SkillFoxx

DeskVNC MCP

DeskVNC gives an agent the same VNC, RDP and SSH connections a person uses over MCP: view the screen, click and type.

  • 113 ★ on the repository
  • Last commit
  • Apache-2.0
MCP server

Broad access

Why this level

  • The agent gets mouse, keyboard and command line on real remote computers.
  • A mistake in the task can change or delete data on the target machine.
All reasons and checks

psmux/deskvncAuthor:psmux

Install

Manual install

claude mcp add deskvnc -- /Applications/DeskVNCViewer.app/Contents/MacOS/dvv mcp --stdio

Install DeskVNC from the releases page first and enable the agent plane in the AI Agents panel. `dvv doctor` prints the line for other clients.

Access and checks

How we review

Broad accessThe tool can change data, run commands or handle secrets.

  • The agent gets mouse, keyboard and command line on real remote computers.
  • A mistake in the task can change or delete data on the target machine.

This is third-party code. Review the repository files before installing.

What it does

DeskVNC is a native remote desktop client written in Rust on Tauri 2 for Windows, macOS and Linux that unites VNC, RDP and SSH in one host library. Passwords go into the system keychain, with no account and no telemetry. The client ships `dvv`, an MCP server that hands saved machines to an agent. The agent opens a host, takes control, looks at the screen, clicks and types through `dvv_hosts`, `dvv_open`, `dvv_control`, `dvv_screen`, `dvv_click`, `dvv_type`, `dvv_key`, plus `dvv_files`, `dvv_run`, `dvv_term_read` and group calls. Nothing is installed on the target. Clicks and typing are fenced against a stale screen, and a person can take over a session at any moment. A skill sits in `skills/deskvnc/SKILL.md`.

Who it is for. Administrators and support engineers who manage dozens of machines over VNC, RDP and SSH and want to hand routine actions to an agent.

Good fit when

  • A sequence of clicks is needed on a Windows desktop where installing an agent is impossible.
  • The same action repeats across several servers.
  • A locked machine must be reached through Citrix, VDI or a jump host.
  • A user outside the network asks for help and a safe session with their consent is needed.

Not a fit when

  • The machine must stay fully closed to agent remote access.
  • Work without a graphical client on the administrator side is needed.
  • Access without the machine owner's consent is wanted.

Example request

Open a saved host through DeskVNC, look at the screen, start Notepad, type a test line and show a screenshot of the result.

MCP

Transport
stdio, http
Authentication
not required

Limitations

The agent control plane is off by default: enable it in the AI Agents panel, then register the server with `claude mcp add deskvnc -- /Applications/DeskVNCViewer.app/Contents/MacOS/dvv mcp --stdio`. The agent acts on real machines, so grant each connection deliberately. For support sessions the person on the remote side separately allows commands and file transfer. Browser access and automatic private provider deployment are still in development, and the Linux support build ships as a tarball.

How to disable. Switch off the agent plane in the AI Agents panel and remove the server entry from the client configuration with `claude mcp remove deskvnc`.

FAQ

How do I connect it to Claude Code?

Enable the agent plane in the AI Agents panel and run `claude mcp add deskvnc -- /Applications/DeskVNCViewer.app/Contents/MacOS/dvv mcp --stdio`. A button in the panel does it for you.

Must anything be installed on the target?

No, the connection uses ordinary VNC, RDP or SSH and no agent is installed on the target.

What protects against stray clicks?

Each click carries a `generation` from `dvv_screen` and a click on a stale screen is refused. Typing is refused with `SCREEN_CHANGED` if the screen repainted heavily.

Can a person step in?

Yes. A click into the session pane fences the agent out and held keys and buttons are released.

Which clients are verified?

Claude Code and OpenCode are verified over stdio and HTTP; Codex, Cursor, Gemini CLI, VS Code and Python agents are covered in `docs/AGENTS.md`.

Discussion

No questions or reviews yet.

MCP servers

Muxin MCP connects an agent to your computers, with remote sessions that keep running after the application window closes.

MCP serverBroad access462

A secure MCP runtime through which an agent operates local machines, servers and containers

MCP serverBroad access1.3K

MCP SSH Agent is an MCP server that reads hosts from ~/.ssh/config, runs commands and copies files through system ssh and scp.

MCP serverBroad access105

Your machine's terminal, windows and desktop in a browser, plus an MCP server for agents to read and type into other sessions

MCP serverBroad access304
Official

The remote MCP server of Devopness, a platform that builds infrastructure and deploys apps in your own cloud accounts

MCP serverBroad access577

A WebSSH console for VPS with an MCP server: the agent works across several servers while ACL tokens limit tools and hosts.

MCP serverBroad access133

README in short

The client keeps hosts and protocols in one library and `dvv` hands them to an agent over MCP with stale-screen fencing.

README badge

Report a problem