Skip to main content
Glama

Free Codin Agent 4 Ever

A client-agnostic Model Context Protocol (MCP) server that gives an AI coding host controlled access to local developer capabilities: files, shell, Git, LSP, browser automation, Windows UI automation, VS Code state, long-running jobs, checkpoints, and resource-aware execution.

This repository is intentionally provider-neutral. It does not require or dispatch work to any hosted model vendor.

What this public repository contains

  • Standard MCP over stdio for local MCP clients.

  • Standard MCP over Streamable HTTP at /mcp.

  • Legacy MCP HTTP+SSE compatibility at /sse + /messages.

  • Transactional file edits with checkpoints and optimistic SHA-256 preconditions.

  • Shell, PTY, background processes, durable jobs, Git, and project inspection.

  • Headless language-server operations.

  • Isolated Playwright browser automation.

  • Optional companion Chrome extension for the user's real browser.

  • Optional companion VS Code extension for editor diagnostics/references/debug state.

  • Windows UI automation and media helpers.

  • Filesystem root allowlisting and resource admission controls.

Related MCP server: AI Knowledge Center MCP

Arena / LM Arena

The server itself is plain MCP and is not tied to a specific chat product. Use it with an MCP-capable host or with an Arena deployment/product surface that accepts standard MCP servers. No private Arena API, browser cookie, session token, or reverse-engineered endpoint is included here.

Fastest installation on Windows

Option A — download and double-click

  1. Download the repository as a ZIP and extract it.

  2. Double-click install.cmd.

  3. Enter the folder that the coding agent is allowed to access.

  4. Copy the MCP configuration printed by the installer into your MCP client.

If Node.js 20+ is missing and Windows Package Manager is available, the installer offers to install Node.js LTS automatically. The agent itself is installed globally, so the extracted ZIP can be deleted afterwards.

After installation the MCP client does not need a repository path. It launches:

free-codin-agent stdio

The generated MCP configuration is:

{
  "mcpServers": {
    "free-codin-agent": {
      "command": "free-codin-agent",
      "args": ["stdio"]
    }
  }
}

Option B — npm package

The package is structured for global npm installation:

npm install -g free-codin-agent-4-ever
free-codin-agent setup

Once the package is published to the npm registry, these two commands are enough.

Useful commands:

free-codin-agent             start MCP over stdio
free-codin-agent setup       choose/configure the allowed workspace
free-codin-agent doctor      verify the local installation
free-codin-agent print-config
free-codin-agent http        start the local HTTP transport

Configuration and runtime state are stored in the current user's standard application-data directories. They are never stored in this public repository.

Do I need a domain?

No for local MCP. A stdio-capable MCP client starts free-codin-agent directly on the same machine, so there is no website, public IP, DNS record, domain, TLS certificate, or tunnel involved.

Yes, an HTTPS-reachable endpoint is needed when the MCP host runs somewhere else and must connect back to the user's computer. That endpoint can be a per-user tunnel URL, a domain owned by that user, or a secure relay service. Every installation should have its own authenticated endpoint; users should not share one unrestricted public bridge.

A marketing/documentation website is optional and is unrelated to the MCP transport itself.

Requirements

  • Node.js 20 or newer.

  • Windows for the full Windows automation feature set.

  • Optional: Chrome for browser automation.

  • Optional: FFmpeg for video rendering.

  • Optional: Go / TypeScript / Python language servers depending on the projects you inspect.

Manual developer install

npm install
Copy-Item .env.example .env

For normal end users, prefer install.cmd / free-codin-agent setup. The repository-local .env workflow is retained only for development and advanced deployments.

Start over stdio

This is the preferred local MCP transport:

npm start

Example generic MCP client configuration for a source checkout:

{
  "mcpServers": {
    "free-codin-agent-4-ever": {
      "command": "node",
      "args": ["<ABSOLUTE_PATH_TO_REPOSITORY>/stdio.js"]
    }
  }
}

Replace <ABSOLUTE_PATH_TO_REPOSITORY> with the location where you cloned the repository. No machine path, username, drive letter, workspace, or account is built into the project.

Start over HTTP

npm run start:http

Default endpoint:

http://127.0.0.1:3000/mcp

When MCP_API_KEY is set, clients must send:

Authorization: Bearer <MCP_API_KEY>

Without a key, HTTP access is accepted only from a direct loopback connection. Requests arriving through a proxy/tunnel are rejected.

Security model

This server can edit files and execute commands. Treat it like local developer access.

Recommended public defaults:

  1. Keep MCP_HOST=127.0.0.1 unless you intentionally expose the HTTP server.

  2. Set MCP_ALLOWED_ROOTS to the repositories the agent may touch.

  3. Set a strong MCP_API_KEY before any non-loopback exposure.

  4. Do not commit .env, generated logs, browser profiles, screenshots, clips, checkpoints, memory, or job state.

  5. Review destructive tool calls in the MCP client.

  6. Use the Chrome pairing token only with the unpacked extension instance you control.

Configuration

See .env.example. Important settings:

Variable

Purpose

FCA_WORKSPACES

Known repositories, separated by comma or semicolon

FCA_DEFAULT_WORKSPACE

Default directory for relative paths

FCA_ALLOWED_ROOTS

Optional filesystem sandbox

MCP_API_KEY

Bearer token for HTTP transport

MCP_ALLOWED_ORIGINS

Browser origins allowed to call HTTP endpoints

FCA_CHROME_BRIDGE_ENABLED

Enable/disable the companion Chrome bridge

CHROME_BRIDGE_TOKEN

Chrome extension pairing secret

CHROME_EXTENSION_ID

Optional extension identity pin

VSCODE_BRIDGE_URL

Local VS Code companion endpoint

Chrome companion extension

  1. Open Chrome's extension management page.

  2. Enable Developer mode.

  3. Load chrome-extension as an unpacked extension.

  4. Set CHROME_BRIDGE_TOKEN in .env.

  5. Open the extension popup and save the same token and port.

  6. Optionally set CHROME_EXTENSION_ID after Chrome assigns the unpacked extension an ID.

The extension has no hardcoded identity key in this repository.

VS Code companion extension

The source is under vscode-extension. It exposes only a loopback HTTP helper for diagnostics, references, definitions, open files, and debug state.

Its configuration key is:

freeCodinAgent.port

Default port: 3005.

Verification

npm run check
npm run privacy
npm run preflight
npm test

Privacy / publication hygiene

The public source tree intentionally excludes:

  • local .env files and API keys;

  • tunnel URLs and connector URLs;

  • browser profiles, screenshots, clips, logs, checkpoints, job/task state, and local memory;

  • prior conversation archives;

  • fixed Chrome extension identity keys;

  • machine-specific repository paths;

  • model-provider orchestration code and account-specific integrations.

Run your own secret scanner before publishing any later local changes.

License

ISC. See LICENSE.

Available Tools

114 tools
apply_patchA
Destructive

Apply a multi-file patch atomically (nothing is written unless every hunk applies). Preferred way to change code. Format: *** Begin Patch *** Update File: src/app.ts @@ function main() { (optional anchor line to jump near the change) context line (space prefix) -removed line +added line *** Add File: src/new.ts +file content line *** Delete File: src/old.ts *** Update File: a.ts *** Move to: b.ts *** End Patch Include ~3 unchanged context lines around each change. The result reports compiler/linter problems in the changed files and a checkpoint id for undo.

Inputs: patch (required), cwd, check.

batchB
Destructive

Run several tool calls in one request. Parallel mode is allowed only when every called tool is read-only.

Inputs: calls (required), parallel, stopOnError, failOnAnyError.

browser_clickB
Destructive

Click an element by ref (preferred), selector or text. Returns the updated snapshot.

Inputs: ref, text, button, selector, +3 more.

browser_closeA
Destructive

Close the Playwright browser (the persistent profile stays on disk).

Inputs: no named parameters.

browser_consoleC
Read-onlyIdempotent

Console messages, page errors, failed requests and dialogs captured from the browser.

Inputs: clear, limit, onlyErrors.

browser_dialogB
Destructive

Inspect or answer a JavaScript dialog (alert/confirm/prompt) in the Playwright browser. Dialogs are never accepted automatically.

Inputs: action, promptText.

browser_evaluateB
Destructive

Run JavaScript in the page. Pass an expression ("document.title") or a function body using return.

Inputs: script (required).

browser_get_textC
Read-onlyIdempotent

Visible text of the page or of an element (CSS selector).

Inputs: maxChars, selector.

browser_hoverC
Destructive

Hover over an element.

Inputs: ref, text, selector.

browser_navigateB
Destructive

Open a URL in the Playwright-controlled Chrome (persistent profile: logins are remembered). Returns the page snapshot with element refs.

Inputs: url (required), newTab, snapshot.

browser_press_keyB
Destructive

Press a key or chord on the page, e.g. "Enter", "Escape", "Control+A", "ArrowDown".

Inputs: key (required), snapshot.

browser_record_startA
Destructive

Start recording a video of a browser session. Opens a dedicated recording tab (with your profile logins); every browser_* action afterwards is filmed until browser_record_stop.

Inputs: fps, url, name, width, +5 more.

browser_record_stopB
Destructive

Stop the recording and save the clip (mp4 via ffmpeg). Returns the file path.

Inputs: discard, trimStart.

browser_resizeC
Destructive

Set the viewport size.

Inputs: width (required), height (required).

browser_screenshotA
Read-onlyIdempotent

Screenshot of the page (or one element). The image is returned so you can see it, and saved to disk.

Inputs: ref, text, fullPage, selector.

browser_scrollC
Destructive

Scroll the page by deltaY/deltaX pixels, or scroll an element (ref/selector/text) into view.

Inputs: ref, text, deltaX, deltaY, +1 more.

browser_select_optionC
Destructive

Select option(s) in a .

Inputs: ref, text, value, values, +1 more.

browser_snapshotA
Read-onlyIdempotent

Accessibility snapshot of the current page with [ref=eN] handles. Use it before clicking/typing.

Inputs: no named parameters.

browser_tabsC
Destructive

List, open (new), select or close tabs by index.

Inputs: url, index, action.

browser_typeA
Destructive

Type into an input/textarea/contenteditable. Replaces its value unless slowly: true (types key by key). submit: true presses Enter.

Inputs: text (required), ref, slowly, submit, +1 more.

browser_upload_fileC
Destructive

Upload local file(s) through a file input or an upload button (ref/selector/text).

Inputs: ref, path, text, paths, +1 more.

browser_wait_forB
Destructive

Wait for a selector or text to appear (state visible/hidden/attached), or just wait timeoutMs.

Inputs: text, state, selector, timeoutMs.

capability_callC
Destructive

Fallback dispatcher for a capability present on the live server but missing from a cached client catalog.

Inputs: tool (required), args.

capability_listB
Read-onlyIdempotent

List the live MCP capability catalog. Use prefix to filter tool names.

Inputs: prefix, includeDescriptions.

check_filesB
Read-onlyIdempotent

Run the relevant compilers/linters (tsc, eslint, node --check, go vet, gofmt, py_compile, ruff, JSON) on specific files and report problems.

Inputs: path, paths.

checkpoint_listA
Read-onlyIdempotent

List recent checkpoints (one per file-changing tool call) with the files each one touched.

Inputs: limit.

checkpoint_rewindA
Destructive

Undo: restore files to their state before the given checkpoint (default: the latest), undoing it and every later checkpoint.

Inputs: id.

chrome_call_site_toolA
Destructive

Invoke a tool the web page itself declares (window.mcp / window.mcp_tools / meta[name=webmcp-tool]). Take a chrome_snapshot first to see the catalog.

Inputs: toolName (required), args, tabId, frameId, +1 more.

chrome_clickA
Destructive

Click an element by its [#N] ref using a real (trusted) mouse click via the Chrome debugger; falls back to a DOM click if the debugger cannot attach.

Inputs: ref (required), tabId, frameId, snapshotId, +1 more.

chrome_close_tabC
Destructive

Close a tab.

Inputs: tabId (required).

chrome_consoleC
Read-onlyIdempotent

Console messages and exceptions captured from a tab since the debugger attached to it.

Inputs: clear, tabId.

chrome_dialogA
Destructive

Inspect or answer a JavaScript dialog (alert/confirm/prompt/beforeunload) that is blocking a tab. Dialogs are never accepted automatically: read the message, then accept or dismiss (promptText for prompt()).

Inputs: tabId, action, promptText.

chrome_downloadsB
Read-onlyIdempotent

Recent Chrome downloads (file path, state, size, source URL, referrer).

Inputs: limit, since.

chrome_evaluateB
Destructive

Run JavaScript in a tab's page context (via the debugger). Pass an expression; the JSON-serializable result is returned.

Inputs: expression (required), tabId.

chrome_extension_reloadA
Destructive

Reload the Free Codin Agent Chrome extension from disk (after it was updated) and report the new version.

Inputs: no named parameters.

chrome_get_textB
Read-onlyIdempotent

Visible text of a tab (document.body.innerText, truncated).

Inputs: tabId, maxChars.

chrome_list_tabsA
Read-onlyIdempotent

List all tabs in the user's real Chrome.

Inputs: no named parameters.

chrome_navigateB
Destructive

Navigate a tab to an http(s) URL and wait for it to load.

Inputs: url (required), tabId.

chrome_new_tabC
Destructive

Open a new tab in the real Chrome.

Inputs: url, active.

chrome_pairing_setupA
Destructive

Securely configure or rotate the Chrome bridge pairing token in both the connected extension and .env. The secret is never returned. Restart the MCP worker afterwards to enforce it.

Inputs: rotate.

chrome_press_keyA
Destructive

Press a key or chord (e.g. "Enter", "Tab", "Escape", "Control+a") as a trusted key event in the tab.

Inputs: key (required), ref, tabId, frameId, +1 more.

chrome_screenshotA
Read-onlyIdempotent

Screenshot of a tab in the real Chrome (visible viewport). The image is returned so you can see it.

Inputs: tabId.

chrome_scrollB
Destructive

Scroll the inspected tab by y pixels (negative scrolls up).

Inputs: y, tabId, frameId, snapshotId.

chrome_snapshotA
Read-onlyIdempotent

Semantic snapshot of a tab: interactive elements with [#N] refs, plus page-declared site tools. Take one before clicking or typing.

Inputs: tabId, frameId, snapshotId, maxElements.

chrome_statusB
Read-onlyIdempotent

Connection status of the Chrome extension bridge (the user's real, logged-in Chrome).

Inputs: no named parameters.

chrome_switch_tabB
Destructive

Activate a tab and focus its window.

Inputs: tabId (required).

chrome_typeA
Destructive

Focus an element by ref and type text with trusted input (replaces the current value unless append: true). submit: true presses Enter afterwards.

Inputs: ref (required), text (required), tabId, append, +3 more.

copy_pathC
Destructive

Copy a file or directory.

Inputs: source (required), destination (required), overwrite, allowPartialUndo.

delete_pathA
Destructive

Delete a file, or a directory when recursive is true. Undoable with checkpoint_rewind.

Inputs: path (required), recursive, allowPartialUndo.

edit_fileA
Destructive

Replace exact text in one file. Either oldText/newText, or edits: [{oldText,newText,replaceAll}] applied atomically in order. oldText must match exactly once unless replaceAll. Reports diagnostics and a checkpoint id.

Inputs: path (required), check, edits, newText, +3 more.

fetch_urlA
Read-onlyIdempotent

Fetch a URL (follows redirects) and return readable text. raw: true returns the unprocessed body (useful for JSON/APIs).

Inputs: url (required), raw, maxChars.

file_infoB
Read-onlyIdempotent

Check whether a path exists and get its type, size and modification time.

Inputs: path (required).

find_filesB
Read-onlyIdempotent

Find files by glob pattern, e.g. "**/*.test.js" or "package.json".

Inputs: pattern (required), path, maxResults.

find_symbolB
Read-onlyIdempotent

Find where a function/class/type/method is defined (name or Container.name) and where it is used (whole-word references).

Inputs: name (required), kind, path, exact, +2 more.

get_system_infoA
Read-onlyIdempotent

Host info, configured workspaces, default workspace and available integrations. Call this first in a new conversation.

Inputs: no named parameters.

git_commitB
Destructive

Stage files (all changes by default) and create a commit.

Inputs: message (required), path, files.

git_diffA
Read-onlyIdempotent

Full unified diff of the working tree (or staged changes, or against a ref), optionally for one file.

Inputs: ref, file, path, staged.

git_logC
Read-onlyIdempotent

Recent commit history.

Inputs: path, limit.

git_statusB
Read-onlyIdempotent

git status (short) plus diff stat against HEAD.

Inputs: path.

job_cancelB
Destructive

Cancel a running job (kills its process tree).

Inputs: id (required).

job_listB
Read-onlyIdempotent

Recent background jobs with status.

Inputs: no named parameters.

job_outputB
Read-onlyIdempotent

Read a job log: tail (default 200 lines), a line range (fromLine/lines), or grep (regex with context lines).

Inputs: id (required), grep, tail, lines, +2 more.

job_startA
Destructive

Run a long command (test suite, build, install, benchmark) as a background job. Waits up to waitMs (default 25s): if it finishes you get a smart summary (pass/fail counts, failing tests with context, output tail) instead of the raw log; otherwise poll job_status.

Inputs: command (required), cwd, title, waitMs, +3 more.

job_statusA
Read-onlyIdempotent

Status of a job; waitMs (≤50s) waits for it to finish. Finished jobs return the failure summary.

Inputs: id (required), waitMs.

kill_processB
Destructive

Kill an OS process tree by PID.

Inputs: pid (required).

list_directoryB
Read-onlyIdempotent

Tree listing of a directory (skips node_modules, .git, build outputs unless includeIgnored).

Inputs: path, depth, includeIgnored.

list_processesA
Read-onlyIdempotent

List OS processes (optionally filtered by name substring).

Inputs: filter.

list_workspacesA
Read-onlyIdempotent

List configured project workspaces with git branch and number of changed files.

Inputs: no named parameters.

lsp_callsB
Read-onlyIdempotent

Call hierarchy of the function at file:line: incoming (who calls it) or outgoing (what it calls).

Inputs: file (required), line (required), symbol, character, +1 more.

lsp_code_actionsA
Read-onlyIdempotent

List language-server code actions/quick fixes/refactors for a source range without applying them.

Inputs: file (required), line (required), only, limit, +4 more.

lsp_definitionB
Read-onlyIdempotent

Go to definition (kind: definition | typeDefinition | implementation) of the symbol at file:line (give character or symbol name).

Inputs: file (required), line (required), kind, symbol, +1 more.

lsp_diagnosticsA
Read-onlyIdempotent

Compiler/type-checker diagnostics from the real language server (gopls, typescript-language-server, pyright) for files or a directory — no VS Code needed. all: true also returns diagnostics the server reported for other files of the project.

Inputs: all, path, paths, waitMs.

lsp_format_previewB
Read-onlyIdempotent

Preview language-server formatting edits for a file without applying them.

Inputs: file (required), limit, tabSize, insertSpaces.

lsp_hoverB
Read-onlyIdempotent

Type signature and documentation of the symbol at file:line.

Inputs: file (required), line (required), symbol, character.

lsp_referencesA
Read-onlyIdempotent

All references to the symbol at file:line, resolved by the language server (exact, not text search).

Inputs: file (required), line (required), limit, symbol, +2 more.

lsp_rename_previewA
Read-onlyIdempotent

Preview the exact workspace edits a semantic rename would make. Does not write files; apply reviewed changes through apply_patch/edit_file.

Inputs: file (required), line (required), newName (required), limit, +2 more.

lsp_statusA
Read-onlyIdempotent

Which language servers are installed and running (language, project root, pid).

Inputs: no named parameters.

lsp_symbolsB
Read-onlyIdempotent

Symbols: of one file (file), or matching a query across the project (query + path).

Inputs: file, path, limit, query.

move_pathC
Destructive

Move or rename a file or directory.

Inputs: source (required), destination (required), overwrite, allowPartialUndo.

outlineA
Read-onlyIdempotent

All symbols (functions, classes, methods, types) of a file with line numbers, so you can read_file just the part you need. A directory gives a repo map of it.

Inputs: path (required).

process_inputA
Destructive

Write text to stdin of a process started with process_start (REPLs, prompts, interactive CLIs). close: true writes the data and closes stdin.

Inputs: id (required), data (required), close.

process_listA
Read-onlyIdempotent

List background processes started by this bridge.

Inputs: no named parameters.

process_outputA
Read-onlyIdempotent

Read new output from a background process since the last read (or all buffered output with all: true).

Inputs: id (required), all.

process_startA
Destructive

Start a long-running background command (dev server, watcher, long build). Returns an id; read logs with process_output, stop with process_stop.

Inputs: command (required), cwd, name, waitMs, +1 more.

process_stopA
Destructive

Stop a background process started with process_start (kills its whole process tree).

Inputs: id (required).

project_contextA
Read-onlyIdempotent

Start here for any project: detected stack and build/test/lint commands, git state, top-level layout, project instruction files, README start and saved memory notes.

Inputs: path.

project_memoryA
Destructive

Durable per-project notes shown by project_context in future conversations. action: list | add (note) | remove (index). Save conventions, gotchas and verified commands — not temporary state.

Inputs: note, path, index, action.

pty_listB
Read-onlyIdempotent

List interactive PTY sessions.

Inputs: no named parameters.

pty_readA
Read-onlyIdempotent

Read new terminal output from a PTY session (or all buffered output with all: true). ANSI escapes are stripped by default.

Inputs: id (required), all, raw, maxChars.

pty_resizeC
Destructive

Resize a PTY terminal.

Inputs: id (required), cols, rows.

pty_startB
Destructive

Start a real interactive terminal backed by Windows ConPTY. Use for REPLs, debuggers, SSH/TUI programs and CLIs that require a terminal. By default starts the configured interactive shell; command runs inside it, or file+args starts an executable directly.

Inputs: cwd, args, cols, file, +5 more.

pty_stopC
Destructive

Stop and remove an interactive PTY session.

Inputs: id (required).

pty_writeB
Destructive

Write to an interactive PTY. enter: true appends the Enter key.

Inputs: id (required), data (required), enter.

read_fileA
Read-onlyIdempotent

Read a text file with line numbers. Relative paths resolve against the default workspace. Use startLine/endLine for large files.

Inputs: path (required), endLine, startLine.

read_many_filesA
Read-onlyIdempotent

Read up to 50 files in one call (strings, or {path,startLine,endLine}). Much faster than several read_file calls.

Inputs: files (required), maxTotalChars.

record_clipA
Destructive

Render a video clip from code: pass a complete HTML document (CSS/JS/canvas/SVG animation) or a URL; it is played headlessly at the given size for durationMs and saved as mp4/webm/gif. Default 1080x1920 (vertical, Shorts/TikTok/Reels). If the page defines window.startClip(), it is called when recording begins.

Inputs: fps, url, html, name, +7 more.

repo_mapB
Read-onlyIdempotent

Compact map of a codebase: the most-referenced files with their key functions/classes/types and line numbers. Understand a large project in one call. focus: file names or symbols to prioritise.

Inputs: path, focus, maxChars.

resource_statusA
Read-onlyIdempotent

Current workstation resource pressure and admission-controller slots for commands, builds/tests, LSP, diagnostics, background processes and video work.

Inputs: no named parameters.

run_commandA
Destructive

Run a shell command (/bin/bash) and wait for it to finish. Returns exitCode, stdout, stderr. Use for builds, tests, git, npm, python, ffmpeg, etc. For servers/watchers that never exit use process_start.

Inputs: command (required), cwd, stdin, timeoutMs, +2 more.

search_codeA
Read-onlyIdempotent

Search file contents with a regex (ripgrep when installed, Node fallback otherwise). Returns path:line: text; context adds surrounding lines.

Inputs: query (required), glob, path, context, +3 more.

vscode_add_breakpointC
Destructive

Add a breakpoint (optionally conditional).

Inputs: file (required), line (required), condition.

vscode_debug_stateC
Read-onlyIdempotent

Active debug session and breakpoints.

Inputs: no named parameters.

vscode_diagnosticsA
Read-onlyIdempotent

Live compiler/linter errors and warnings from VS Code language servers (optionally filtered to one file).

Inputs: file.

vscode_find_referencesB
Read-onlyIdempotent

All references to the symbol at a position (via the language server).

Inputs: file (required), line (required), character (required).

vscode_go_to_definitionC
Read-onlyIdempotent

Definition location of the symbol at a position.

Inputs: file (required), line (required), character (required).

vscode_open_fileB
Destructive

Open a file in VS Code at a line so the user can see it.

Inputs: file (required), line.

vscode_open_filesC
Read-onlyIdempotent

Open editor tabs and the active file in VS Code.

Inputs: no named parameters.

windows_actionA
Destructive

Act on a native Windows UI Automation element from windows_snapshot: invoke, setValue, toggle, select, expand, collapse, focus or scrollIntoView. Re-snapshot after meaningful UI changes.

Inputs: ref (required), action (required), pid, title, +1 more.

windows_listB
Read-onlyIdempotent

List visible top-level native Windows application windows with process IDs and UI Automation refs.

Inputs: limit.

windows_screenshotA
Read-onlyIdempotent

Capture the visible bounds of a native Windows application window selected semantically by pid/title. Returns the PNG to the client and saves it under screenshots/.

Inputs: pid, title.

windows_snapshotB
Read-onlyIdempotent

Semantic Windows UI Automation snapshot of a native app window. Returns stable runtime refs, control names/types, supported patterns and bounds. Prefer this over coordinate clicking.

Inputs: pid, title, maxElements, includeOffscreen.

windows_waitB
Read-onlyIdempotent

Wait for a semantic native Windows control to appear, become enabled, or disappear. Matches by accessible name substring, AutomationId and/or control type.

Inputs: pid, name, state, title, +6 more.

write_fileA
Destructive

Create or fully overwrite a file (parent folders are created). Prefer apply_patch/edit_file for changes to existing files.

Inputs: path (required), content (required), check, expectedSha256.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    TDQS

    C2.9/5.0

    Scored across 114 tools

    Disambiguation3/5

    Distinct domain prefixes (browser_, chrome_, lsp_, vscode_, pty_, job_) and detailed descriptions help, but there are multiple overlapping suites for similar actions, such as browser_* vs chrome_* and run_command vs process_start vs job_start. An agent can usually pick correctly from context, yet the parallel tool families create real misselection risk.

    Naming Consistency4/5

    Most tools use snake_case with a predictable domain prefix and action-oriented names, especially browser_, chrome_, windows_, lsp_, vscode_, pty_, job_, and process_. There are minor deviations like outline, batch, repo_map, and project_context, but the overall naming pattern is readable and mostly consistent.

    Tool Count1/5

    The server exposes 114 tools, far beyond the 3–15 range for a well-scoped set. Even with broad coding-agent capabilities, this volume makes discovery, selection, and maintenance unusually heavy.

    Completeness4/5

    The surface is very broad: file editing, code search, LSP, terminals, background jobs, browser and Chrome automation, Windows UI automation, video recording, git, web search, and project memory. Some lifecycle gaps remain, such as git branch/push/pull/merge operations and dedicated test/package management, but most agent workflows are covered.

    Maintenance

    ActivityNo data
    ResponsivenessSyncing

    Related MCP Connectors

    Related MCP Servers