Glasswarp
OfficialThe Glasswarp MCP server lets you remotely control and observe a real Windows PC through an MCP client, enabling full desktop automation via UI interaction, app launching, and screen observation.
Rig management: List paired Windows machines and check their online/usable status (
list_rigs).Session lifecycle: Start and end metered remote desktop sessions, and check session metadata and billing info (
start_session,end_session,get_session_status).Screen observation: Read the current screen state including numbered UIA targets, text summaries, and optional JPEG screenshots (
observe).Mouse input: Click UI targets by ID or raw coordinates (with left/right/middle and double-click support), drag, and scroll (
click_target,click_xy,drag,scroll).Keyboard input: Type Unicode text and send key chords like
ctrl+soralt+f4(type_text,send_keys).Batch actions: Execute 1–10 UI actions in a single call for efficient automation (
send_actions— preferred).App launcher: Start any executable on the remote PC by name or path with optional arguments (
launch_app).Live view: Get a ~60fps URL for the rig owner to monitor or intervene in the session (
get_live_view_url).Demos: List and retrieve showcase run contracts (e.g. Minesweeper, Paint, Notepad) without executing them (
list_demos,get_demo).
Glasswarp MCP Server
See and control a real Windows PC you own — from any MCP client. Observe, click, type, launch apps, Live View. You bring the model; Glasswarp is eyes and hands.
No cloud desktop — install our host on your Windows machine.
Remote URL |
|
Auth |
|
Docs |
Start here
API key — Console → create key → copy
gw_…Paste the key as
GLASSWARP_API_KEY(orAuthorization: Bearer gw_…on the remote URL)
Say “List my rigs.” You need a USABLE machine.
Related MCP server: servo-mcp
Connect (Cursor)
Add to Cursor
— then set GLASSWARP_API_KEY to your console key.
Or paste:
{
"mcpServers": {
"glasswarp": {
"command": "npx",
"args": ["-y", "@glasswarp/mcp"],
"env": {
"GLASSWARP_API_KEY": "gw_live_sk_REPLACE_WITH_YOUR_KEY"
}
}
}
}Same tools via remote URL https://mcp.glasswarp.com/mcp when the client supports headers. More clients: docs.
Workflow
rigs.list → session.start → screen.observe → act → session.end
Prefer input.send_actions for multi-step work. Always end the session.
Tools
Tool | Role |
| Find a USABLE paired Windows machine |
| Metered session (always end) |
| UIA targets + text ( |
| click, type, keys, drag, scroll, |
| Start an exe on the rig |
| Owner Live View · billing signals |
| Showcase run contracts |
More
npm:
@glasswarp/mcp· registry:com.glasswarp/mcp-server· Apache-2.0Directory: Smithery
Open: this MCP server + Python SDK. Not open: Windows host agent and platform (gateway, console, billing).
Local dev / tests: see repo
package.jsonscripts (npm run dev,npm test)
Available Tools
16 toolsclick_targetADestructiveInspect
Left/right/middle-click a UIA target by id from the latest observe (uses native center coords). Prefer over click_xy. Side effect: real mouse click on the remote Windows desktop. Do not reuse target_id after the screen may have changed — re-observe first. For click→type→keys sequences, use send_actions (one turn) instead of chaining this tool.
| Name | Required | Description | Default |
|---|---|---|---|
| button | No | Mouse button (default left) | |
| double | No | If true, double-click (two clicks) | |
| target_id | Yes | Target id from the most recent observe (e.g. uia-… ) | |
| session_id | Yes | Active session id |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses real mouse click side effect and the need to re-observe after screen change, adding context beyond annotations' destructiveHint.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four sentences, front-loaded with core action, no fluff – every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers purpose, usage guidelines, behavioral traits, and caveats comprehensively; no output schema needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so parameters are already well documented. Description adds minimal extra semantics ('uses native center coords' but not tied to a specific parameter). Baseline 3 appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states 'Left/right/middle-click a UIA target by id from the latest observe (uses native center coords)', specifying verb, resource, and special behavior. Distinguishes from sibling click_xy.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly prefers over click_xy, advises using send_actions for sequences instead of chaining, and warns against reusing stale target_ids – clear when-to-use and alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
click_xyADestructiveInspect
Click at native screen coordinates (0…native_width-1, 0…native_height-1 from observe). Last resort when no suitable UIA target exists — prefer click_target. Never use JPEG/downscaled pixel coords. Side effect: real mouse click on the remote desktop.
| Name | Required | Description | Default |
|---|---|---|---|
| x | Yes | Native X (0…native_width-1) | |
| y | Yes | Native Y (0…native_height-1) | |
| button | No | Mouse button (default left) | |
| double | No | If true, double-click | |
| session_id | Yes | Active session id |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses the side effect of a real mouse click on the remote desktop, which adds value beyond the destructiveHint annotation. No contradiction with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with zero wasted words. Every sentence provides critical information (purpose, usage, warnings).
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a click tool with 5 parameters, all well-described in schema, the description covers when to use, side effects, and coordinate system. No output schema needed.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, but the description adds important context about native coordinates and the prohibition of JPEG/downscaled coords, which enhances understanding beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool clicks at native screen coordinates and distinguishes it from the sibling click_target by noting it's a last resort when no UIA target exists.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says to prefer click_target when possible and warns against using JPEG or downscaled pixel coordinates, providing clear when-to-use and when-not-to-use guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
dragADestructiveInspect
Press-move-release mouse drag in native capture coordinates. Use for drawing, sliders, selection boxes, and drag-and-drop. Side effect: mouse_down → moves → mouse_up on the remote desktop. Prefer send_actions if the drag is one step in a longer predictable sequence.
| Name | Required | Description | Default |
|---|---|---|---|
| to_x | Yes | Native end X | |
| to_y | Yes | Native end Y | |
| from_x | Yes | Native start X | |
| from_y | Yes | Native start Y | |
| session_id | Yes | Active session id | |
| duration_ms | No | Approx drag duration in ms; more steps when larger (default ~200) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses the side effect (mouse_down → moves → mouse_up on remote desktop) beyond the annotations' destructiveHint and openWorldHint, giving the agent full behavioral understanding.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with core action and purpose, followed by side effect and usage guidance. Every sentence is informative with no wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema, but the description thoroughly explains the drag operation, its side effects, and usage context. With 100% schema coverage for parameters, the definition is complete for an agent to select and invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so baseline is 3. The description adds value by clarifying that coordinates are in 'native capture' space, which provides context beyond the schema defaults.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the action (press-move-release mouse drag) and resource (native capture coordinates), listing specific use cases like drawing, sliders, selection boxes, and drag-and-drop, which distinguishes it from siblings.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use this tool (for drag operations) and when to prefer send_actions for longer predictable sequences, providing clear guidance on alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
end_sessionADestructiveInspect
End an active session. Side effects: stops billing, runs host safety_restore, closes apps launched via launch_app. Always call when finished or abandoning — do not leave sessions open. Safe to call once; further observe/input on that session_id will fail.
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | Session id returned by start_session |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Description lists specific side effects (stops billing, safety_restore, closes apps) beyond annotations, which already include destructiveHint and openWorldHint. Also notes that further calls on session_id will fail.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences cover purpose, side effects, and usage guidelines with no fluff. Front-loaded key action.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple destructive tool with one parameter and no output schema, the description is complete: it covers what it does, side effects, when to use, and consequences of misuse.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Only one parameter with full schema coverage and description. The tool description does not add additional semantic meaning beyond what the schema provides, but no extra info is needed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states 'End an active session' with specific verb and resource. It distinguishes from sibling tools like start_session by being the explicit counterpart.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to call ('when finished or abandoning') and warns not to call twice. Provides clear usage context without needing alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_demoARead-onlyInspect
Return one showcase run contract (install, command, needs, framing). Does NOT execute the demo or control a PC. Call after list_demos when you know the demo_id. If the client can run shell, offer the command; if chat-only, show the card. Do not replace this with a slow MCP click loop for solver demos.
| Name | Required | Description | Default |
|---|---|---|---|
| format | No | Response format: markdown (default) or json | |
| demo_id | Yes | Showcase id from list_demos |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnlyHint=true and openWorldHint=false. Description adds context that the tool does not execute or control a PC, which is helpful beyond annotations. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with no wasted words. Purpose is stated first, then critical non-behavior, then usage conditions, then output handling. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple read-only retrieval tool with 2 enum parameters and no output schema, the description provides all necessary context: what it does, when to call, what to do with the result, and what it is not. Complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with clear descriptions for both parameters (demo_id enum, format enum). Description adds no new parameter detail beyond reinforcing that demo_id comes from list_demos, which is already implied.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states 'Return one showcase run contract' with specific verb and resource, and explicitly distinguishes from execution ('Does NOT execute the demo or control a PC'). Differentiates from sibling 'list_demos' by describing what it returns.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit when-to-use ('Call after list_demos when you know the demo_id') and action-oriented guidance based on client capability ('If the client can run shell, offer the command; if chat-only, show the card'). Also warns against misuse ('Do not replace this with a slow MCP click loop for solver demos').
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_live_view_urlARead-onlyInspect
Return the console Live View URL (≈60fps) for the rig owner to watch and intervene. Read-only for the agent — does not grant the API key console access. Offer on long or sensitive tasks. Owner must be signed into Glasswarp; API keys alone cannot open the player.
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | Active session id |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond the readOnlyHint annotation, the description explicitly states the agent cannot access the console via API key and that the owner must be signed into Glasswarp. This provides critical behavioral context not available from annotations alone.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is brief and front-loaded with the essential action, using three focused sentences without unnecessary detail. Every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (one parameter, no output schema), the description is largely complete. It could optionally mention that it returns a URL string, but this is implicit and not required.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The single parameter 'session_id' is fully described in the schema (100% coverage). The tool description does not add additional semantics beyond the schema, resulting in a neutral score.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it returns the console Live View URL for the rig owner, specifying the exact resource and action. It distinguishes itself from sibling tools like 'observe' or 'get_session_status' by focusing on a high-frequency live view for human intervention.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description advises offering the tool on 'long or sensitive tasks' and notes it is read-only, giving clear context for use. It lacks explicit alternatives but the purpose is narrow enough that the usage is well implied.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_session_statusARead-onlyInspect
Fetch session metadata: status, host, mode, created_at, action_count, billed_minutes. Read-only — no input side effects. Use to tell the user about metered time or confirm the session is still active before more actions.
| Name | Required | Description | Default |
|---|---|---|---|
| session_id | Yes | Session id from start_session |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint. The description adds 'no input side effects' and lists returned fields, providing context beyond annotations without contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences: first defines the tool's output, second gives usage and safety. Front-loaded, no unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple fetch tool with one parameter and no output schema, the description lists all returned fields and provides usage context. No gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with a clear description for session_id. The description mentions 'session metadata' but does not add new semantics beyond what the schema provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Fetch' and the resource 'session metadata', listing specific fields like status, host, mode. It distinguishes from sibling tools by emphasizing read-only nature and use case for metered time or checking active status.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use: 'to tell the user about metered time or confirm the session is still active before more actions.' Lacks explicit when-not-to-use or alternatives, but the context is clear given sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
launch_appADestructiveInspect
Launch an executable on the remote Windows rig (name on PATH or absolute path), optional args. Side effects: starts a process; Glasswarp tracks it and closes it on end_session. Use for notepad.exe, mspaint.exe, chrome with URL args, etc. Wait/re-observe after launch before clicking — do not assume the window is focused immediately.
| Name | Required | Description | Default |
|---|---|---|---|
| args | No | Process args, e.g. ["--new-window", "https://example.com"] | |
| session_id | Yes | Active session id | |
| path_or_name | Yes | Executable name (e.g. notepad.exe) or absolute path |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Exceeds annotations by detailing side effects: starts a process, Glasswarp tracks it and closes it on end_session. Annotations only indicate openWorldHint and destructiveHint; the description adds specific lifecycle and usage behavior (wait after launch), which is highly valuable for an agent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four sentences, front-loaded with purpose, side effects, usage examples, and a critical caveat. Every sentence contributes unique information with no redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no output schema, the description adequately covers purpose, side effects, parameter semantics, and usage guidance. No significant gaps remain for an agent to select and invoke this tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so baseline is 3. The description adds minimal extra meaning: clarifies path_or_name can be name on PATH or absolute path, and mentions optional args, but schema already provides examples for args. Doesn't substantially improve understanding beyond schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'launch' with a specific resource ('executable on the remote Windows rig') and includes examples (notepad.exe, mspaint.exe, chrome) that distinguish it from sibling tools like click_target, type_text, etc.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit usage context ('Use for notepad.exe, mspaint.exe, chrome with URL args, etc.') and a critical behavioral guideline ('Wait/re-observe after launch before clicking — do not assume the window is focused immediately'). Could be improved by explicitly stating when not to use, but the examples and sibling list imply alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_demosARead-onlyInspect
List showcase run contracts (id, title, install, command). Read-only catalog — does NOT start a session, touch a rig, or run solvers. Use when the user asks for Minesweeper/Mona Lisa/Paint demos or you need the glasswarp-demo command. Prefer get_demo for one full card. For ad-hoc UI work use list_rigs → start_session → observe instead.
| Name | Required | Description | Default |
|---|---|---|---|
| format | No | Response format: markdown (default) or json |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true; description reinforces with 'Read-only catalog' and adds extra transparency about not starting sessions, touching rigs, or running solvers. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three concise sentences with front-loaded key information. Every sentence adds value.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With annotations present, one fully documented parameter, and description covering purpose, usage, and behavior, the definition is complete for a simple list tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers the single parameter 'format' with enum and description. Description does not add further meaning beyond schema, so baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it lists showcase run contracts with specific fields (id, title, install, command). It distinguishes from siblings by mentioning get_demo for one full card and list_rigs for UI work.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly tells when to use (user asks for demos or needs the command) and when not to (does not start session, touch rig, or run solvers). Provides alternatives: get_demo for one card, list_rigs → start_session → observe for ad-hoc UI.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_rigsARead-onlyInspect
List Windows machines (rigs) paired to this API key: id, name, online, api_access_enabled, and USABLE flag. Read-only — does not start a session. Call first before start_session. A rig is USABLE only when online AND the owner enabled API access. If none are USABLE, tell the user to install the host agent, pair in Console → Rigs, and enable API access — never ask for OS passwords.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint: true and openWorldHint: true. The description reinforces this with 'Read-only — does not start a session.' It also adds context about the USABLE flag meaning and the required user actions for non-usable rigs. No contradictions with annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise: four sentences, each essential. The first sentence states the purpose and output. The second emphasizes read-only nature. The third provides ordering instruction. The fourth explains USABLE and failure response. No filler, well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool has zero parameters and no output schema. The description fully compensates by listing the output fields, explaining the USABLE condition, and providing error-handling guidance. It covers all necessary context for an agent to use this tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has zero parameters (schema_description_coverage 100%). With no parameters, the baseline is 4. The description adds value by explaining the output fields and their meaning (id, name, online, etc.), which is not in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description explicitly states the verb 'List', the resource 'Windows machines (rigs)', and the scope 'paired to this API key'. It lists the returned fields (id, name, online, api_access_enabled, USABLE). This clearly distinguishes it from sibling tools like start_session and end_session.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit usage guidance: 'Call first before start_session.' It explains the USABLE condition (online AND api_access_enabled) and tells the agent what to do if none are USABLE (instruct user to install agent, pair, and enable access). No alternative tools are mentioned, but the guidance is complete for this tool's context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
observeARead-onlyInspect
Read the current screen: UIA targets (numbered ids + native coords) and a text summary. Does not move mouse/keyboard. Default image=false (no JPEG) for speed; set image=true only when you must judge pixels visually (then max_width≈960, quality≈60). If changed=false, JPEG is omitted even when requested — do not re-analyze; wait or act differently. If dirty is null, assume changed. Prefer send_actions for multi-step UI; observe after meaningful steps, not after every click. Target ids are valid only until the next UI change.
| Name | Required | Description | Default |
|---|---|---|---|
| mark | No | Overlay numbered targets on JPEG when image=true (default true; ignored if image=false) | |
| image | No | Include JPEG (default false). True only to visually read/judge the screen. | |
| quality | No | JPEG quality 40–100 when image=true (default 60) | |
| max_width | No | JPEG max width when image=true (default 960). Clicks always use native coords, not JPEG pixels. | |
| session_id | Yes | Active session id from start_session |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Beyond readOnlyHint and openWorldHint annotations, the description details behavior (no mouse/keyboard, default image false, quality/max_width defaults, changed flag handling, target id validity).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Concise and well-structured: front-loaded with purpose, each sentence adds necessary information, no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Comprehensive despite no output schema; covers return format, edge cases (changed=false, dirty null), and usage context effectively.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Adds meaningful context to all parameters (e.g., when to set image=true, mark default, quality/max_width defaults, changed flag behavior) beyond the schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool reads the current screen returning UIA targets and a text summary. It specifies it does not move mouse/keyboard, distinguishing it from action tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit guidance: prefer send_actions for multi-step UI, observe after meaningful steps, conditionally set image=true, and handle changed=false by not re-analyzing.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
scrollADestructiveInspect
Move the cursor to native (x,y) then apply a vertical mouse-wheel delta. Side effect: scroll on whatever is under that point. Negative delta scrolls toward the bottom of the page. Prefer send_actions when scroll is part of a multi-step sequence. Re-observe after scrolling lists/pages before clicking targets.
| Name | Required | Description | Default |
|---|---|---|---|
| x | Yes | Native X to hover before scrolling | |
| y | Yes | Native Y to hover before scrolling | |
| delta | Yes | Vertical wheel delta (negative = toward bottom of page) | |
| session_id | Yes | Active session id |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate destructive hint and open world, but the description adds specific side effect ('scroll on whatever is under that point') and delta direction. No contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four sentences, no fluff, front-loaded with core action and side effect, then direction and guidelines. Every sentence earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no output schema and moderate complexity, the description covers all key aspects: behavior, side effect, parameter semantics, usage alternatives, and post-action caution. Highly complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and each parameter is already well described. The description adds ordering ('move cursor then apply delta'), but this is implied by schema descriptions already stating 'hover before scrolling'. Minimal additional value.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb (move and scroll) and resource (cursor/page), and distinguishes from siblings by mentioning 'Prefer send_actions when scroll is part of a multi-step sequence.'
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use this tool (scroll on whatever under point) and when not to (prefer send_actions for sequences), plus a caution to re-observe after scrolling.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_actionsADestructiveInspect
PREFERRED multi-step tool: run 1–10 predictable UI actions in one call (click_target, click_xy, type_text, send_keys, drag, scroll). Side effects: all actions execute on the remote desktop; fails fast before sending if any action is invalid. observe_after defaults true (verification observe: text+targets; set observe_image=true for JPEG). Do not batch across unpredictable waits (page loads, installers, modals) — single-step those. Prefer this over chaining solo click/type/keys tools.
| Name | Required | Description | Default |
|---|---|---|---|
| actions | Yes | Ordered actions (max 10); click_target needs target_id from latest observe | |
| session_id | Yes | Active session id | |
| observe_after | No | Default true. When true, return a verification observe in the same result | |
| observe_image | No | Default false. When true with observe_after, include verification JPEG unless changed=false |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Describes side effects (all actions execute on remote desktop), fail-fast behavior, and default observe_after behavior. Annotations include destructiveHint and openWorldHint, but the description adds meaningful context beyond those without contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is well-structured, starting with the core purpose, then side effects, then usage guidelines. Every sentence adds value with no filler, and it's appropriately sized for the complexity of the tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (multi-step actions, side effects, defaults), the description covers all necessary aspects: purpose, usage boundaries, side effects, and guidance on alternatives. No return value explanation needed as no output schema is present.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% so parameters are already documented, but the description adds useful semantic detail about defaults (observe_after defaults true) and conditional behavior (observe_image for JPEG). This goes beyond mere schema repetition.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly identifies the tool as a multi-step action batcher supporting 1-10 predictable UI actions, lists supported action types, and explicitly distinguishes from single-action sibling tools (e.g., 'Prefer this over chaining solo click/type/keys tools').
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides explicit guidance on when to use (batch predictable actions) and when not to ('Do not batch across unpredictable waits...'), along with a clear alternative (single-step those). This directly helps the agent select the correct tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
send_keysADestructiveInspect
Send a key or chord to the focused window (e.g. enter, tab, ctrl+s, alt+f4, win). Side effect: real key events on the remote desktop. Prefer bundling into send_actions when the shortcut follows a click/type in the same planned sequence. Use type_text for literal strings, not this tool.
| Name | Required | Description | Default |
|---|---|---|---|
| keys | Yes | Key or combo, e.g. enter, tab, ctrl+s, alt+f4, win | |
| session_id | Yes | Active session id |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already convey destructiveHint and openWorldHint. The description adds 'Side effect: real key events on the remote desktop,' which provides additional behavioral context beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, each essential: what it does, side effect, and usage guidance. Front-loaded with the core action, no wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Simple tool with no output schema; the description fully covers purpose, side effects, and when to use alternatives. No gaps remain for an agent to misinterpret.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with both parameters well-described. The description repeats examples from the schema but does not add significant new meaning beyond what the schema already provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Send') with a clear resource ('key or chord to the focused window'), includes examples (enter, tab, ctrl+s), and distinguishes from sibling tools like type_text and send_actions.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to prefer send_actions (when shortcut follows click/type in same sequence) and when to use type_text (for literal strings), providing clear decision guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
start_sessionADestructiveInspect
Start a metered desktop session on a USABLE rig from list_rigs. Side effects: begins wall-clock billing, shows an on-screen “API session active” indicator, enables observe/input until end_session. Idle sessions auto-end after ~15 minutes. Always call end_session when done or abandoning. Do not call if no USABLE rig exists. Returns session_id and Live View URL (owner console login required).
| Name | Required | Description | Default |
|---|---|---|---|
| rig_id | Yes | Rig id from list_rigs (must be online with api_access_enabled) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses side effects beyond annotations: wall-clock billing, on-screen indicator, enabling observe/input, and idle auto-end after ~15 minutes. No contradiction with annotations (destructiveHint, openWorldHint).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four sentences cover all essential information with no redundancy. Critical points are front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers prerequisites, side effects, idle timeout, required follow-up (end_session), and return values (session_id, Live View URL). No output schema exists, but description provides sufficient guidance.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema covers rig_id with a clear description. The description adds context that the rig must be 'USABLE' and from list_rigs, reinforcing selection criteria beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly specifies the action ('Start'), resource ('metered desktop session'), and target ('USABLE rig from list_rigs'). Differentiates from sibling tools like end_session, which ends the session.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to call (when a USABLE rig exists) and when not to call, and mandates calling end_session upon completion. Mentions prerequisite list_rigs and side effects that affect usage decisions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
type_textADestructiveInspect
Type a Unicode string into the currently focused control via native input. Does not click first — focus the field (click_target / send_actions) before calling. Side effect: keystrokes on the remote desktop. For form fills (click → type → tab/enter), prefer send_actions in one call.
| Name | Required | Description | Default |
|---|---|---|---|
| text | Yes | Literal text to type (not a key combo) | |
| session_id | Yes | Active session id |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate destructiveHint=true, so the tool's mutability is known. The description adds context: it types via native input, has a side effect of keystrokes on the remote desktop, and does not click first. This enriches the behavioral profile beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise (3 sentences) with no wasted words. It front-loads the main action, then adds prerequisite, side effect, and alternative usage, all in a logical order.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (2 params, no output schema), the description covers the action, prerequisite, side effect, and alternative. It lacks explicit mention of error behavior if the field is not focused, but that is implied as a prerequisite. Overall adequate for effective use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with clear descriptions for both parameters. The description adds that the text is a Unicode string and that it's literal (not a key combo), which adds meaning beyond the schema for the 'text' parameter.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool types a Unicode string into the focused control via native input, which is specific and distinguishes it from siblings like send_keys (key combos) and send_actions (sequences). It explicitly says it does not click first and that for form fills, send_actions is preferred.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit guidance: focus the field before calling (using click_target or send_actions), and for multi-step form fills, prefer send_actions. This clearly tells when and when not to use this tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
16 tool updates
v0.1.1- First observed
click_target - First observed
click_xy - First observed
drag - First observed
end_session - First observed
get_demo - First observed
get_live_view_url - First observed
get_session_status - First observed
launch_app - First observed
list_demos - First observed
list_rigs - First observed
observe - First observed
scroll - First observed
send_actions - First observed
send_keys - First observed
start_session - First observed
type_text
TDQS
Each tool has a clear, distinct purpose. Even similar tools like click_target and click_xy are differentiated by description, and type_text vs send_keys serve different input needs. No overlapping or ambiguous tools.
All tool names follow a consistent verb_noun pattern in snake_case (e.g., end_session, click_target, list_rigs, send_actions). The only exception is 'observe', but it stands alone as a single-word verb. No mixing of conventions.
With 16 tools, the set is slightly above the typical 3-15 range but each tool serves a necessary function for remote desktop control. It could be trimmed, but the count is still reasonable and not excessive.
The tool set covers the full lifecycle: session management (start/end/status), UI observation and input (click, type, keys, drag, scroll, batch actions), app launch, and configuration (list rigs/demos, live view URL). No obvious gaps for the domain.
Maintenance
Related MCP Connectors
Turns a phone into a camera+Bluetooth remote so AI assistants can see and control any PC.
Autonomous cloud agent tasks: real browser + your tools, structured evidence-backed results.
Control real Android and iOS devices with LLM agents — tap, swipe, type, automate flows.
Operate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.
Related MCP Servers
- AlicenseAqualityAmaintenanceWindows desktop automation MCP server — screenshot, mouse, keyboard & UI Automation. Lets LLM agents see and control your Windows desktop directly.301,29217MIT
- AlicenseNot gradedqualityDmaintenanceEnables AI agents to see and control your desktop with tools for screenshots, clicks, typing, and more, all locally on macOS and Windows.119MIT
- AlicenseAqualityAmaintenanceAllows AI clients to see and control Windows 10/11 desktops via MCP, with screenshots, UI Automation, Chrome CDP, keyboard/mouse, and terminal using semantic element targeting.301,292MIT
- FlicenseNot gradedqualityCmaintenanceEnables AI agents to control Windows GUI applications like a human using screen capture, OCR, mouse and keyboard input, and window management, with safety levels and memory.-
Appeared in Searches
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/glasswarp/mcp-server'
If you have feedback or need assistance with the MCP directory API, please join our Discord server