Provides an integration with Cloudflare Tunnels to expose the MCP server via a public HTTPS URL using cloudflared.
Provides an integration with ngrok to expose the MCP server through an instant public HTTP tunnel, with local API auto-discovery.
Provides an integration to expose the MCP server through a Tailscale Funnel, creating a public HTTPS endpoint.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
Mammouth Defroster 9000 (MD-9000) is a desktop cockpit and MCP server that connects your Mammouth.ai assistant to your Windows PC. Your assistant can look at your screen (with your consent), drive mouse and keyboard, work on files in a sandboxed workspace, automate a browser, manage SSH hosts, check your hardware and run the Mammouth Code CLI — every module can be switched on or off in the GUI.
Contents: Quickstart · Connect to Mammouth.ai · Exposure modes · Safety defaults · What's new · Modules · FAQ · Developers · Disclaimer
No Python, Git or terminal needed — the release is a self-contained package.
Download MammouthDefroster9000-v0.7.0-windows-x64.zip (~128 MB).
Extract it anywhere, e.g. C:\MammouthDefroster9000.
Start start_gui.bat (or MammouthDefroster9000.exe).
Pick an exposure mode (see below) and click ▶ Start Server.
Related MCP server: arena-local
In the cockpit, click 📋 Copy Endpoint (e.g. https://your-pc.ts.net/sse) and 📋 Copy Key (your Bearer token).
In Mammouth.ai open Settings ⚙️ → Custom MCP Servers → Add MCP Server:
Field | Value |
Name |
|
Type |
|
URL | your endpoint, ending in |
Bearer Token | your copied key |
Save, start a new chat — Mammouth discovers the enabled tools automatically.
Mammouth.ai runs in the cloud, so it has to reach your PC. Every mode except LAN makes the server reachable from the public internet; it is then protected by the Bearer token only. Use the least exposure that works for you.
Mode | Reachable from | Setup | Notes |
Tailscale Funnel ⭐ | Public internet | Easy | Stable |
Cloudflare Quick Tunnel | Public internet | None | Bundled |
ngrok | Public internet | Easy | Needs your ngrok authtoken; supports custom domains. |
Direct LAN IP | Your local network only | None |
|
Tunnels are never started automatically unless you enable auto_tunnel yourself.
Default | What it means |
Bearer token required | Every endpoint enforces token authentication ( |
Bound to | The server only listens locally until you choose an exposure mode. |
Workspace sandbox | File tools are confined to |
PowerShell & daemons off | Shell execution is disabled until you switch it on in the GUI. |
Web scraper off | Disabled by default; when enabled, an SSRF shield blocks private networks and cloud metadata endpoints. |
Screen consent gate | Every screenshot needs your approval (once / session / revoke). The model cannot grant consent itself — those functions are not exposed as tools. |
Admin shell off |
|
Encrypted secrets | SSH hosts and tokens are stored with Windows DPAPI. |
⚠️ Once you enable PowerShell & daemons, commands run with your user rights outside the workspace sandbox. Only enable it if you trust the prompts you send.
Self-tooling: If no built-in tool fits, the assistant can write its own Python or PowerShell script into workspace/skills/ and run it locally. Running a script costs no API tokens; writing it does. Requires the PowerShell & daemons module.
defroster_catalog: Token-budget-friendly tool discovery for Mammouth's on-demand mode — the model looks up tools by category or search term instead of loading all schemas at once.
Multi-browser agent: Playwright with Chromium, Firefox and WebKit plus detection of installed Edge, Chrome and Brave. The model can switch engine and headless mode via browser_restart.
Persistent browser logins: Cookies and LocalStorage are saved per browser channel (data/browser_states/), so web logins survive restarts.
Security fix: Stricter workspace containment for type and findstr in the shell module.
Full history: CHANGELOG.md · RELEASE_NOTES.md
15 switchable modules with 97 tools, plus the always-on defroster_catalog. Defaults as shipped in config.example.json.
Module | Default | Tools | What it does | Key tools |
🌐 Browser Agent | ✅ on | 15 | Playwright automation: navigate, click, fill, DOM snapshot, screenshots, tabs, persistent logins |
|
👁️ Desktop Vision | ✅ on | 7 | Multi-monitor and window screenshots, tracked window, hotkey |
|
🖱️ Mouse & Keyboard | ✅ on | 9 | Win32 mouse moves, clicks, drag & drop, scrolling, Unicode typing, hotkeys |
|
💻 Mammouth Code CLI | ✅ on | 5 | Install/update, launch and run headless tasks with the Mammouth Code CLI; sync MCP config |
|
☁️ Google Drive | ✅ on | 11 | List, search, read, write, upload and download Drive files (OAuth2 or service account) |
|
🔎 Workspace Search | ✅ on | 4 | Local SQLite FTS5 index of your code, symbol search, incremental updates |
|
📑 Smart Clipboard | ✅ on | 3 | Clipboard read/write and AI quick actions, hotkey |
|
🧠 Long-Term Memory | ✅ on | 5 | Notes and context that survive across chats; Knowledge Vault tab in the GUI |
|
📋 Tasks & Kanban | ✅ on | 4 | Task board with |
|
⏱️ Task Scheduler | ✅ on | 5 | Recurring prompts for Mammouth chat, Mammouth Code or local scripts |
|
📁 File & Code Ops | ✅ on | 6 | Read, write, patch, search and list files inside |
|
🔑 PuTTY & SSH | ✅ on | 6 | Run commands and transfer files on saved SSH hosts (plink / pscp), DPAPI-encrypted host store |
|
📊 System Diagnostics | ✅ on | 5 | CPU, RAM, disks, GPU, processes, Windows event logs |
|
💻 PowerShell & Daemons | ⛔ off | 9 | PowerShell / cmd execution and background processes — not sandboxed |
|
🌐 Web Scraper | ⛔ off | 2 | Fetch pages as Markdown, check endpoint status (SSRF shield) |
|
Global hotkey to summon the cockpit: Ctrl+Shift+M.
# Run from source
git clone https://github.com/hellforgex/Mammouth-Defroster-9000.git
cd Mammouth-Defroster-9000
uv run gui.py
# Headless server (console with live logs)
.\MammouthDefroster9000-server.exe # or .\start_server.bat
# Build GUI + CLI binaries and the release ZIP
.\build.bat├── server.py # FastMCP server: auth, CORS, tool registration
├── gui.py # CustomTkinter desktop cockpit
├── config.py # Config manager, DPAPI token encryption
├── tray_manager.py # System tray integration
├── modules/
│ ├── browser_agent.py # Playwright multi-browser agent
│ ├── screen_capture.py # Desktop vision + consent gate
│ ├── desktop_input.py # Win32 mouse & keyboard
│ ├── mammouth_code.py # Mammouth Code CLI integration
│ ├── google_drive.py # Google Drive
│ ├── workspace_indexer.py # Local FTS5 code search
│ ├── smart_clipboard.py # Clipboard + quick actions
│ ├── memory.py # Long-term memory (SQLite)
│ ├── tasks_kanban.py # Tasks & Kanban (SQLite)
│ ├── task_scheduler.py # Recurring automations
│ ├── file_ops.py # Sandboxed file operations
│ ├── shell_processes.py # PowerShell & background daemons
│ ├── putty_ssh.py # PuTTY / plink / pscp
│ ├── system_monitor.py # Hardware & event logs
│ ├── web_tools.py # Web scraper with SSRF shield
│ ├── embedded_browser.py # WebView2 Mammouth chat in the cockpit
│ ├── global_hotkey.py # Win32 global hotkeys
│ └── updater.py # Update check
├── config.example.json # Template configuration (copy to config.json)
├── hosts.example.json # Template SSH hosts
├── build.bat · MammouthDefroster9000.spec # PyInstaller build
├── start_gui.bat · start_server.bat
└── assets/ # Banner, screenshots, iconsSecurity reports: see SECURITY.md.
Vibecoded by noskillz — with great agentic power comes great responsibility.
You are handing an AI assistant real keys to your machine: file changes, desktop input, remote SSH servers and — if you enable it — PowerShell. Never expose the server to the internet without the Bearer token. Test your prompts, keep your workspace sandboxed, and remember: if you tell an AI to "clean up everything" and it deletes your favorite meme stash, that is between you, the AI and the cosmos. 🚀
Please read carefully before deploying or operating this software:
Gratuitous Provision ("As-Is" / Statutory Basis):
This software is provided as an open-source project entirely free of charge on an "as-is" and "as-available" basis without warranties of any kind, either express or implied. Under governing statutory law for gratuitous software provision (including Section 521 of the German Civil Code / BGB), the legal liability of the author and developer (noskillz / hellforgex) is strictly limited to intentional misconduct (Vorsatz) and gross negligence (grobe Fahrlässigkeit). Any liability for ordinary, slight, or simple negligence is expressly excluded to the fullest extent permitted by applicable law.
Sole Risk and Operator Responsibility:
The execution and utilization of all functions within this software—specifically modules executing local PowerShell commands, file system modifications (writing, modifying, deleting), system diagnostics, desktop input/vision automation, and remote SSH/VPS server operations (PuTTY / Plink / PSCP)—is undertaken strictly at the user's sole risk. The operator assumes full and exclusive liability for all actions, scripts, and operations initiated by themselves or triggered by connected AI models and autonomous agents.
Exclusion of Consequential Damages & Data Loss:
The author/developer shall not be held liable for any direct, indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of data, corrupted databases, hardware damage, operating system crashes, downtime, security breaches, unauthorized third-party access, or financial losses resulting from the installation, execution, or network exposure of this software.
Network and Tunnel Security:
The operator is solely responsible for properly configuring and securing all network interfaces, reverse proxies, and tunnel endpoints (e.g. via Tailscale VPN, private network isolation, firewalls, or token authentication). Exposing this server to the public internet without adequate authentication is performed entirely at the user's own peril.
MIT License — Copyright (c) 2026 noskillz (hellforgex). See LICENSE and the legal disclaimer above.
This server cannot be deployed
Connect AI assistants to authorized Windows and macOS devices for files, commands, and management.
Connect AI assistants to your approved computer for files, commands, browser and desktop tasks.
Remote Desktop Commander: use files, terminal and processes on your own computers from any AI app.
Connect AI assistants to explicitly paired computers, servers, and VMs for permitted remote actions.
