--- bezeichner: "io.github.ObscuritySRL/umbriel" art: "mcp_server" slug: "io-github-obscuritysrl-umbriel" paketkoordinate: "npm:umbriel" status: "aktiv" homepage: "https://github.com/ObscuritySRL/umbriel" erhebungsstand: "2026-10-11T01:17:01.851Z" namensraum: "io.github.ObscuritySRL" registerseite: "https://tracevero.com/mcp/io-github-obscuritysrl-umbriel" abgerufen_am: "2026-10-11" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true einsatzgebiet: "texterkennung" roh_beschreibung: "See and drive a whole Windows machine from Bun — apps, input, screen, OCR, registry, OS — via MCP." version: "1.14.0" roh_umgebungsvariablen: "UMBRIEL_PROFILE, UMBRIEL_OS, UMBRIEL_ALLOW, UMBRIEL_DENY, UMBRIEL_CURSOR, UMBRIEL_FS_ROOT, UMBRIEL_TRACE, UMBRIEL_FFI_TRACE, UMBRIEL_AUDIT, UMBRIEL_REDACT" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/ObscuritySRL/umbriel" roh_paketquellen: "npm" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-06-27" roh_aktualisiert_am: "2026-06-27" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "umbriel" roh_paketversionen: "1.14.0" roh_laufzeithinweise: "bunx" roh_umgebungsformate: "string" roh_umgebungsbeschreibungen: "UMBRIEL_ALLOW=Comma-separated tool names or categories to additionally allow on top of the profile. · UMBRIEL_AUDIT=Controls the default-on stderr audit of mutating tool calls. 'off' is the explicit opt-out (reported at startup); 'verbose' also audits reads. · UMBRIEL_CURSOR=Set to 'never' to forbid the real-cursor fallback entirely (strictly cursor-free). By default clicks/drags are cursor-free but fall back to the real hardware cursor when no cursor-free path exists. · UMBRIEL_DENY=Comma-separated tool names or categories to deny, overriding the profile and UMBRIEL_ALLOW. · UMBRIEL_FFI_TRACE=File path to a flush-before-call diagnostic journal of every COM vcall (slot, this-pointer, arg count). Each line is written and flushed to the OS BEFORE the native call, so after an uncatchable crash the last line names the faulting call. Has per-call overhead; unset = off. For debugging native faults only. · UMBRIEL_FS_ROOT=Sandbox root directory that the fs-category file tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) are confined to when fs tools are enabled; open_path's path argument is honored too. · UMBRIEL_OS=Set to '1' to allow the 'os' tools (launch_app/run_program/open_path, kill_process, manage_process, control_service, set_env, registry_get/registry_list/registry_set) AND the 'fs' tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) regardless of profile. · UMBRIEL_PROFILE=Capability profile: 'readonly' (inspect/read only), 'safe' (read + input + window — default), or 'full' (also os + fs tools). · UMBRIEL_REDACT=Credential masking (default on). 'off' opts out; a regex value overrides the built-in secret shapes masked in clipboard/env/registry reads and the trace journal. · UMBRIEL_TRACE=File path to journal every mutating tool call as JSON Lines (tool, category, masked args, ok, observation); secret-bearing args and values are redacted. Unset = no trace." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"umbriel\",\"version\":\"1.14.0\",\"runtimeHint\":\"bunx\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"UMBRIEL_PROFILE\",\"description\":\"Capability profile: 'readonly' (inspect/read only), 'safe' (read + input + window — default), or 'full' (also os + fs tools).\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UMBRIEL_OS\",\"description\":\"Set to '1' to allow the 'os' tools (launch_app/run_program/open_path, kill_process, manage_process, control_service, set_env, registry_get/registry_list/registry_set) AND the 'fs' tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) regardless of profile.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UMBRIEL_ALLOW\",\"description\":\"Comma-separated tool names or categories to additionally allow on top of the profile.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UMBRIEL_DENY\",\"description\":\"Comma-separated tool names or categories to deny, overriding the profile and UMBRIEL_ALLOW.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UMBRIEL_CURSOR\",\"description\":\"Set to 'never' to forbid the real-cursor fallback entirely (strictly cursor-free). By default clicks/drags are cursor-free but fall back to the real hardware cursor when no cursor-free path exists.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UMBRIEL_FS_ROOT\",\"description\":\"Sandbox root directory that the fs-category file tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) are confined to when fs tools are enabled; open_path's path argument is honored too.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UMBRIEL_TRACE\",\"description\":\"File path to journal every mutating tool call as JSON Lines (tool, category, masked args, ok, observation); secret-bearing args and values are redacted. Unset = no trace.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UMBRIEL_FFI_TRACE\",\"description\":\"File path to a flush-before-call diagnostic journal of every COM vcall (slot, this-pointer, arg count). Each line is written and flushed to the OS BEFORE the native call, so after an uncatchable crash the last line names the faulting call. Has per-call overhead; unset = off. For debugging native faults only.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UMBRIEL_AUDIT\",\"description\":\"Controls the default-on stderr audit of mutating tool calls. 'off' is the explicit opt-out (reported at startup); 'verbose' also audits reads.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"UMBRIEL_REDACT\",\"description\":\"Credential masking (default on). 'off' opts out; a regex value overrides the built-in secret shapes masked in clipboard/env/registry reads and the trace journal.\",\"format\":\"string\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}" --- # io.github.ObscuritySRL/umbriel ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio | | Path argument present | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/ObscuritySRL/umbriel | | Field of use, derived from the vendor description | texterkennung | MCP-Register | 2026-08-26T16:45:01.514Z | abgeleitet | roh_beschreibung: See and drive a whole Windows machine from Bun — apps, input, screen, OCR, registry, OS — via MCP. | | Description (raw) | See and drive a whole Windows machine from Bun — apps, input, screen, OCR, registry, OS — via MCP. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft | | | Declared version | 1.14.0 | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Environment variables (raw) | UMBRIEL_PROFILE, UMBRIEL_OS, UMBRIEL_ALLOW, UMBRIEL_DENY, UMBRIEL_CURSOR, UMBRIEL_FS_ROOT, UMBRIEL_TRACE, UMBRIEL_FFI_TRACE, UMBRIEL_AUDIT, UMBRIEL_REDACT | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Transports (raw) | stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Path arguments (raw) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Repository (raw) | https://github.com/ObscuritySRL/umbriel | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Package registries (raw) | npm | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Path environment variables (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | First listed in the registry (raw) | 2026-06-27 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-06-27 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Package identifiers (raw) | umbriel | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Package versions (raw) | 1.14.0 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Runtime hints (raw) | bunx | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable formats (raw) | string | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable descriptions (raw) | UMBRIEL_ALLOW=Comma-separated tool names or categories to additionally allow on top of the profile. · UMBRIEL_AUDIT=Controls the default-on stderr audit of mutating tool calls. 'off' is the explicit opt-out (reported at startup); 'verbose' also audits reads. · UMBRIEL_CURSOR=Set to 'never' to forbid the real-cursor fallback entirely (strictly cursor-free). By default clicks/drags are cursor-free but fall back to the real hardware cursor when no cursor-free path exists. · UMBRIEL_DENY=Comma-separated tool names or categories to deny, overriding the profile and UMBRIEL_ALLOW. · UMBRIEL_FFI_TRACE=File path to a flush-before-call diagnostic journal of every COM vcall (slot, this-pointer, arg count). Each line is written and flushed to the OS BEFORE the native call, so after an uncatchable crash the last line names the faulting call. Has per-call overhead; unset = off. For debugging native faults only. · UMBRIEL_FS_ROOT=Sandbox root directory that the fs-category file tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) are confined to when fs tools are enabled; open_path's path argument is honored too. · UMBRIEL_OS=Set to '1' to allow the 'os' tools (launch_app/run_program/open_path, kill_process, manage_process, control_service, set_env, registry_get/registry_list/registry_set) AND the 'fs' tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) regardless of profile. · UMBRIEL_PROFILE=Capability profile: 'readonly' (inspect/read only), 'safe' (read + input + window — default), or 'full' (also os + fs tools). · UMBRIEL_REDACT=Credential masking (default on). 'off' opts out; a regex value overrides the built-in secret shapes masked in clipboard/env/registry reads and the trace journal. · UMBRIEL_TRACE=File path to journal every mutating tool call as JSON Lines (tool, category, masked args, ok, observation); secret-bearing args and values are redacted. Unset = no trace. | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Icon formats (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"umbriel","version":"1.14.0","runtimeHint":"bunx","transport":"stdio","environment":[{"name":"UMBRIEL_PROFILE","description":"Capability profile: 'readonly' (inspect/read only), 'safe' (read + input + window — default), or 'full' (also os + fs tools).","format":"string","required":false,"secret":false},{"name":"UMBRIEL_OS","description":"Set to '1' to allow the 'os' tools (launch_app/run_program/open_path, kill_process, manage_process, control_service, set_env, registry_get/registry_list/registry_set) AND the 'fs' tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) regardless of profile.","format":"string","required":false,"secret":false},{"name":"UMBRIEL_ALLOW","description":"Comma-separated tool names or categories to additionally allow on top of the profile.","format":"string","required":false,"secret":false},{"name":"UMBRIEL_DENY","description":"Comma-separated tool names or categories to deny, overriding the profile and UMBRIEL_ALLOW.","format":"string","required":false,"secret":false},{"name":"UMBRIEL_CURSOR","description":"Set to 'never' to forbid the real-cursor fallback entirely (strictly cursor-free). By default clicks/drags are cursor-free but fall back to the real hardware cursor when no cursor-free path exists.","format":"string","required":false,"secret":false},{"name":"UMBRIEL_FS_ROOT","description":"Sandbox root directory that the fs-category file tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) are confined to when fs tools are enabled; open_path's path argument is honored too.","format":"string","required":false,"secret":false},{"name":"UMBRIEL_TRACE","description":"File path to journal every mutating tool call as JSON Lines (tool, category, masked args, ok, observation); secret-bearing args and values are redacted. Unset = no trace.","format":"string","required":false,"secret":false},{"name":"UMBRIEL_FFI_TRACE","description":"File path to a flush-before-call diagnostic journal of every COM vcall (slot, this-pointer, arg count). Each line is written and flushed to the OS BEFORE the native call, so after an uncatchable crash the last line names the faulting call. Has per-call overhead; unset = off. For debugging native faults only.","format":"string","required":false,"secret":false},{"name":"UMBRIEL_AUDIT","description":"Controls the default-on stderr audit of mutating tool calls. 'off' is the explicit opt-out (reported at startup); 'verbose' also audits reads.","format":"string","required":false,"secret":false},{"name":"UMBRIEL_REDACT","description":"Credential masking (default on). 'off' opts out; a regex value overrides the built-in secret shapes masked in clipboard/env/registry reads and the trace journal.","format":"string","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | ## Links - Namespace: [[namensraum/io-github-obscuritysrl|io.github.ObscuritySRL]] --- - Registry page: - Retrieved on: 2026-10-11