{"servers":[{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.ObscuritySRL/umbriel","description":"Playwright for the Windows desktop, from Bun — drive native GUIs via UI Automation + MCP.","repository":{"url":"https://github.com/ObscuritySRL/umbriel","source":"github"},"version":"1.10.1","packages":[{"registryType":"npm","identifier":"umbriel","version":"1.10.1","runtimeHint":"bunx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Capability profile: 'readonly' (inspect/read only), 'safe' (read + input + window — default), or 'full' (also os + fs tools).","format":"string","default":"safe","name":"UMBRIEL_PROFILE"},{"description":"Set to '1' to allow the 'os' tools (launch_app/run_program/open_path, kill_process, manage_process, control_service, set_env, registry_get/registry_list/registry_set) AND the 'fs' tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) regardless of profile.","format":"string","name":"UMBRIEL_OS"},{"description":"Comma-separated tool names or categories to additionally allow on top of the profile.","format":"string","name":"UMBRIEL_ALLOW"},{"description":"Comma-separated tool names or categories to deny, overriding the profile and UMBRIEL_ALLOW.","format":"string","name":"UMBRIEL_DENY"},{"description":"Set to 'never' to forbid the real-cursor fallback entirely (strictly cursor-free). By default clicks/drags are cursor-free but fall back to the real hardware cursor when no cursor-free path exists.","format":"string","name":"UMBRIEL_CURSOR"},{"description":"Sandbox root directory that the fs-category file tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) are confined to when fs tools are enabled; open_path's path argument is honored too.","format":"string","name":"UMBRIEL_FS_ROOT"},{"description":"File path to journal every mutating tool call as JSON Lines (tool, category, masked args, ok, observation); secret-bearing args and values are redacted. Unset = no trace.","format":"string","name":"UMBRIEL_TRACE"},{"description":"Controls the default-on stderr audit of mutating tool calls. 'off' is the explicit opt-out (reported at startup); 'verbose' also audits reads.","format":"string","name":"UMBRIEL_AUDIT"},{"description":"Credential masking (default on). 'off' opts out; a regex value overrides the built-in secret shapes masked in clipboard/env/registry reads and the trace journal.","format":"string","name":"UMBRIEL_REDACT"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-06-20T00:22:47.190213Z","publishedAt":"2026-06-20T00:22:47.190213Z","updatedAt":"2026-06-20T00:22:47.190213Z","isLatest":false}}},{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.ObscuritySRL/umbriel","description":"Playwright for the Windows desktop, from Bun — drive native GUIs via UI Automation + MCP.","repository":{"url":"https://github.com/ObscuritySRL/umbriel","source":"github"},"version":"1.11.0","packages":[{"registryType":"npm","identifier":"umbriel","version":"1.11.0","runtimeHint":"bunx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Capability profile: 'readonly' (inspect/read only), 'safe' (read + input + window — default), or 'full' (also os + fs tools).","format":"string","default":"safe","name":"UMBRIEL_PROFILE"},{"description":"Set to '1' to allow the 'os' tools (launch_app/run_program/open_path, kill_process, manage_process, control_service, set_env, registry_get/registry_list/registry_set) AND the 'fs' tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) regardless of profile.","format":"string","name":"UMBRIEL_OS"},{"description":"Comma-separated tool names or categories to additionally allow on top of the profile.","format":"string","name":"UMBRIEL_ALLOW"},{"description":"Comma-separated tool names or categories to deny, overriding the profile and UMBRIEL_ALLOW.","format":"string","name":"UMBRIEL_DENY"},{"description":"Set to 'never' to forbid the real-cursor fallback entirely (strictly cursor-free). By default clicks/drags are cursor-free but fall back to the real hardware cursor when no cursor-free path exists.","format":"string","name":"UMBRIEL_CURSOR"},{"description":"Sandbox root directory that the fs-category file tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) are confined to when fs tools are enabled; open_path's path argument is honored too.","format":"string","name":"UMBRIEL_FS_ROOT"},{"description":"File path to journal every mutating tool call as JSON Lines (tool, category, masked args, ok, observation); secret-bearing args and values are redacted. Unset = no trace.","format":"string","name":"UMBRIEL_TRACE"},{"description":"Controls the default-on stderr audit of mutating tool calls. 'off' is the explicit opt-out (reported at startup); 'verbose' also audits reads.","format":"string","name":"UMBRIEL_AUDIT"},{"description":"Credential masking (default on). 'off' opts out; a regex value overrides the built-in secret shapes masked in clipboard/env/registry reads and the trace journal.","format":"string","name":"UMBRIEL_REDACT"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-06-21T19:34:59.039012Z","publishedAt":"2026-06-21T19:34:59.039012Z","updatedAt":"2026-06-21T19:34:59.039012Z","isLatest":false}}},{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.ObscuritySRL/umbriel","description":"Playwright for the Windows desktop, from Bun — drive native GUIs via UI Automation + MCP.","repository":{"url":"https://github.com/ObscuritySRL/umbriel","source":"github"},"version":"1.11.1","packages":[{"registryType":"npm","identifier":"umbriel","version":"1.11.1","runtimeHint":"bunx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Capability profile: 'readonly' (inspect/read only), 'safe' (read + input + window — default), or 'full' (also os + fs tools).","format":"string","default":"safe","name":"UMBRIEL_PROFILE"},{"description":"Set to '1' to allow the 'os' tools (launch_app/run_program/open_path, kill_process, manage_process, control_service, set_env, registry_get/registry_list/registry_set) AND the 'fs' tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) regardless of profile.","format":"string","name":"UMBRIEL_OS"},{"description":"Comma-separated tool names or categories to additionally allow on top of the profile.","format":"string","name":"UMBRIEL_ALLOW"},{"description":"Comma-separated tool names or categories to deny, overriding the profile and UMBRIEL_ALLOW.","format":"string","name":"UMBRIEL_DENY"},{"description":"Set to 'never' to forbid the real-cursor fallback entirely (strictly cursor-free). By default clicks/drags are cursor-free but fall back to the real hardware cursor when no cursor-free path exists.","format":"string","name":"UMBRIEL_CURSOR"},{"description":"Sandbox root directory that the fs-category file tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) are confined to when fs tools are enabled; open_path's path argument is honored too.","format":"string","name":"UMBRIEL_FS_ROOT"},{"description":"File path to journal every mutating tool call as JSON Lines (tool, category, masked args, ok, observation); secret-bearing args and values are redacted. Unset = no trace.","format":"string","name":"UMBRIEL_TRACE"},{"description":"Controls the default-on stderr audit of mutating tool calls. 'off' is the explicit opt-out (reported at startup); 'verbose' also audits reads.","format":"string","name":"UMBRIEL_AUDIT"},{"description":"Credential masking (default on). 'off' opts out; a regex value overrides the built-in secret shapes masked in clipboard/env/registry reads and the trace journal.","format":"string","name":"UMBRIEL_REDACT"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-06-21T19:50:16.909354Z","publishedAt":"2026-06-21T19:50:16.909354Z","updatedAt":"2026-06-21T19:50:16.909354Z","isLatest":false}}},{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.ObscuritySRL/umbriel","description":"See and drive a whole Windows machine from Bun — apps, input, screen, OCR, registry, OS — via MCP.","repository":{"url":"https://github.com/ObscuritySRL/umbriel","source":"github"},"version":"1.12.0","packages":[{"registryType":"npm","identifier":"umbriel","version":"1.12.0","runtimeHint":"bunx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Capability profile: 'readonly' (inspect/read only), 'safe' (read + input + window — default), or 'full' (also os + fs tools).","format":"string","default":"safe","name":"UMBRIEL_PROFILE"},{"description":"Set to '1' to allow the 'os' tools (launch_app/run_program/open_path, kill_process, manage_process, control_service, set_env, registry_get/registry_list/registry_set) AND the 'fs' tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) regardless of profile.","format":"string","name":"UMBRIEL_OS"},{"description":"Comma-separated tool names or categories to additionally allow on top of the profile.","format":"string","name":"UMBRIEL_ALLOW"},{"description":"Comma-separated tool names or categories to deny, overriding the profile and UMBRIEL_ALLOW.","format":"string","name":"UMBRIEL_DENY"},{"description":"Set to 'never' to forbid the real-cursor fallback entirely (strictly cursor-free). By default clicks/drags are cursor-free but fall back to the real hardware cursor when no cursor-free path exists.","format":"string","name":"UMBRIEL_CURSOR"},{"description":"Sandbox root directory that the fs-category file tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) are confined to when fs tools are enabled; open_path's path argument is honored too.","format":"string","name":"UMBRIEL_FS_ROOT"},{"description":"File path to journal every mutating tool call as JSON Lines (tool, category, masked args, ok, observation); secret-bearing args and values are redacted. Unset = no trace.","format":"string","name":"UMBRIEL_TRACE"},{"description":"Controls the default-on stderr audit of mutating tool calls. 'off' is the explicit opt-out (reported at startup); 'verbose' also audits reads.","format":"string","name":"UMBRIEL_AUDIT"},{"description":"Credential masking (default on). 'off' opts out; a regex value overrides the built-in secret shapes masked in clipboard/env/registry reads and the trace journal.","format":"string","name":"UMBRIEL_REDACT"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-06-22T18:14:52.094713Z","publishedAt":"2026-06-22T18:14:52.094713Z","updatedAt":"2026-06-22T18:14:52.094713Z","isLatest":false}}},{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.ObscuritySRL/umbriel","description":"See and drive a whole Windows machine from Bun — apps, input, screen, OCR, registry, OS — via MCP.","repository":{"url":"https://github.com/ObscuritySRL/umbriel","source":"github"},"version":"1.13.0","packages":[{"registryType":"npm","identifier":"umbriel","version":"1.13.0","runtimeHint":"bunx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Capability profile: 'readonly' (inspect/read only), 'safe' (read + input + window — default), or 'full' (also os + fs tools).","format":"string","default":"safe","name":"UMBRIEL_PROFILE"},{"description":"Set to '1' to allow the 'os' tools (launch_app/run_program/open_path, kill_process, manage_process, control_service, set_env, registry_get/registry_list/registry_set) AND the 'fs' tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) regardless of profile.","format":"string","name":"UMBRIEL_OS"},{"description":"Comma-separated tool names or categories to additionally allow on top of the profile.","format":"string","name":"UMBRIEL_ALLOW"},{"description":"Comma-separated tool names or categories to deny, overriding the profile and UMBRIEL_ALLOW.","format":"string","name":"UMBRIEL_DENY"},{"description":"Set to 'never' to forbid the real-cursor fallback entirely (strictly cursor-free). By default clicks/drags are cursor-free but fall back to the real hardware cursor when no cursor-free path exists.","format":"string","name":"UMBRIEL_CURSOR"},{"description":"Sandbox root directory that the fs-category file tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) are confined to when fs tools are enabled; open_path's path argument is honored too.","format":"string","name":"UMBRIEL_FS_ROOT"},{"description":"File path to journal every mutating tool call as JSON Lines (tool, category, masked args, ok, observation); secret-bearing args and values are redacted. Unset = no trace.","format":"string","name":"UMBRIEL_TRACE"},{"description":"Controls the default-on stderr audit of mutating tool calls. 'off' is the explicit opt-out (reported at startup); 'verbose' also audits reads.","format":"string","name":"UMBRIEL_AUDIT"},{"description":"Credential masking (default on). 'off' opts out; a regex value overrides the built-in secret shapes masked in clipboard/env/registry reads and the trace journal.","format":"string","name":"UMBRIEL_REDACT"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-06-24T05:12:32.82007Z","publishedAt":"2026-06-24T05:12:32.82007Z","updatedAt":"2026-06-24T05:12:32.82007Z","isLatest":false}}},{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.ObscuritySRL/umbriel","description":"See and drive a whole Windows machine from Bun — apps, input, screen, OCR, registry, OS — via MCP.","repository":{"url":"https://github.com/ObscuritySRL/umbriel","source":"github"},"version":"1.14.0","packages":[{"registryType":"npm","identifier":"umbriel","version":"1.14.0","runtimeHint":"bunx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Capability profile: 'readonly' (inspect/read only), 'safe' (read + input + window — default), or 'full' (also os + fs tools).","format":"string","default":"safe","name":"UMBRIEL_PROFILE"},{"description":"Set to '1' to allow the 'os' tools (launch_app/run_program/open_path, kill_process, manage_process, control_service, set_env, registry_get/registry_list/registry_set) AND the 'fs' tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) regardless of profile.","format":"string","name":"UMBRIEL_OS"},{"description":"Comma-separated tool names or categories to additionally allow on top of the profile.","format":"string","name":"UMBRIEL_ALLOW"},{"description":"Comma-separated tool names or categories to deny, overriding the profile and UMBRIEL_ALLOW.","format":"string","name":"UMBRIEL_DENY"},{"description":"Set to 'never' to forbid the real-cursor fallback entirely (strictly cursor-free). By default clicks/drags are cursor-free but fall back to the real hardware cursor when no cursor-free path exists.","format":"string","name":"UMBRIEL_CURSOR"},{"description":"Sandbox root directory that the fs-category file tools (read_file/write_file/list_dir/stat_path/make_dir/copy_file/move_file/delete_file) are confined to when fs tools are enabled; open_path's path argument is honored too.","format":"string","name":"UMBRIEL_FS_ROOT"},{"description":"File path to journal every mutating tool call as JSON Lines (tool, category, masked args, ok, observation); secret-bearing args and values are redacted. Unset = no trace.","format":"string","name":"UMBRIEL_TRACE"},{"description":"File path to a flush-before-call diagnostic journal of every COM vcall (slot, this-pointer, arg count). Each line is written and flushed to the OS BEFORE the native call, so after an uncatchable crash the last line names the faulting call. Has per-call overhead; unset = off. For debugging native faults only.","format":"string","name":"UMBRIEL_FFI_TRACE"},{"description":"Controls the default-on stderr audit of mutating tool calls. 'off' is the explicit opt-out (reported at startup); 'verbose' also audits reads.","format":"string","name":"UMBRIEL_AUDIT"},{"description":"Credential masking (default on). 'off' opts out; a regex value overrides the built-in secret shapes masked in clipboard/env/registry reads and the trace journal.","format":"string","name":"UMBRIEL_REDACT"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-06-27T01:05:14.373197Z","publishedAt":"2026-06-27T01:05:14.373197Z","updatedAt":"2026-06-27T01:05:14.373197Z","isLatest":true}}},{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.ObscuritySRL/umbriel","description":"Playwright for the Windows desktop, from Bun — drive native GUIs via UI Automation + MCP.","repository":{"url":"https://github.com/ObscuritySRL/umbriel","source":"github"},"version":"1.9.2","packages":[{"registryType":"npm","identifier":"umbriel","version":"1.9.2","runtimeHint":"bunx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Capability profile: 'readonly' (inspect/read only), 'safe' (read + input + window — default), or 'full' (also os + fs tools).","format":"string","default":"safe","name":"UMBRIEL_PROFILE"},{"description":"Set to '1' to allow OS-level tools (launch_app, run_program, open_path) AND filesystem tools (read_file, write_file, list_dir) regardless of profile.","format":"string","name":"UMBRIEL_OS"},{"description":"Comma-separated tool names or categories to additionally allow on top of the profile.","format":"string","name":"UMBRIEL_ALLOW"},{"description":"Comma-separated tool names or categories to deny, overriding the profile and UMBRIEL_ALLOW.","format":"string","name":"UMBRIEL_DENY"},{"description":"Set to 'never' to forbid the real-cursor fallback entirely (strictly cursor-free). By default clicks/drags are cursor-free but fall back to the real hardware cursor when no cursor-free path exists.","format":"string","name":"UMBRIEL_CURSOR"},{"description":"Sandbox root directory that read_file/write_file/list_dir are confined to when fs tools are enabled.","format":"string","name":"UMBRIEL_FS_ROOT"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-06-18T17:44:07.282523Z","publishedAt":"2026-06-18T17:44:07.282523Z","updatedAt":"2026-06-18T17:44:07.282523Z","isLatest":false}}},{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.github.ObscuritySRL/umbriel","description":"Playwright for the Windows desktop, from Bun — drive native GUIs via UI Automation + MCP.","repository":{"url":"https://github.com/ObscuritySRL/umbriel","source":"github"},"version":"1.9.3","packages":[{"registryType":"npm","identifier":"umbriel","version":"1.9.3","runtimeHint":"bunx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Capability profile: 'readonly' (inspect/read only), 'safe' (read + input + window — default), or 'full' (also os + fs tools).","format":"string","default":"safe","name":"UMBRIEL_PROFILE"},{"description":"Set to '1' to allow OS-level tools (launch_app, run_program, open_path) AND filesystem tools (read_file, write_file, list_dir) regardless of profile.","format":"string","name":"UMBRIEL_OS"},{"description":"Comma-separated tool names or categories to additionally allow on top of the profile.","format":"string","name":"UMBRIEL_ALLOW"},{"description":"Comma-separated tool names or categories to deny, overriding the profile and UMBRIEL_ALLOW.","format":"string","name":"UMBRIEL_DENY"},{"description":"Set to 'never' to forbid the real-cursor fallback entirely (strictly cursor-free). By default clicks/drags are cursor-free but fall back to the real hardware cursor when no cursor-free path exists.","format":"string","name":"UMBRIEL_CURSOR"},{"description":"Sandbox root directory that read_file/write_file/list_dir are confined to when fs tools are enabled.","format":"string","name":"UMBRIEL_FS_ROOT"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-06-18T20:33:27.830528Z","publishedAt":"2026-06-18T20:33:27.830528Z","updatedAt":"2026-06-18T20:33:27.830528Z","isLatest":false}}}],"metadata":{"count":8}}