Computer MCP family plugin for native desktop observation and actions.
Install · Usage · Skill · Documentation · Contributing
A declarative Computer MCP package that connects the host to the vendor's native Computer Use MCP server and adds guidance for verifying every observation and action. It contains no proxy, vendor executable, installer or running skill service. The vendor owns installation, updates and caller compatibility.
The plugin contributes:
| Contribution | What it adds |
|---|---|
native MCP server |
The vendor client's own tools, started as SkyComputerUseClient mcp and exposed under the computer-use prefix |
observe-act-verify skill |
How to complete an authorized GUI task from current observations, scoped actions and post-action checks, and how to recover from stale references or uncertain results |
Install the archive in the host, review the native contribution, choose which tools to expose,
and enable it.
- Build the archive:
scripts/build-package.sh OUTPUT_DIRECTORYwritescomputer-use.zip. - Install it through the host's Plugins page or management CLI with its declared ID and version and the SHA-256 the build prints. A local development registration can point at this checkout instead.
- The host starts new plugins disabled. Review the
nativeMCP contribution, choose its tool whitelist or all-tools exposure explicitly, and keep the appropriate caller and profile permissions. Enabling the package does not override those permissions.
The host finds the client on its search path, then by the installed application's bundle
identifier, com.openai.sky.CUAService. When neither finds it, bind the actual executable in the
plugin's dependency settings; an explicit binding takes precedence.
Host state lives outside this package. Uninstalling a version does not delete the vendor client, this development checkout or saved host grants.
A successful MCP handshake or tools listing does not prove that observation or actions work. Before relying on the plugin, choose a disposable, authorized target: read its state, perform one harmless action, then read and verify the result. Diagnose permission or caller-trust failures through the vendor's and the system's supported flows.
Native accessibility (AX) remains available for diagnostics and fallback where appropriate. An uncertain write is observed before any further action; it is never replayed automatically through AX.
- A Computer MCP host with plugin support, on macOS.
- A vendor-supported Computer Use client that provides its
mcpentry point. - Python 3.11 or newer (standard library only) to build the archive.
The archive contains this manual, the contributor and architecture documentation, the license and third-party notices, the manifest and the skill directory; it excludes Git metadata, local test evidence and external executables, and the same inputs produce the same bytes. The documentation index covers the package architecture and the release process.
CI runs the package tests and keeps the archive and its SHA-256 receipt on pull requests, master
pushes and manual runs, and repeats the tests and build on Python 3.11. It runs without macOS and
never starts the vendor client, so its artifacts are neither a public plugin release nor proof of
GUI compatibility. Local ownership or a bundled source label is not a verified GitHub publisher or
artifact signature.
See the contributor guide.
Computer MCP-owned code and resources use the Functional Source License 1.1, Apache 2.0 Future License (FSL-1.1-ALv2). See the third-party notices for the vendor client's separate ownership and terms.