Computer control MCP servers

A server here operates a computer or phone: desktop apps, operating system, shell commands.

Not here: browser-only automation.

1,211servers
116 remote1,095 localTagged by Odel's AI, which can make mistakes
By GitHub stars, at most two per publisher
  1. Number 1: Mobilerun@droidrun/mobilerunControl real Android and iOS devices with LLM agents — tap, swipe, type, automate flows.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.9,571 GitHub stars.
  2. Number 2: Computer@pollinations/computerA private persistent computer: files and a bash shell that survive between runs.Not assessed yet.A remote server; it needs your API key.5,183 GitHub stars.
  3. Number 3: Unreal@smithery/chir24-unreal-mcpControl Unreal Engine to browse assets, import content, and manage levels and sequences. Automate…4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.911 GitHub stars.

Best fit

791 made for this, ranked by starsRemoteLocal
  1. emisar @emisar/emisarLet AI operate servers without SSH. Choose actions, approve risky changes, and audit every step.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.337 GitHub stars.
  2. Remote Desktop Commander @desktopcommander/remote-desktop-commanderHosted MCP server connecting claude.ai, ChatGPT and other AI apps to your own computer14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.154 GitHub stars.
  3. Local MCP @local-mcp/local-mcpMac & Windows: let ChatGPT, Claude & Cursor use your email, calendar, iMessage, Teams, files.19% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.66 GitHub stars.
  4. Herald @btouchard/heraldStop copy-pasting between Claude Chat and Claude Code.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.46 GitHub stars.
  5. Computer-Use Agents API @hcompai/hai-agentsRun and manage H Company's Computer-Use Agents from any MCP client.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.42 GitHub stars.
  6. Call Me @callmemcp/call-meYour AI rings your iPhone, speaks its question, and gets your spoken answer back as text.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.20 GitHub stars.
  7. hush @royashbrook/hushA secret store for AI agents: the agent never sees the plaintext.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.20 GitHub stars.
  8. Antrieb — Instant Clusters and Networks for AI Agents @antrieb/antriebValidates AI infra code on real VMs. Self-corrects until it works. No containers, no sandboxes.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.14 GitHub stars.
  9. SentinelX MCP @sentinelx/sentinelxOperate Linux, macOS and Windows from your LLM. Every action runs through an auditable allowlist.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.11 GitHub stars.
  10. Nucleus @eidetic-works/nucleusSovereign Agent OS — Persistent Memory, Governance & Compliance for AI Agents.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.5 GitHub stars.
  11. Ramus Android @ramus/androidDisposable cloud Android emulators for coding agents: run an APK or PR build, tap, type, screenshot.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.3 GitHub stars.
  12. Clousd @clousd-android/clousd-mcpA real Android phone in the cloud for MCP agents: observe the screen, act, reset to a saved state.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.1 GitHub stars.
  13. AskYourStack @askyourstack/askyourstackLet Claude, ChatGPT or Cursor manage your servers, sites and SEO, with approvals for risky actions.16% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
  14. SudoWhizzy @sudowhizzy/sudowhizzyRenamed to AskYourStack: use com.askyourstack/askyourstack. Same service, now at askyourstack.com.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
  15. Runtime Cloud @withruntime/runtimeLinux microVM sandboxes for AI agents: run commands, files, processes, pause and wake.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
  16. ReMCP @getremcp/remcpSecurely control paired computers with ReMCP.15% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.1 GitHub stars.
  17. Parsee @parsee/parseeЦены, наличие, отзывы и СПП с Ozon и Wildberries — на компьютере продавца9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.1 GitHub stars.
  18. Clianythingharness @clauxel/clianythingharness-mcpA paid remote MCP for CLI tool MCP, built to return verdicts, receipts, usage logs, and audit-ready12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; it needs your API key.1 GitHub stars.
  19. Node Command @huseyincig/nc-mcpRemote MCP server exposing your Node Command fleet (files, shell, processes, browser) to AI hosts.Not assessed yet.A remote server; it needs your API key.
  20. Keeploop @keeploop/keeploopMail, Calendar, Messages, Notes, Contacts, Slack on your Mac for AI. Remote needs Pro or free trial.10% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  21. Phonebox @phonebox/phoneboxCloud Android phones for AI agents: create a phone, read the screen, tap, type, install APKs, park.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.

Also touches on Computer control

41 where it is one part of a bigger job