hypruse

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-18T20:42:23.952398Z",
      "publishedAt": "2026-10-18T20:42:23.952398Z",
      "statusChangedAt": "2026-10-18T20:42:23.952398Z"
    }
  },
  "server": {
    "name": "io.github.IlyasKhallouki/hypruse",
    "title": "hypruse",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.13.0",
    "packages": [
      {
        "version": "0.13.0",
        "transport": {
          "type": "stdio"
        },
        "identifier": "hypruse",
        "runtimeHint": "uvx",
        "registryType": "pypi",
        "registryBaseUrl": "https://pypi.org",
        "environmentVariables": [
          {
            "name": "HYPRUSE_SCREENSHOT_MODE",
            "choices": [
              "file",
              "image"
            ],
            "default": "file",
            "description": "How captures are returned: 'file' writes to XDG_RUNTIME_DIR and returns the path, 'image' returns the image inline. Use 'image' for clients that render MCP images but cannot read files, such as Claude Desktop."
          },
          {
            "name": "HYPRUSE_READONLY",
            "default": "0",
            "description": "Set to 1 to expose only the observation tools (desktop, screenshot, zoom, ui, marks, binds, wait_for). The agent can see and narrate but cannot click, type, or launch."
          },
          {
            "name": "HYPRUSE_CONFINE",
            "description": "Restrict input to a scope of windows and refuse everything outside it: 'launched' (only windows hypruse opened this session), 'class:firefox,kitty', or 'workspace:3,special:notes'. Unset means no confinement.",
            "placeholder": "launched"
          },
          {
            "name": "HYPRUSE_AUTH_GUARD",
            "choices": [
              "1",
              "strict",
              "0"
            ],
            "default": "1",
            "description": "Refuse to click or type into system authentication dialogs (polkit, keyring prompts). On by default; 'strict' also refuses password fields in ordinary windows; 0 disables it."
          },
          {
            "name": "HYPRUSE_STRICT",
            "default": "0",
            "description": "Set to 1 to refuse to act when the cursor or focused window moved since hypruse's last action, so the agent must re-read the desktop before retrying."
          },
          {
            "name": "HYPRUSE_MARK",
            "default": "0",
            "description": "Set to 1 to make the agent's presence legible: tag every window it opens 'hypruse-owned' and flash an on-screen notice when it opens a window or captures the screen."
          },
          {
            "name": "HYPRUSE_CLIPBOARD",
            "default": "0",
            "description": "Set to 1 to register the opt-in clipboard tool (never in read-only mode). Off by default because clipboards hold passwords."
          },
          {
            "name": "HYPRUSE_JOURNAL",
            "default": "0",
            "description": "Record every tool call, refusals included, as one NDJSON line: 1 writes to XDG_STATE_HOME/hypruse/journal.ndjson, or give a path. Read it back with 'hypruse journal'. Off by default."
          },
          {
            "name": "HYPRUSE_JOURNAL_MAX_BYTES",
            "default": "8388608",
            "description": "Rotate the journal once it reaches this size, keeping one previous generation alongside it. Set 0 to never rotate."
          },
          {
            "name": "HYPRUSE_JOURNAL_TEXT",
            "default": "0",
            "description": "Set to 1 to record typed and copied text in the journal verbatim instead of as a length plus digest. Off by default because keystrokes are passwords; needed only to replay typing."
          },
          {
            "name": "HYPRUSE_DRYRUN",
            "default": "0",
            "description": "Set to 1 for a rehearsal: every acting tool validates its arguments and runs every trust guard, then reports what it would have done and delivers no input."
          }
        ]
      }
    ],
    "repository": {
      "id": "1302513522",
      "url": "https://github.com/IlyasKhallouki/hypruse",
      "source": "github"
    },
    "websiteUrl": "https://github.com/IlyasKhallouki/hypruse#readme",
    "description": "Computer use for Hyprland: semantic desktop state over IPC, plus vision and native input"
  }
}