hypruse MCP Server

What the code does

We read the source, 11 h ago · rules 3dff92dd89df

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

        proc = subprocess.run(argv, capture_output=True, text=True, timeout=10)

        path = display if display.startswith("/") else os.path.join(runtime, display)

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

claude mcp add hypruse -- uvx hypruse

{
  "mcpServers": {
    "hypruse": {
      "args": [
        "hypruse"
      ],
      "command": "uvx"
    }
  }
}

[mcp_servers.hypruse]
command = "uvx"
args = ["hypruse"]

{
  "mcpServers": {
    "hypruse": {
      "args": [
        "hypruse"
      ],
      "command": "uvx"
    }
  }
}

{
  "mcpServers": {
    "hypruse": {
      "args": [
        "hypruse"
      ],
      "command": "uvx"
    }
  }
}

This one needs environment variables set before it will start: HYPRUSE_SCREENSHOT_MODE (How captures are returned: 'file' writes to XDG_RUNTIME_DIR and returns the path, 'image' returns the image inline. Use 'image' for clients that render MCP images but cannot read files, such as Claude Desktop.), HYPRUSE_READONLY (Set to 1 to expose only the observation tools (desktop, screenshot, zoom, ui, marks, binds, wait_for). The agent can see and narrate but cannot click, type, or launch.), HYPRUSE_CONFINE (Restrict input to a scope of windows and refuse everything outside it: 'launched' (only windows hypruse opened this session), 'class:firefox,kitty', or 'workspace:3,special:notes'. Unset means no confinement.), HYPRUSE_AUTH_GUARD (Refuse to click or type into system authentication dialogs (polkit, keyring prompts). On by default; 'strict' also refuses password fields in ordinary windows; 0 disables it.), HYPRUSE_STRICT (Set to 1 to refuse to act when the cursor or focused window moved since hypruse's last action, so the agent must re-read the desktop before retrying.), HYPRUSE_MARK (Set to 1 to make the agent's presence legible: tag every window it opens 'hypruse-owned' and flash an on-screen notice when it opens a window or captures the screen.), HYPRUSE_CLIPBOARD (Set to 1 to register the opt-in clipboard tool (never in read-only mode). Off by default because clipboards hold passwords.), HYPRUSE_JOURNAL (Record every tool call, refusals included, as one NDJSON line: 1 writes to XDG_STATE_HOME/hypruse/journal.ndjson, or give a path. Read it back with 'hypruse journal'. Off by default.), HYPRUSE_JOURNAL_MAX_BYTES (Rotate the journal once it reaches this size, keeping one previous generation alongside it. Set 0 to never rotate.), HYPRUSE_JOURNAL_TEXT (Set to 1 to record typed and copied text in the journal verbatim instead of as a length plus digest. Off by default because keystrokes are passwords; needed only to replay typing.), HYPRUSE_DRYRUN (Set to 1 for a rehearsal: every acting tool validates its arguments and runs every trust guard, then reports what it would have done and delivers no input.). The author declared them in the registry entry; get the values from the project itself.