List directories this server may read and write. File tools reject paths outside these roots.

Read a file inside an allowed root. Use encoding=base64 for binary. offset/limit are 1-based line numbers for utf8.

Create or overwrite a file inside an allowed root. createDirectories mkdir -p the parent. append adds to an existing file.

List files and subdirectories with type, size, modified time, and mode.

Walk an allowed directory. namePattern is a glob (* and **). contentPattern is a JavaScript regex matched per line. Symlinks are not followed.

CPU percent (short sample), load average, memory, and disk usage (df -kP).

Hostname, OS, architecture, uptime, user, home, and environment variables. Secret-looking keys are redacted.

Foreground macOS application processes from System Events (name, pid, visible). includeBackground includes agents.

Public IPv4 (via ipify) and non-internal LAN IPv4 addresses. Use this to record the home WAN address on the status site.

Run a command with the user shell. stdout and stderr are captured separately. stream=true sends MCP progress notifications as output arrives. cwd must be inside an allowed root unless DESKTOP_BRIDGE_RESTRICT_SHELL_CWD=false.

Read the current macOS clipboard as text (pbpaste).

Replace the macOS clipboard with the given text (pbcopy).

List attached displays: name, main flag, scale factor, and frame in Cocoa points.

Capture the screen with screencapture. display is the 1-based display id (-D). Saves PNG under an allowed path (default: a timestamped file in the temp dir). Requires Screen Recording permission for the host app that launched this server.