hypruse

Install

Pin version registry version 0.13.0

Python
uvx hypruse

Python
uvx hypruse@0.13.0

Setup by client

Pick your client — the config below is generated for this server (local stdio). Copy respects the “Pin version” switch above.

{
  "mcpServers": {
    "hypruse": {
      "command": "uvx",
      "args": [
        "hypruse"
      ]
    }
  }
}

{
  "mcpServers": {
    "hypruse": {
      "command": "uvx",
      "args": [
        "hypruse@0.13.0"
      ]
    }
  }
}

claude mcp add hypruse -- uvx hypruse

claude mcp add hypruse -- uvx hypruse@0.13.0

{
  "mcpServers": {
    "hypruse": {
      "command": "uvx",
      "args": [
        "hypruse"
      ]
    }
  }
}

{
  "mcpServers": {
    "hypruse": {
      "command": "uvx",
      "args": [
        "hypruse@0.13.0"
      ]
    }
  }
}

{
  "servers": {
    "hypruse": {
      "command": "uvx",
      "args": [
        "hypruse"
      ]
    }
  }
}

{
  "servers": {
    "hypruse": {
      "command": "uvx",
      "args": [
        "hypruse@0.13.0"
      ]
    }
  }
}

{
  "mcpServers": {
    "hypruse": {
      "command": "uvx",
      "args": [
        "hypruse"
      ]
    }
  }
}

{
  "mcpServers": {
    "hypruse": {
      "command": "uvx",
      "args": [
        "hypruse@0.13.0"
      ]
    }
  }
}

Environment variables

Defined in the server's official registry manifest. Required secrets are shown as <YOUR_…> placeholders in the configs above.

• HYPRUSE_SCREENSHOT_MODE — How captures are returned: 'file' writes to XDG_RUNTIME_DIR and returns the path, 'image' returns the image inline. Use 'image' for clients that render MCP images but cannot read files, such as Claude Desktop.
• HYPRUSE_READONLY — Set to 1 to expose only the observation tools (desktop, screenshot, zoom, ui, marks, binds, wait_for). The agent can see and narrate but cannot click, type, or launch.
• HYPRUSE_CONFINE — Restrict input to a scope of windows and refuse everything outside it: 'launched' (only windows hypruse opened this session), 'class:firefox,kitty', or 'workspace:3,special:notes'. Unset means no confinement.
• HYPRUSE_AUTH_GUARD — Refuse to click or type into system authentication dialogs (polkit, keyring prompts). On by default; 'strict' also refuses password fields in ordinary windows; 0 disables it.
• HYPRUSE_STRICT — Set to 1 to refuse to act when the cursor or focused window moved since hypruse's last action, so the agent must re-read the desktop before retrying.
• HYPRUSE_MARK — Set to 1 to make the agent's presence legible: tag every window it opens 'hypruse-owned' and flash an on-screen notice when it opens a window or captures the screen.
• HYPRUSE_CLIPBOARD — Set to 1 to register the opt-in clipboard tool (never in read-only mode). Off by default because clipboards hold passwords.
• HYPRUSE_JOURNAL — Record every tool call, refusals included, as one NDJSON line: 1 writes to XDG_STATE_HOME/hypruse/journal.ndjson, or give a path. Read it back with 'hypruse journal'. Off by default.

GitHub

About this server