Computer-Use Agents API
by hcompai · remote · no sign-in to list tools · v1.0.0 · published by GitHub user hcompai
Run and manage H Company's Computer-Use Agents from any MCP client.
9 tools: 1 can delete or cancel things, 1 do something that can't be undone, 3 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels1Claude Code: deny: see these tools
- Can't be undone1Claude Code: ask: see these tools
- Changes things3Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http hai-agents https://agp.hcompany.ai/mcp --header 'Authorization: <your-authorization>'Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
9 tools
Deletes or cancels 1Claude Code: deny
cancel_sessionCancel a session; a no-op if it does not exist or already finished.No findings
Why it is in this group
- The name "cancel_session" says "cancel": a word for removing or ending something.
Description, as the server wrote it Cancel a session; a no-op if it does not exist or already finished.
Can't be undone 1Claude Code: ask
send_messageSend a follow-up message to a running session.No findings
Why it is in this group
- The name "send_message" says "send": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it Send a follow-up message to a running session.
Changes things 3Claude Code: ask
run_agentStart an agent on a task; return the answer or a session handle to wait on.No findings
Why it is in this group
- The name "run_agent" says "run": a word for a change.
Description, as the server wrote it Start an agent on a task; return the answer or a session handle to wait on. ``agent`` is a name from list_agents, which runs its latest revision, or ``name:N`` to run revision N.
write_fileWrite base64-encoded content to a file on a browser session's machine.No findings
Why it is in this group
- The name "write_file" says "write": a word for a change.
Description, as the server wrote it Write base64-encoded content to a file on a browser session's machine. ``session_id`` is the browser session id issued by env-manager when the session was created, not the id ``run_agent`` returns.
Only reads 4Claude Code: allow
list_agentsList agents the caller can run: their org's agents plus the public ``h/`` ones.No findings
Why it is in this group
- The name "list_agents" says "list": a word for reading.
Description, as the server wrote it List agents the caller can run: their org's agents plus the public ``h/`` ones.
list_filesList files on a browser session's machine (e.g.No findings
Why it is in this group
- The name "list_files" says "list": a word for reading.
Description, as the server wrote it List files on a browser session's machine (e.g. downloads), newest first. ``session_id`` is the browser session id issued by env-manager when the session was created, not the id ``run_agent`` returns. When a listing is truncated, page on the last entry's modified_at (ISO-8601) and name, passed as modified_before and name_after. Send both: modification times are not unique, and a timestamp alone skips the rest of a tied group.
read_fileRead a file from a browser session's machine; returns base64 content and metadata.No findings
Why it is in this group
- The name "read_file" says "read": a word for reading.
Description, as the server wrote it Read a file from a browser session's machine; returns base64 content and metadata. ``session_id`` is the browser session id issued by env-manager when the session was created, not the id ``run_agent`` returns.
wait_for_sessionPoll a session: with ``wait`` long-poll for the answer, else return the current snapshot.No findings
Why it is in this group
- The name "wait_for_session" says "wait": a word for reading.
Description, as the server wrote it Poll a session: with ``wait`` long-poll for the answer, else return the current snapshot.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http hai-agents https://agp.hcompany.ai/mcp --header 'Authorization: <your-authorization>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__hai-agents__wait_for_session",
"mcp__hai-agents__list_agents",
"mcp__hai-agents__list_files",
"mcp__hai-agents__read_file"
],
"ask": [
"mcp__hai-agents__run_agent",
"mcp__hai-agents__send_message",
"mcp__hai-agents__share_session",
"mcp__hai-agents__write_file"
],
"deny": [
"mcp__hai-agents__cancel_session"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as hai-agents. Review it before you use it.
