "send": a word for sending, and what is sent cannot be taken back.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
PREFERRED multi-step tool: run 1–10 predictable UI actions in one call (input.click_target, input.click_xy, input.type_text, input.send_keys, input.drag, input.scroll). Side effects: all actions execute on the remote desktop; fails fast before sending if any action is invalid. observe_after defaults true (verification observe: text+targets; set observe_image=true for JPEG). Do not batch across unpredictable waits (page loads, installers, modals) — single-step those. Prefer this over chaining solo click/type/keys tools.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
input.send_keysSend a key or chord to the focused window (e.g.No findings
Why it is in this group
- The name "input.send_keys" says "send": a word for sending, and what is sent cannot be taken back.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Send a key or chord to the focused window (e.g. enter, tab, ctrl+s, alt+f4, win). Side effect: real key events on the remote desktop. Prefer bundling into input.send_actions when the shortcut follows a click/type in the same planned sequence. Use input.type_text for literal strings, not this tool.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
input.type_textType a Unicode string into the currently focused control via native input.No findings
Why it is in this group
- The name "input.type_text" says "type": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Type a Unicode string into the currently focused control via native input. Does not click first — focus the field (input.click_target / input.send_actions) before calling. Side effect: keystrokes on the remote desktop. For form fills (click → type → tab/enter), prefer input.send_actions in one call.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
session.endEnd an active session.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
End an active session. Side effects: stops billing, runs host safety_restore, closes apps launched via app.launch. Always call when finished or abandoning — do not leave sessions open. Safe to call once; further observe/input on that session_id will fail.
Annotations the server declares
- destructiveHint: true
- openWorldHint: true
session.startStart a metered desktop session on a USABLE rig from rigs.list.No findings
Why it is in this group
- The name "session.start" says "start": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Start a metered desktop session on a USABLE rig from rigs.list. Side effects: begins wall-clock billing, shows an on-screen “API session active” indicator, enables observe/input until session.end. Idle sessions auto-end after ~15 minutes. Always call session.end when done or abandoning. Do not call if no USABLE rig exists. Returns session_id and Live View URL (owner console login required).
Annotations the server declares
- destructiveHint: true
- openWorldHint: true

Only reads 6Looks things up and changes nothing.Claude Code: allow

demos.getReturn one showcase run contract (install, command, needs, framing).No findings
Why it is in this group
- The name "demos.get" says "get": a word for reading.
Description, as the server wrote it
Return one showcase run contract (install, command, needs, framing). Does NOT execute the demo or control a PC. Call after demos.list when you know the demo_id. If the client can run shell, offer the command; if chat-only, show the card. Do not replace this with a slow MCP click loop for solver demos.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
demos.listList showcase run contracts (id, title, install, command).No findings
Why it is in this group
- The name "demos.list" says "list": a word for reading.
Description, as the server wrote it
List showcase run contracts (id, title, install, command). Read-only catalog — does NOT start a session, touch a rig, or run solvers. Use when the user asks for Minesweeper/Mona Lisa/Paint demos or you need the glasswarp-demo command. Prefer demos.get for one full card. For ad-hoc UI work use rigs.list → session.start → screen.observe instead.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
rigs.listList Windows machines (rigs) paired to this API key: id, name, online, api_access_enabled, and USABLE flag.No findings
Why it is in this group
- The name "rigs.list" says "list": a word for reading.
Description, as the server wrote it
List Windows machines (rigs) paired to this API key: id, name, online, api_access_enabled, and USABLE flag. Read-only — does not start a session. Call first before start_session. A rig is USABLE only when online AND the owner enabled API access. If none are USABLE, tell the user to install the host agent, pair in Console → Rigs, and enable API access — never ask for OS passwords.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
screen.observeRead the current screen: UIA targets (numbered ids + native coords) and a text summary.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it
Read the current screen: UIA targets (numbered ids + native coords) and a text summary. Does not move mouse/keyboard. Default image=false (no JPEG) for speed; set image=true only when you must judge pixels visually (then max_width≈960, quality≈60). If changed=false, JPEG is omitted even when requested — do not re-analyze; wait or act differently. If dirty is null, assume changed. Prefer input.send_actions for multi-step UI; observe after meaningful steps, not after every click. Target ids are valid only until the next UI change.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
session.live_viewReturn the console Live View URL (≈60fps) for the rig owner to watch and intervene.No findings
Why it is in this group
- The name "session.live_view" says "view": a word for reading.
Description, as the server wrote it
Return the console Live View URL (≈60fps) for the rig owner to watch and intervene. Read-only for the agent — does not grant the API key console access. Offer on long or sensitive tasks. Owner must be signed into Glasswarp; API keys alone cannot open the player.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
session.statusFetch session metadata: status, host, mode, created_at, action_count, billed_minutes.No findings
Why it is in this group
- The name "session.status" says "status": a word for reading.
Description, as the server wrote it
Fetch session metadata: status, host, mode, created_at, action_count, billed_minutes. Read-only — no input side effects. Use to tell the user about metered time or confirm the session is still active before more actions.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http glasswarp https://mcp.glasswarp.com/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__glasswarp__demos_list",
      "mcp__glasswarp__demos_get",
      "mcp__glasswarp__rigs_list",
      "mcp__glasswarp__screen_observe",
      "mcp__glasswarp__session_live_view",
      "mcp__glasswarp__session_status"
    ],
    "ask": [],
    "deny": [
      "mcp__glasswarp__session_start",
      "mcp__glasswarp__session_end",
      "mcp__glasswarp__input_click_target",
      "mcp__glasswarp__input_click_xy",
      "mcp__glasswarp__input_type_text",
      "mcp__glasswarp__input_send_keys",
      "mcp__glasswarp__input_drag",
      "mcp__glasswarp__input_scroll",
      "mcp__glasswarp__input_send_actions",
      "mcp__glasswarp__app_launch"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as glasswarp. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.glasswarp/mcp-server/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

10 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry · repository. Synced Oct 21, 2026, 17:55 UTC.

For agents: Markdown · JSON · report this listing