ClawTank: RDP server and MCP for driving a Mac
ClawTank
A macOS app with an RDP server and a built-in MCP that lets an agent on the same Mac take screenshots, click and type
- 55 ★ on the repository
- Last commit
- Apache-2.0
Broad access
Why this level
- The agent sees the whole Mac screen and types and clicks in any program where your account is open
- The app needs Screen Recording and Accessibility permissions, and the beta build is not notarized
Install
- Works in
Manual install
claude mcp add clawtank --env CLAWTANK_AGENT_TOKEN=ct_… -- "/Applications/ClawTank.app/Contents/MacOS/clawtank-mcp"The command from docs/agent-api.md. First install ClawTank from the DMG and create a token in the Agents tab of settings.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The agent sees the whole Mac screen and types and clicks in any program where your account is open
- The app needs Screen Recording and Accessibility permissions, and the beta build is not notarized
This is third-party code. Review the repository files before installing.
What it does
ClawTank is a native RDP server for macOS. A Mac mini or Mac Studio is reached with standard clients: Windows App on Windows, Mac, iPad and iPhone, Microsoft's app on Android, mstsc on Windows or FreeRDP on Linux. The Apple silicon media engine encodes H.264 video, the desktop resizes to the client window, and a Mac with no monitor uses a virtual display. For agents the app includes an Agent API that is off by default. After a token is created in settings, an agent on the same Mac connects the clawtank-mcp server from the app bundle. Tools: screenshot, get_state, list_displays, click, move_mouse, drag, scroll, press_key, type_text, open_app, create_virtual_display and remove_virtual_display. Scripts get a REST API on 127.0.0.1:3390. While an agent works, an orange badge with a Stop button sits on every display, and each action lands in the connection log. A person always wins: for three seconds after their input, agent commands are refused.
Who it is for. Owners of headless Mac minis and Mac Studios who need a remote desktop and a controlled way to let an agent drive that Mac.
Good fit when
- A Mac mini sits at home and you want to work from a MacBook, a Windows laptop or an iPad
- An agent must click and type in a program that has neither an API nor a command line
- You need a virtual display on a Mac with no monitor and no HDMI dummy plug
- Remote access runs over Tailscale with no port forwarding and no cloud
- You want a connection log showing every screenshot, click and app launch by the agent
Not a fit when
- Several people must work at once: one RDP session is supported, and public APIs give no per-user sessions
- You have an Intel Mac and do not want to build the app: ready builds are Apple silicon only
- You need access to the lock screen: macOS shows the client only wallpaper until someone unlocks the Mac at the keyboard
- The agent runs on another machine: the Agent API listens on 127.0.0.1 only
Example request
Take a screenshot, open TextEdit and type the summary of the letter I dictated.MCP
- Transport
- stdio
- Authentication
- API key
Environment variables
CLAWTANK_AGENT_TOKENrequired, secret- Agent token created in the Agents tab of settings
CLAWTANK_AGENT_URL- Agent API address if the port was changed
Limitations
Release 0.9 is beta: the build is not notarized, so the first launch needs a manual Open Anyway step, and there are no automatic updates yet. It needs macOS 14 or newer on Apple silicon, and with each unsigned update macOS asks again for Screen Recording and Accessibility permissions.
The client and the Mac must share a network or both be on Tailscale. The agent MCP server ships inside the app, so ClawTank must be installed and running. There is one monitor per session and no full-colour AVC444 yet.
How to disable. Turn off Allow AI agents to control this Mac in the Settings section, Agents tab, or press Stop on the badge: the Agent API shuts down and virtual displays disappear. Remove the MCP server with claude mcp remove clawtank.
FAQ
How do I connect an agent to the Mac through ClawTank?
Turn on Allow AI agents to control this Mac in settings, create a token and run claude mcp add clawtank with CLAWTANK_AGENT_TOKEN, pointing at the clawtank-mcp binary inside the app bundle. Claude Desktop has an .mcpb bundle.
Can I tell when an agent is driving the computer?
Yes. An orange Agent in control badge with a Stop button appears on every display, the menu bar icon changes, and each action is written to the log. The log stores typed text as a character count.
Does RDP need a separate password?
Yes, ClawTank has its own password that differs from the Mac one. A leaked RDP password cannot unlock the Keychain or sudo. Connections use TLS with NLA, and five failed logins block the address for five minutes.
How do I reach the Mac from another network?
Install Tailscale on the Mac and on your device and sign in to the same account. By default only local network and Tailscale addresses are accepted, and forwarding ports to the outside is not advised.
Does ClawTank send data to the cloud?
No. The app makes no network connections of its own and only accepts incoming RDP connections and optional Agent API calls on 127.0.0.1. It never records the screen to disk.
Discussion
No questions or reviews yet.
Related
MCP serversAn MCP server for macOS: the agent moves the mouse, types, manages windows and captures the screen when an app has no API
Remote macOS Use: control of a remote Mac
mcp-remote-macos-use
An MCP server that lets Claude Desktop see a Mac screen over VNC, move the mouse, press keys and open applications
Clawd Cursor: desktop control through MCP
Clawd Cursor
An MCP server that lets an agent drive windows and apps: it reads the screen as structure and acts by element name
An MCP server that lets an agent see the screen and control macOS, Windows and Linux: screenshots, clicks, OCR and screen memory
A macOS CLI and MCP server: screenshots, accessibility-based UI inspection and app control via clicks and typing
A Swift MCP server that lets an agent drive any macOS app: click, type and read the interface tree
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| ClawTank: RDP server and MCP for driving a Mac (this card) | no | API key | 55 | |
| macOS-MCP | no | key is optional | 240 | system control through macOS APIs without a remote desktop |
| computer-use-mcp | no | not required | 400 | a general screen-control server without its own RDP server |
README in short
The README goes from installing the DMG and the first launch to connecting clients on Windows, Mac, iPad, Android and Linux. A table compares ClawTank with macOS Screen Sharing and Chrome Remote Desktop, and further sections cover troubleshooting, known limitations and beta testing. Agent API details live in docs/agent-api.md.