Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

Glasswarp

REMOTE · MCP.GLASSWARP.COM · SCANNED AUG 3

Eyes and hands on real Windows PCs — observe, click, type via Glasswarp API.

+55 this week 76 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →

Endpoint Security83
Transport & Reachability100
Schema Quality & AI Usability80
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (excellent).Pass
  • Context-footprint check failed: tool/resource definitions use about 3503 tokens (~145/item across 24 items; 16 tools + 8 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
  • Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

remote · mcp.glasswarp.com

# add to Claude Code
claude mcp add --transport http com-glasswarp-mcp-server https://mcp.glasswarp.com/mcp
# ~/.codex/config.toml
[mcp_servers.com-glasswarp-mcp-server]
url = "https://mcp.glasswarp.com/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-glasswarp-mcp-server": {
      "type": "remote",
      "url": "https://mcp.glasswarp.com/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add com-glasswarp-mcp-server --url https://mcp.glasswarp.com/mcp --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  com-glasswarp-mcp-server:
    url: "https://mcp.glasswarp.com/mcp"
// mcp.json
{
  "mcpServers": {
    "com-glasswarp-mcp-server": {
      "type": "http",
      "url": "https://mcp.glasswarp.com/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 2 Aug 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.

  • 31 Jul 26 +4
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 +50
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 27 Jul 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 26 Jul 26 21

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Probed https://mcp.glasswarp.com/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=mcp.glasswarp.com CN=YE2,O=Let's Encrypt,C=US 22 Jul 2026 20 Oct 2026 ECDSA 256 ECDSA-SHA384 5b82802489e547a6c7319d8b1989bea874e
SANs: mcp.glasswarp.com
CN=YE2,O=Let's Encrypt,C=US (CA) CN=Root YE,O=ISRG,C=US 3 Sept 2025 2 Sept 2028 ECDSA 384 ECDSA-SHA384 4df3b15dd6c0784c507cd37b58e6f115
CN=Root YE,O=ISRG,C=US (CA) CN=ISRG Root X2,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 ECDSA-SHA384 872165fc34b6e5fba8add5b3705fb53a
CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) CN=ISRG Root X1,O=Internet Security Research Group,C=US 13 May 2026 2 Sept 2032 ECDSA 384 SHA256-RSA 6c8f1dc727c7117f7baf853ac980f9cd
DNSSEC insecure

Validation of mcp.glasswarp.com. Not signed

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
glasswarp.com. absent Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation
Authentication Challenged, unverified

The endpoint asked for a token, but we could not retrieve and validate the RFC 9728 metadata that tells a client how to obtain one.

Result Challenged, unverified
Enforced On tool calls
HTTP status 200

Protected resource metadata

Retrieved No
Problem no_resource_metadata
Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://mcp.glasswarp.com/mcp Verified 200
http (plaintext) http://mcp.glasswarp.com/mcp HTTPS enforced 301 https://mcp.glasswarp.com/mcp
MCP tools — 16 exposed · ~1,980 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
app.launch ~138

Launch an executable on the remote Windows rig (name on PATH or absolute path), optional args. Side effects: starts a process; Glasswarp tracks it and closes it on session.end. Use for notepad.exe, mspaint.exe, chrome with URL args, etc. Wait/re-observe after launch before clicking — do not assume the window is focused immediately.

NameTypeReqDescription
argsarrayProcess args, e.g. ["--new-window", "https://example.com"]
path_or_namestringyesExecutable name (e.g. notepad.exe) or absolute path
session_idstringyesActive session id
NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.

demos.get ~105

Return one showcase run contract (install, command, needs, framing). Does NOT execute the demo or control a PC. Call after demos.list when you know the demo_id. If the client can run shell, offer the command; if chat-only, show the card. Do not replace this with a slow MCP click loop for solver demos.

NameTypeReqDescription
demo_idstringyesShowcase id from demos.list
formatstringResponse format: markdown (default) or json
NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.

demos.list ~105

List showcase run contracts (id, title, install, command). Read-only catalog — does NOT start a session, touch a rig, or run solvers. Use when the user asks for Minesweeper/Mona Lisa/Paint demos or you need the glasswarp-demo command. Prefer demos.get for one full card. For ad-hoc UI work use rigs.list → session.start → screen.observe instead.

NameTypeReqDescription
formatstringResponse format: markdown (default) or json
NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.

input.click_target ~150

Left/right/middle-click a UIA target by id from the latest screen.observe (uses native center coords). Prefer over input.click_xy. Side effect: real mouse click on the remote Windows desktop. Do not reuse target_id after the screen may have changed — re-observe first. For click→type→keys sequences, use input.send_actions (one turn) instead of chaining this tool.

NameTypeReqDescription
buttonstringMouse button (default left)
doublebooleanIf true, double-click (two clicks)
session_idstringyesActive session id
target_idstringyesTarget id from the most recent screen.observe (e.g. uia-… )
NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.

input.click_xy ~134

Click at native screen coordinates (0…native_width-1, 0…native_height-1 from screen.observe). Last resort when no suitable UIA target exists — prefer input.click_target. Never use JPEG/downscaled pixel coords. Side effect: real mouse click on the remote desktop.

NameTypeReqDescription
buttonstringMouse button (default left)
doublebooleanIf true, double-click
session_idstringyesActive session id
xintegeryesNative X (0…native_width-1)
yintegeryesNative Y (0…native_height-1)
NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.

input.drag ~141

Press-move-release mouse drag in native capture coordinates. Use for drawing, sliders, selection boxes, and drag-and-drop. Side effect: mouse_down → moves → mouse_up on the remote desktop. Prefer input.send_actions if the drag is one step in a longer predictable sequence.

NameTypeReqDescription
duration_msintegerApprox drag duration in ms; more steps when larger (default ~200)
from_xintegeryesNative start X
from_yintegeryesNative start Y
session_idstringyesActive session id
to_xintegeryesNative end X
to_yintegeryesNative end Y
NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.

input.scroll ~126

Move the cursor to native (x,y) then apply a vertical mouse-wheel delta. Side effect: scroll on whatever is under that point. Negative delta scrolls toward the bottom of the page. Prefer input.send_actions when scroll is part of a multi-step sequence. Re-observe after scrolling lists/pages before clicking targets.

NameTypeReqDescription
deltaintegeryesVertical wheel delta (negative = toward bottom of page)
session_idstringyesActive session id
xintegeryesNative X to hover before scrolling
yintegeryesNative Y to hover before scrolling
NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.

input.send_actions ~200

PREFERRED multi-step tool: run 1–10 predictable UI actions in one call (input.click_target, input.click_xy, input.type_text, input.send_keys, input.drag, input.scroll). Side effects: all actions execute on the remote desktop; fails fast before sending if any action is invalid. observe_after defaults true (verification observe: text+targets; set observe_image=true for JPEG). Do not batch across unpredictable waits (page loads, installers, modals) — single-step those. Prefer this over chaining solo click/type/keys tools.

NameTypeReqDescription
actionsarrayyesOrdered actions (max 10); input.click_target needs target_id from latest screen.observe
observe_afterbooleanDefault true. When true, return a verification observe in the same result
observe_imagebooleanDefault false. When true with observe_after, include verification JPEG unless changed=false
session_idstringyesActive session id
NameTypeReqDescription
changedWhether the frame changed since last observe; null if unknown
has_imagebooleanTrue when a JPEG was included in the MCP content
messagestringyesHuman-readable observe summary / targets
native_heightintegerNative capture height
native_widthintegerNative capture width
okbooleanyesFalse when the tool failed

No examples provided.

input.send_keys ~117

Send a key or chord to the focused window (e.g. enter, tab, ctrl+s, alt+f4, win). Side effect: real key events on the remote desktop. Prefer bundling into input.send_actions when the shortcut follows a click/type in the same planned sequence. Use input.type_text for literal strings, not this tool.

NameTypeReqDescription
keysstringyesKey or combo, e.g. enter, tab, ctrl+s, alt+f4, win
session_idstringyesActive session id
NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.

input.type_text ~100

Type a Unicode string into the currently focused control via native input. Does not click first — focus the field (input.click_target / input.send_actions) before calling. Side effect: keystrokes on the remote desktop. For form fills (click → type → tab/enter), prefer input.send_actions in one call.

NameTypeReqDescription
session_idstringyesActive session id
textstringyesLiteral text to type (not a key combo)
NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.

rigs.list ~99

List Windows machines (rigs) paired to this API key: id, name, online, api_access_enabled, and USABLE flag. Read-only — does not start a session. Call first before start_session. A rig is USABLE only when online AND the owner enabled API access. If none are USABLE, tell the user to install the host agent, pair in Console → Rigs, and enable API access — never ask for OS passwords.

Input schema present but exposes no named parameters.

NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.

screen.observe ~235

Read the current screen: UIA targets (numbered ids + native coords) and a text summary. Does not move mouse/keyboard. Default image=false (no JPEG) for speed; set image=true only when you must judge pixels visually (then max_width≈960, quality≈60). If changed=false, JPEG is omitted even when requested — do not re-analyze; wait or act differently. If dirty is null, assume changed. Prefer input.send_actions for multi-step UI; observe after meaningful steps, not after every click. Target ids are valid only until the next UI change.

NameTypeReqDescription
imagebooleanInclude JPEG (default false). True only to visually read/judge the screen.
markbooleanOverlay numbered targets on JPEG when image=true (default true; ignored if image=false)
max_widthintegerJPEG max width when image=true (default 960). Clicks always use native coords, not JPEG pixels.
qualityintegerJPEG quality 40–100 when image=true (default 60)
session_idstringyesActive session id from session.start
NameTypeReqDescription
changedWhether the frame changed since last observe; null if unknown
has_imagebooleanTrue when a JPEG was included in the MCP content
messagestringyesHuman-readable observe summary / targets
native_heightintegerNative capture height
native_widthintegerNative capture width
okbooleanyesFalse when the tool failed

No examples provided.

session.end ~73

End an active session. Side effects: stops billing, runs host safety_restore, closes apps launched via app.launch. Always call when finished or abandoning — do not leave sessions open. Safe to call once; further observe/input on that session_id will fail.

NameTypeReqDescription
session_idstringyesSession id returned by session.start
NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.

session.live_view ~78

Return the console Live View URL (≈60fps) for the rig owner to watch and intervene. Read-only for the agent — does not grant the API key console access. Offer on long or sensitive tasks. Owner must be signed into Glasswarp; API keys alone cannot open the player.

NameTypeReqDescription
session_idstringyesActive session id
NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.

session.start ~111

Start a metered desktop session on a USABLE rig from rigs.list. Side effects: begins wall-clock billing, shows an on-screen “API session active” indicator, enables observe/input until session.end. Idle sessions auto-end after ~15 minutes. Always call session.end when done or abandoning. Do not call if no USABLE rig exists. Returns session_id and Live View URL (owner console login required).

NameTypeReqDescription
rig_idstringyesRig id from rigs.list (must be online with api_access_enabled)
NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.

session.status ~68

Fetch session metadata: status, host, mode, created_at, action_count, billed_minutes. Read-only — no input side effects. Use to tell the user about metered time or confirm the session is still active before more actions.

NameTypeReqDescription
session_idstringyesSession id from session.start
NameTypeReqDescription
messagestringyesHuman-readable result for the agent
okbooleanyesFalse when the tool failed

No examples provided.