"A server for running MCP apps on Windows and Mac" matching MCP tools:

• send_emailA

  KeeploopB

  SEND a new email now, through Mail.app. Nothing is sent unless the user allows it: their permissions decide per recipient, account, label and app whether this is blocked, needs their click on this Mac (they see the full message), or goes ahead. Call explain_policy first if unsure. Every send then waits a few seconds so the user can cancel it, and the result says whether it went. `to`, `cc` and `bcc` are lists of plain addresses; every one is checked. `sender` must be one of the user's own addresses. This starts a NEW conversation; to answer a message use send_reply. `attachments` takes files already in the user's mail as {mail_id, attachment_id} (from get_email or find_attachments; Mail downloads one it has not stored yet), and absolute paths of files in the user's home folder (not hidden ones or ~/Library; from web and phone apps only as the user's Attach files from this Mac permission allows). Up to 18 MB in total. The user sees every file's name and size in the confirmation. Recipients must be email addresses. Given only a person's name, look the address up first (search_contacts when it is listed, else search_mail); if more than one person or address could be meant, ask the user. Never guess an address. Requires Keeploop Pro.

  Connector

  Destructive

  OAuth

• apps_get_shared_keywordsA

  Manifold MCPA

  Store searches that two to twenty apps all rank for, with each app's position side by side. Use when: "where do we and competitor both rank", "which store keywords does Teams beat Slack on", comparing apps keyword by keyword. Not for: every keyword one app ranks for, use apps_get_keywords. Finding the competitors first, use apps_get_competitors. Returns: List. rows[]: keyword, volume, ranks[] (app_id, rank) in the order the apps were given. Sorted by volume. United States and English only. Cost: 5 + 5 per 100 rows. Default 100 rows = 10 credits. Cached 7 days. Example: {"store": "google_play", "app_ids": ["com.Slack", "com.microsoft.teams"]}

  ConnectorAPI key

• list_appsA

  Review ExpertA

  Lists the App Store and Google Play apps connected to your Review Expert team (id, name, platform, store id, last sync). Call this first: other tools take the returned id as app_id. Example: {"platform": "google_play"} for Android apps only. setup_required means no store app is connected: tell the user to open the link in the error, and do not report zero reviews. syncing means the first sync is still running.

  ConnectorAPI key

• file_readA

  Local MCPB

  Reads a plain text file from the local filesystem by its absolute path — the primary, default tool for reading a local text file (use this unless the file is a PDF, Word, Excel, or PowerPoint document, which have their own readers). Reads anywhere on this Mac — home, external disks, cloud drives, /tmp — with one exception: credential and identity locations (keychains, ~/.ssh, ~/.aws, browser logins, another user's home, Time Machine backups) are never read. Supports .txt, .md, .csv, .json, .xml, .log, .yaml, .toml and common code file types; auto-detects UTF-8 with Latin-1/Windows-1252 fallback. For files in OneDrive use onedrive_read_file, in Google Drive gdrive_read_file; for PDFs pdf_read, Word word_read, Excel excel_read.

  ConnectorOAuth

• shortcuts_runA

  Local MCPB

  Runs one of the user's macOS Shortcuts (Atajos) by name or identifier — the way Mac users already automate HomeKit, Focus modes, and third-party app actions the catalog doesn't cover. It runs the shortcut's OWN actions under the shortcut's own permissions, not a sandboxed subset — the same as clicking Run in the Shortcuts app, so it can do anything that shortcut does (send messages, change or delete files, call web services, control the Mac), including effects LMCP cannot preview or undo. This is a write operation: the first call (confirm=false) returns a preview naming the shortcut, its identifier, and its folder, without running anything; set confirm=true to actually run it. A name that matches more than one shortcut is refused with both identifiers — call again with one of those, never guessed. A shortcut that waits on a dialog or runs long is stopped after a bounded timeout with a clear message instead of hanging this call.

  Connector

  Destructive

  OAuth

• android_install_apkA

  DialogBrainB

  Install an app on the Android device from an APK or split bundle (XAPK/APKS — how most large modern apps ship). Provide apk_url (an https link the device downloads itself — preferred, and the only workable option for real apps) or, for tiny payloads, as apk_base64. Max 300MB. Large apps can take several minutes; if this call times out the install keeps running on the device — verify with the app-list tool instead of re-installing. Use reinstall=true to uninstall then install (for signature changes).

  Connector

  Destructive

  API key

• android_install_apkA

  dialogbrainB

  Install an app on the Android device from an APK or split bundle (XAPK/APKS — how most large modern apps ship). Provide apk_url (an https link the device downloads itself — preferred, and the only workable option for real apps) or, for tiny payloads, as apk_base64. Max 300MB. Large apps can take several minutes; if this call times out the install keeps running on the device — verify with the app-list tool instead of re-installing. Use reinstall=true to uninstall then install (for signature changes).

  Connector

  Destructive

  API key

• android_install_apkA

  dialogbrainB

  Install an app on the Android device from an APK or split bundle (XAPK/APKS — how most large modern apps ship). Provide apk_url (an https link the device downloads itself — preferred, and the only workable option for real apps) or, for tiny payloads, as apk_base64. Max 300MB. Large apps can take several minutes; if this call times out the install keeps running on the device — verify with the app-list tool instead of re-installing. Use reinstall=true to uninstall then install (for signature changes).

  Connector

  Destructive

  API key

• read_mediaA

  Organize with AI (OwAI)A

  Read a photo as an inline image (original or adapted to 5 MiB), or a video as an authenticated HTTPS resource link supporting GET, HEAD and byte ranges. Videos are not base64-encoded into MCP. Use rendition=still only for an inline video thumbnail, not a frame at start_ms. For video playback pass the search result's segment_start_ms as start_ms; it is a seek hint, not a clip. The client must fetch video links with its authentication header (Authorization: Bearer for OAuth tokens or OwAI developer keys; legacy x-app-key is also supported) and support the source codec; a returned link alone does not mean playback or analysis succeeded. OneDrive needs no desktop. Local folders and Apple Photos require the owning app online with remote media access enabled; Photos also needs native permission and may first download/export from iCloud on that Mac. Does not launch windows or retain originals on the server.

  ConnectorAPI key

• play_gameA

  ArcadeIndexA

  Play an ArcadeIndex game right inside the chat. Pass game_id (an id, {slug}-{id}, or a game's url from search_games, trending, games_like or new_games results) or query (the top search hit is played; a game that only plays on its developer's site comes back as link_out). Hosts that support MCP Apps show a player with Next game and More like this (mode player); some chat apps do not allow the game frame yet, and then the player offers the game on arcadeindex.io in a new tab, so do not tell the user the game is running in the chat unless they say so. Games that cannot be framed here (listing-only, not checked in the last 8 days, or a site the chat app does not allow) return mode link_out with link_out.url and the reason: give the user that link. Hosts without MCP Apps get the same data as text: link play_url. Errors: NOT_FOUND, INVALID_ARGUMENT.

  ConnectorNo auth

• execA

  Server4AgentA

  Run a shell command on the server and return its output. Pass project_id to run inside that project's workspace folder, with PORT set to the project's routed port; omit it to run at the server workspace root. For one-off work: installing dependencies, building, inspecting files. Runs as the workspace user, the same one the agent and the apps run as, so what it creates stays editable by both; prefix a command with sudo when it needs root. A project command also gets the project's secrets as env. The command's session ends with the call, so do not use it to start an app or any other long-running process: use start_app, which keeps it running, brings it back after a restart, and tells you whether it answered. Output comes back for about 20 seconds: a command that runs longer keeps going on the server, but its output does not return, and the server's other commands wait for it. Start long work (a big install, a long build) in the background with its output in a file, then read the file.

  Connector

  Destructive

  API key

• stop_allA

  PrometheorA

  Stops every running or queued task of the owner's account, on every computer and in every app, whichever AI started it. Use it only when the owner asks you to stop everything (for example "stop everything" or "stopp alles"); to stop one task use cancel. It switches no AI off and pauses nothing: new tasks can start right after, and switching an AI off is a switch in the Prometheor menu bar on the owner's Mac, and on again on the owner's Prometheor account page. Answers stopped_tasks, the number of tasks it stopped; asking again stops nothing more.

  Connector

  Destructive

  OAuth

• list_appsA

  DockholdA

  List the apps in your Dockhold account, with each app's id, status, URL, and source repo. Call this first whenever the user asks about their apps, or when you need an app_id for any other tool.

  ConnectorNo auth

• onedrive_read_fileA

  Local MCPB

  Reads a text file from your OneDrive synced folder. Supports .txt, .md, .csv, .json, .xml, .log and several code file types. Auto-detects UTF-8, falls back to Latin-1/Windows-1252 for legacy files (common in Latin American banking .TXT padrones). For files elsewhere on this Mac, use file_read.

  ConnectorOAuth

• zoom_list_recordingsA

  Local MCPB

  Lists Zoom meeting recordings saved locally on this Mac (~/Documents/Zoom), newest first: meeting name, date, and which artifacts exist (transcript, captions, saved chat, audio, video). Local recordings only — no Zoom API, no admin approval. Use zoom_read_transcript to read the text of a meeting.

  ConnectorOAuth

• search_kbA

  WindowsForum MCP ServerA

  Search official Microsoft Knowledge Base articles for Windows 10, Windows 11, and Windows Server updates by topic, keyword, build, or KB number — use for Windows update, patch, and known-issue lookups when you lack a KB number. Returns matching KB article titles, release dates, and support.microsoft.com URLs, newest first. Use get_kb_article to fetch the full content of a specific article.

  ConnectorNo auth

• list_appsA

  AppSkyline App RankingsA

  Use this when someone asks which apps they track in AppSkyline, or an app's id is needed. Returns each app's id, name, default locale and its App Store, Mac App Store, Google Play and Microsoft Store ids, up to 100 apps. Not for finding other apps in a store.

  ConnectorNo auth

• list_appsA

  AppSkylineA

  Use this when someone asks which apps they track in AppSkyline, or an app's id is needed. Returns each app's id, name, default locale and its App Store, Mac App Store, Google Play and Microsoft Store ids, up to 100 apps. Not for finding other apps in a store.

  ConnectorNo auth

• get_accountA

  AffiliateSpyA

  Your AffiliateSpy plan and usage: plan name, caps, contact reveals used/left this month (resets on the 1st, UTC), and tracked apps used vs cap.

  ConnectorAPI key

• enable_serviceA

  Local MCPB

  Turns a service back ON in LMCP after the user turned it off. Use it when a tool reports that its service is turned off (service_off) or marked «I don't use this» (service_dismissed). A service that is off is turned on directly from an AI client on the computer; through the cloud relay, and for a dismissed one, it needs the person's confirmation: without confirm this describes what comes back and changes nothing; with confirm=true it returns the app to My apps. For Calendar, Reminders and Contacts the OS permission is separate — this tool reports whether macOS has granted it, and where the user must be to accept the dialog (it appears on the Mac running LMCP, which over Cloud Relay may not be where the user is).

  Connector

  Destructive

  OAuth

• job_startA

  TermalinA

  Start a long-running shell command on a server in the background and return a job id right away. Use it for anything that can take more than about a minute — package installs, builds, backups, migrations, large downloads. The job keeps running after this call returns and survives the connection closing; its output goes to a log you read with job_status. The command runs from the login user's home directory. On a Windows server the command is PowerShell.

  Connector

  Destructive

  OAuth