PySide6 MCP
PYPI · PYSIDE6-MCP · SCANNED SEP 20
Playwright-style MCP to inspect, control, and debug PySide6 desktop GUIs.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security50
- Malware scan not yet available for this package.Unverified
- No known CVEs affecting this package version or its production dependencies.Pass
- Runs hatchling.build at install time, a recognised native-build step with no shell scripting around it. View diagnostics → Pass
- 1 of 23 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 14 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability74
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2507 tokens (~113/item across 22 items; 22 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management50
- Stability observed for 15 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage85
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 46% of tool parameters carry a description.Partial
- Structured output schemas are declared (95% of tools); any adoption earns full credit.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "eval_python" implies "eval" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 23 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
How do I install the PySide6 MCP server?
PySide6 MCP runs locally as a PyPI package, launched with uvx pyside6-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · pyside6-mcp
claude mcp add com55-pyside6-mcp -- uvx pyside6-mcp
{
"mcpServers": {
"com55-pyside6-mcp": {
"command": "uvx",
"args": [
"pyside6-mcp"
]
}
}
} {
"servers": {
"com55-pyside6-mcp": {
"command": "uvx",
"args": [
"pyside6-mcp"
]
}
}
} codex mcp add com55-pyside6-mcp -- uvx pyside6-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com55-pyside6-mcp": {
"type": "local",
"command": [
"uvx",
"pyside6-mcp"
],
"enabled": true
}
}
} openclaw mcp add com55-pyside6-mcp --command uvx --arg pyside6-mcp
mcp_servers:
com55-pyside6-mcp:
command: "uvx"
args: ["pyside6-mcp"] {
"McpServers": {
"com55-pyside6-mcp": {
"Transport": "stdio",
"Command": "uvx",
"Arguments": [
"pyside6-mcp"
]
}
}
} assistant mcp add com55-pyside6-mcp -t stdio -c uvx -a pyside6-mcp
{
"mcpServers": {
"com55-pyside6-mcp": {
"command": "uvx",
"args": [
"pyside6-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 47 to 50. That category is still filling its 30-day observation window: 14 days of observed history at the previous scan, 15 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 40 to 43. That category is still filling its 30-day observation window: 12 days of observed history at the previous scan, 13 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 33 to 37. That category is still filling its 30-day observation window: 10 days of observed history at the previous scan, 11 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 27 to 30. That category is still filling its 30-day observation window: 8 days of observed history at the previous scan, 9 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Sept 26 +3
- Stability: unverified → 0.27 ▲ functional
- 10 Sept 26 0
- Security disclosure: unverified → fail ▼ functional
- 9 Sept 26 −1
- Malware scan: fail → unverified ▼ security
- Security disclosure: fail → unverified ▼ functional
- 8 Sept 26 +1
- Malware scan: unverified → fail ▼ security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed pypi/pyside6-mcp@0.1.0
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | pypi |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| build_backend | allowlisted | hatchling.build |
Background: Why install scripts are a supply-chain risk →
Dependencies 23 packages
| Packages resolved | 23 |
|---|---|
| Stale | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
click Click ~137
Click a widget or screen coordinate. - widget_id only: clicks the center of that widget - widget_id + x/y: clicks at (x, y) relative to the widget's top-left - x/y only: clicks at (x, y) relative to the main window button: 'left' (default), 'right', or 'middle'
| Name | Type | Req | Description |
|---|---|---|---|
| button | string | – | – |
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| widget_id | – | – | – |
| x | – | – | – |
| y | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
double_click Double Click ~71
Double-click a widget. Sends two rapid left-clicks.
| Name | Type | Req | Description |
|---|---|---|---|
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| widget_id | string | yes | – |
| x | – | – | – |
| y | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
eval_python Eval Python ~132
Evaluate a Python expression or execute a statement inside the app process. Context provides: - app: QApplication instance - widgets: dict mapping widget_id → QWidget Examples: eval_python("app.activeWindow().windowTitle()") eval_python("widgets['3'].isEnabled()") eval_python("list(app.allWidgets())") WARNING: runs arbitrary code in the app — use only for debugging.
| Name | Type | Req | Description |
|---|---|---|---|
| code | string | yes | – |
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
find_widget Find Widget ~118
Search for widgets by class, objectName, text content, or visibility. Returns a list of matching widgets with their IDs. Examples: find_widget(class_name="QPushButton") find_widget(text="Apply Mods") find_widget(object_name="enabledCheckBox")
| Name | Type | Req | Description |
|---|---|---|---|
| class_name | – | – | – |
| object_name | – | – | – |
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| text | – | – | – |
| visible | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_app_output Get App Output ~133
Get the last n lines of the launched app's real stdout/stderr: print() output, uncaught tracebacks, and Qt/console warnings. This is the app's actual console output, captured because launch_app redirects it to a log file. Use this to debug crashes or startup failures. For structured Python logging records use get_logs() instead. Only works for apps started via launch_app on this server.
| Name | Type | Req | Description |
|---|---|---|---|
| n | integer | – | – |
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_app_state Get App State ~65
Get app-level state: active window, focused widget, screen info. Useful to understand focus before sending keyboard events.
| Name | Type | Req | Description |
|---|---|---|---|
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_app_status Get App Status ~86
Report combined health of a launched app: whether the process is alive, its exit code, whether the bridge responds, and whether the main thread is likely blocked by a modal dialog (process alive but bridge unresponsive).
| Name | Type | Req | Description |
|---|---|---|---|
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_launch_help Get Launch Help ~47
Return how to call launch_app — especially the script parameter. Call this before launch_app when you are unsure which entry .py to use or whether script should include a subfolder path.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_logs Get Logs ~74
Get the last n log messages captured from the app's Python logging system. Includes timestamp, level, logger name, and message.
| Name | Type | Req | Description |
|---|---|---|---|
| n | integer | – | – |
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_widget_info Get Widget Info ~75
Get detailed properties and state of a specific widget. Includes geometry, text, enabled/visible state, and dynamic Qt properties.
| Name | Type | Req | Description |
|---|---|---|---|
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| widget_id | string | yes | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
get_widget_tree Get Widget Tree ~85
Get the full widget hierarchy of all visible windows as JSON. Each widget has: id, class, object_name, visible, enabled, geometry, text, children. Use widget IDs from this tree in other tools.
| Name | Type | Req | Description |
|---|---|---|---|
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
launch_app Launch App ~239
Launch a PySide6 app with the MCP bridge injected, then wait until the UI is ready.
| Name | Type | Req | Description |
|---|---|---|---|
| app_args | – | – | Optional CLI arguments forwarded to the script, e.g. ['--verbose']. |
| command | – | – | DEPRECATED — ignored. Do not use. Older MCP schemas listed this as required; pass cwd instead. |
| cwd | string | yes | REQUIRED. Absolute path to the PySide6 project root — the folder that contains pyproject.toml (same directory you would cd into before running the app). Example: C:/dev/my-app or /home/dev/my-app |
| script | string | – | Entry .py path RELATIVE to cwd (not absolute). Default: main.py. Omit or keep default when main.py is at project root. Use script='app.py' if the entry has another name at root. Use script='src/run.p… |
| timeout | integer | – | Seconds to wait for UI readiness. Default 45; use 60–90 for cold starts. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
list_actions List Actions ~70
List all QActions (menu items, toolbar actions) in visible windows with their name, text, shortcut, and enabled/checked state.
| Name | Type | Req | Description |
|---|---|---|---|
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
list_apps List Apps ~36
List apps launched by this MCP server. Each entry is {pid}. Pass pid= to other tools when more than one app is running.
Input schema present but exposes no named parameters.
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
press_key Press Key ~125
Press a key on the currently focused widget. Named keys: enter, return, escape, tab, backtab, backspace, delete, up, down, left, right, space, home, end, pageup, pagedown, f1–f6 Single characters: pass the character directly, e.g. 'a', 'A', '1'
| Name | Type | Req | Description |
|---|---|---|---|
| key | string | yes | – |
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
screenshot Screenshot ~80
Capture a screenshot of the app window (or a specific widget by ID). Returns the image so you can see the current UI state. Call this first to orient yourself.
| Name | Type | Req | Description |
|---|---|---|---|
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| widget_id | – | – | – |
No output schema declared.
No examples provided.
scroll Scroll ~102
Scroll a widget. dy > 0 scrolls down, dy < 0 scrolls up. dx: horizontal scroll (positive = right). widget_id: target widget; omit to scroll the main window.
| Name | Type | Req | Description |
|---|---|---|---|
| dx | integer | – | – |
| dy | integer | yes | – |
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| widget_id | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
stop_app Stop App ~62
Stop a previously launched app (started via launch_app). Omit pid to stop the last launched app.
| Name | Type | Req | Description |
|---|---|---|---|
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
trigger_action Trigger Action ~96
Trigger a QAction directly by objectName (`name`) or visible label (`text`), without clicking through menus. Useful to avoid opening modal menus and to reach toolbar/menu actions reliably. Provide at least one of name/text.
| Name | Type | Req | Description |
|---|---|---|---|
| name | – | – | – |
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| text | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
type_text Type Text ~79
Type text into a widget (focuses it first) or the currently focused widget. For special characters use press_key instead.
| Name | Type | Req | Description |
|---|---|---|---|
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| text | string | yes | – |
| widget_id | – | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
wait_for_idle Wait For Idle ~107
Wait until the app's UI has been quiet (no layout/paint activity) for `quiet_ms` ms, or until `timeout` seconds elapse. Call after a click or action that triggers async work, before taking a screenshot.
| Name | Type | Req | Description |
|---|---|---|---|
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| quiet_ms | integer | – | – |
| timeout | number | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
wait_until_ready Wait Until Ready ~120
Wait until the app UI is ready: a visible top-level window that has been quiet (no layout/paint activity) for `quiet_ms` milliseconds. Use after an action that reloads or rebuilds the UI. Returns the readiness snapshot. Does not launch anything — the app must already be running.
| Name | Type | Req | Description |
|---|---|---|---|
| pid | – | – | App pid from launch_app. Omit to target the last launched app. Required only when several apps are running and you need a specific one. |
| quiet_ms | integer | – | – |
| timeout | integer | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
What is the PySide6 MCP server?
PySide6 MCP is listed in the public MCP registry as io.github.com55/pyside6-mcp. Playwright-style MCP to inspect, control, and debug PySide6 desktop GUIs. This page covers its PyPI package (pyside6-mcp).
Is the PySide6 MCP server safe to use?
PySide6 MCP scores 60 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the PySide6 MCP server expose?
PySide6 MCP exposes 22 tools: screenshot, get_widget_tree, get_widget_info, get_app_state, find_widget, and 17 more. Their descriptions and schemas cost roughly 2,139 tokens of context every time the server is loaded.
Is the PySide6 MCP server still maintained?
PySide6 MCP is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the PySide6 MCP server under?
PySide6 MCP declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.