Rocuronium
Provides tools to observe and control macOS applications and system UI via accessibility APIs, screenshots, and input events, enabling AI agents to read text, click buttons, type, scroll, drag, and manage windows on a Mac without taking over the cursor.
Rocuronium
Rocuronium gives an AI agent a separate macOS login session with its own desktop and cursor. Local vision models help find UI elements when accessibility data is missing, and each interaction returns evidence of what actually changed: confirmed, noEffect, or unverifiable.

Highlights
Work in a separate login session while the agent uses its own desktop and cursor.
Detect failed interactions even when macOS reports that the API call succeeded.
Find controls with local vision models when an app exposes little accessibility information.
Observation: accessibility trees, element search, on-device OCR, window screenshots, and structural or pixel diffs.
Interactions: click, type, keys, shortcuts, menus, scrolling, app launch, and window controls.
Evidence:
confirmed,noEffect, orunverifiable, with read-back, focus, window, selection, or pixel changes.Isolation: a dedicated agent session, virtual displays, and window parking.
Plans: sequential actions with postconditions and abort, continue, pause-for-human, or fallback policies.
Human control: visible activity, approval before taking the human cursor, and emergency stop ⌃⌥⇧⎋. Resume requires the app’s popover.
Automation: CLI and MCP tools. Session creation requires human approval; MCP can inspect or stop a session.
Related MCP server: Daimon
Notes
Apple silicon · macOS 26.5+ · Accessibility permission; Screen Recording for screenshots and OCR.
Homebrew:
brew install kageroumado/tap/rocuronium.Commands and model reference · Agent setup and MCP configuration, also available through
rocuronium guide.
This server cannot be deployed
Maintenance
Related MCP Connectors
Remote MCP for Android CLI agent build gate, structured receipts, audit logs, and reviewer-ready evi
Securely control computers you explicitly pair through files, terminals, processes, screenshots, desktop UI/input, clipboard, browser automation, diagnostics, and document tools.
Preflight, approve, and prove consequential agent actions with signed evidence and x402 tools.
Evidence-graded agent-work lanes, bid advice, live agent jobs and a hash-chained evidence ledger.
Related MCP Servers
- AlicenseAqualityCmaintenanceGive AI agents eyes and hands on macOS.2226 npm25MIT
- AlicenseNot gradedqualityCmaintenanceA local daemon for macOS that gives any MCP-capable AI client eyes, hands, and a face — screen capture, accessibility tree, mouse/keyboard actions, and an overlay — with a built-in security ceiling.2AGPL 3.0
- FlicenseNot gradedqualityCmaintenanceEnterprise-grade macOS MCP server that gives AI agents eyes, hands, and a terminal, enabling screen capture, mouse/keyboard control, shell commands, and file operations.-
- AlicenseNot gradedqualityCmaintenanceEnables bounded agent authority over a macOS workstation via 63 MCP tools with policy, approval, and audit.4 npmApache 2.0