Glasswarp
REMOTE · MCP.GLASSWARP.COM · SCANNED AUG 3
Eyes and hands on real Windows PCs — observe, click, type via Glasswarp API.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →
Endpoint Security83
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation is enforced on tool calls, but the challenge carries no valid RFC 9728 metadata, so a client cannot discover where to get a token. See how to fix → View diagnostics → Fail
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability80
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 3503 tokens (~145/item across 24 items; 16 tools + 8 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management13
- Stability observed for 4 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
remote · mcp.glasswarp.com
claude mcp add --transport http com-glasswarp-mcp-server https://mcp.glasswarp.com/mcp
[mcp_servers.com-glasswarp-mcp-server] url = "https://mcp.glasswarp.com/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-glasswarp-mcp-server": {
"type": "remote",
"url": "https://mcp.glasswarp.com/mcp",
"enabled": true
}
}
} openclaw mcp add com-glasswarp-mcp-server --url https://mcp.glasswarp.com/mcp --transport streamable-http
mcp_servers:
com-glasswarp-mcp-server:
url: "https://mcp.glasswarp.com/mcp" {
"mcpServers": {
"com-glasswarp-mcp-server": {
"type": "http",
"url": "https://mcp.glasswarp.com/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 2 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 7 to 10. That category is still filling its 30-day observation window: 2 days of observed history at the previous scan, 3 at this one. The score rises as the window fills, whether or not the server changes.
- 31 Jul 26 +4
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 30 Jul 26 +50
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 27 Jul 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 26 Jul 26 21
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Probed https://mcp.glasswarp.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=mcp.glasswarp.com | CN=YE2,O=Let's Encrypt,C=US | 22 Jul 2026 | 20 Oct 2026 | ECDSA 256 | ECDSA-SHA384 | 5b82802489e547a6c7319d8b1989bea874e |
| SANs: mcp.glasswarp.com | ||||||
| CN=YE2,O=Let's Encrypt,C=US (CA) | CN=Root YE,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | ECDSA 384 | ECDSA-SHA384 | 4df3b15dd6c0784c507cd37b58e6f115 |
| CN=Root YE,O=ISRG,C=US (CA) | CN=ISRG Root X2,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | ECDSA-SHA384 | 872165fc34b6e5fba8add5b3705fb53a |
| CN=ISRG Root X2,O=Internet Security Research Group,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | ECDSA 384 | SHA256-RSA | 6c8f1dc727c7117f7baf853ac980f9cd |
DNSSEC insecure
Validation of mcp.glasswarp.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| glasswarp.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication Challenged, unverified
The endpoint asked for a token, but we could not retrieve and validate the RFC 9728 metadata that tells a client how to obtain one.
| Result | Challenged, unverified |
|---|---|
| Enforced | On tool calls |
| HTTP status | 200 |
Protected resource metadata
| Retrieved | No |
|---|---|
| Problem | no_resource_metadata |
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.glasswarp.com/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.glasswarp.com/mcp | HTTPS enforced | 301 | https://mcp.glasswarp.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
app.launch ~138
Launch an executable on the remote Windows rig (name on PATH or absolute path), optional args. Side effects: starts a process; Glasswarp tracks it and closes it on session.end. Use for notepad.exe, mspaint.exe, chrome with URL args, etc. Wait/re-observe after launch before clicking — do not assume the window is focused immediately.
| Name | Type | Req | Description |
|---|---|---|---|
| args | array | — | Process args, e.g. ["--new-window", "https://example.com"] |
| path_or_name | string | yes | Executable name (e.g. notepad.exe) or absolute path |
| session_id | string | yes | Active session id |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.
demos.get ~105
Return one showcase run contract (install, command, needs, framing). Does NOT execute the demo or control a PC. Call after demos.list when you know the demo_id. If the client can run shell, offer the command; if chat-only, show the card. Do not replace this with a slow MCP click loop for solver demos.
| Name | Type | Req | Description |
|---|---|---|---|
| demo_id | string | yes | Showcase id from demos.list |
| format | string | — | Response format: markdown (default) or json |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.
demos.list ~105
List showcase run contracts (id, title, install, command). Read-only catalog — does NOT start a session, touch a rig, or run solvers. Use when the user asks for Minesweeper/Mona Lisa/Paint demos or you need the glasswarp-demo command. Prefer demos.get for one full card. For ad-hoc UI work use rigs.list → session.start → screen.observe instead.
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | — | Response format: markdown (default) or json |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.
input.click_target ~150
Left/right/middle-click a UIA target by id from the latest screen.observe (uses native center coords). Prefer over input.click_xy. Side effect: real mouse click on the remote Windows desktop. Do not reuse target_id after the screen may have changed — re-observe first. For click→type→keys sequences, use input.send_actions (one turn) instead of chaining this tool.
| Name | Type | Req | Description |
|---|---|---|---|
| button | string | — | Mouse button (default left) |
| double | boolean | — | If true, double-click (two clicks) |
| session_id | string | yes | Active session id |
| target_id | string | yes | Target id from the most recent screen.observe (e.g. uia-… ) |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.
input.click_xy ~134
Click at native screen coordinates (0…native_width-1, 0…native_height-1 from screen.observe). Last resort when no suitable UIA target exists — prefer input.click_target. Never use JPEG/downscaled pixel coords. Side effect: real mouse click on the remote desktop.
| Name | Type | Req | Description |
|---|---|---|---|
| button | string | — | Mouse button (default left) |
| double | boolean | — | If true, double-click |
| session_id | string | yes | Active session id |
| x | integer | yes | Native X (0…native_width-1) |
| y | integer | yes | Native Y (0…native_height-1) |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.
input.drag ~141
Press-move-release mouse drag in native capture coordinates. Use for drawing, sliders, selection boxes, and drag-and-drop. Side effect: mouse_down → moves → mouse_up on the remote desktop. Prefer input.send_actions if the drag is one step in a longer predictable sequence.
| Name | Type | Req | Description |
|---|---|---|---|
| duration_ms | integer | — | Approx drag duration in ms; more steps when larger (default ~200) |
| from_x | integer | yes | Native start X |
| from_y | integer | yes | Native start Y |
| session_id | string | yes | Active session id |
| to_x | integer | yes | Native end X |
| to_y | integer | yes | Native end Y |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.
input.scroll ~126
Move the cursor to native (x,y) then apply a vertical mouse-wheel delta. Side effect: scroll on whatever is under that point. Negative delta scrolls toward the bottom of the page. Prefer input.send_actions when scroll is part of a multi-step sequence. Re-observe after scrolling lists/pages before clicking targets.
| Name | Type | Req | Description |
|---|---|---|---|
| delta | integer | yes | Vertical wheel delta (negative = toward bottom of page) |
| session_id | string | yes | Active session id |
| x | integer | yes | Native X to hover before scrolling |
| y | integer | yes | Native Y to hover before scrolling |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.
input.send_actions ~200
PREFERRED multi-step tool: run 1–10 predictable UI actions in one call (input.click_target, input.click_xy, input.type_text, input.send_keys, input.drag, input.scroll). Side effects: all actions execute on the remote desktop; fails fast before sending if any action is invalid. observe_after defaults true (verification observe: text+targets; set observe_image=true for JPEG). Do not batch across unpredictable waits (page loads, installers, modals) — single-step those. Prefer this over chaining solo click/type/keys tools.
| Name | Type | Req | Description |
|---|---|---|---|
| actions | array | yes | Ordered actions (max 10); input.click_target needs target_id from latest screen.observe |
| observe_after | boolean | — | Default true. When true, return a verification observe in the same result |
| observe_image | boolean | — | Default false. When true with observe_after, include verification JPEG unless changed=false |
| session_id | string | yes | Active session id |
| Name | Type | Req | Description |
|---|---|---|---|
| changed | — | — | Whether the frame changed since last observe; null if unknown |
| has_image | boolean | — | True when a JPEG was included in the MCP content |
| message | string | yes | Human-readable observe summary / targets |
| native_height | integer | — | Native capture height |
| native_width | integer | — | Native capture width |
| ok | boolean | yes | False when the tool failed |
No examples provided.
input.send_keys ~117
Send a key or chord to the focused window (e.g. enter, tab, ctrl+s, alt+f4, win). Side effect: real key events on the remote desktop. Prefer bundling into input.send_actions when the shortcut follows a click/type in the same planned sequence. Use input.type_text for literal strings, not this tool.
| Name | Type | Req | Description |
|---|---|---|---|
| keys | string | yes | Key or combo, e.g. enter, tab, ctrl+s, alt+f4, win |
| session_id | string | yes | Active session id |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.
input.type_text ~100
Type a Unicode string into the currently focused control via native input. Does not click first — focus the field (input.click_target / input.send_actions) before calling. Side effect: keystrokes on the remote desktop. For form fills (click → type → tab/enter), prefer input.send_actions in one call.
| Name | Type | Req | Description |
|---|---|---|---|
| session_id | string | yes | Active session id |
| text | string | yes | Literal text to type (not a key combo) |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.
rigs.list ~99
List Windows machines (rigs) paired to this API key: id, name, online, api_access_enabled, and USABLE flag. Read-only — does not start a session. Call first before start_session. A rig is USABLE only when online AND the owner enabled API access. If none are USABLE, tell the user to install the host agent, pair in Console → Rigs, and enable API access — never ask for OS passwords.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.
screen.observe ~235
Read the current screen: UIA targets (numbered ids + native coords) and a text summary. Does not move mouse/keyboard. Default image=false (no JPEG) for speed; set image=true only when you must judge pixels visually (then max_width≈960, quality≈60). If changed=false, JPEG is omitted even when requested — do not re-analyze; wait or act differently. If dirty is null, assume changed. Prefer input.send_actions for multi-step UI; observe after meaningful steps, not after every click. Target ids are valid only until the next UI change.
| Name | Type | Req | Description |
|---|---|---|---|
| image | boolean | — | Include JPEG (default false). True only to visually read/judge the screen. |
| mark | boolean | — | Overlay numbered targets on JPEG when image=true (default true; ignored if image=false) |
| max_width | integer | — | JPEG max width when image=true (default 960). Clicks always use native coords, not JPEG pixels. |
| quality | integer | — | JPEG quality 40–100 when image=true (default 60) |
| session_id | string | yes | Active session id from session.start |
| Name | Type | Req | Description |
|---|---|---|---|
| changed | — | — | Whether the frame changed since last observe; null if unknown |
| has_image | boolean | — | True when a JPEG was included in the MCP content |
| message | string | yes | Human-readable observe summary / targets |
| native_height | integer | — | Native capture height |
| native_width | integer | — | Native capture width |
| ok | boolean | yes | False when the tool failed |
No examples provided.
session.end ~73
End an active session. Side effects: stops billing, runs host safety_restore, closes apps launched via app.launch. Always call when finished or abandoning — do not leave sessions open. Safe to call once; further observe/input on that session_id will fail.
| Name | Type | Req | Description |
|---|---|---|---|
| session_id | string | yes | Session id returned by session.start |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.
session.live_view ~78
Return the console Live View URL (≈60fps) for the rig owner to watch and intervene. Read-only for the agent — does not grant the API key console access. Offer on long or sensitive tasks. Owner must be signed into Glasswarp; API keys alone cannot open the player.
| Name | Type | Req | Description |
|---|---|---|---|
| session_id | string | yes | Active session id |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.
session.start ~111
Start a metered desktop session on a USABLE rig from rigs.list. Side effects: begins wall-clock billing, shows an on-screen “API session active” indicator, enables observe/input until session.end. Idle sessions auto-end after ~15 minutes. Always call session.end when done or abandoning. Do not call if no USABLE rig exists. Returns session_id and Live View URL (owner console login required).
| Name | Type | Req | Description |
|---|---|---|---|
| rig_id | string | yes | Rig id from rigs.list (must be online with api_access_enabled) |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.
session.status ~68
Fetch session metadata: status, host, mode, created_at, action_count, billed_minutes. Read-only — no input side effects. Use to tell the user about metered time or confirm the session is still active before more actions.
| Name | Type | Req | Description |
|---|---|---|---|
| session_id | string | yes | Session id from session.start |
| Name | Type | Req | Description |
|---|---|---|---|
| message | string | yes | Human-readable result for the agent |
| ok | boolean | yes | False when the tool failed |
No examples provided.