
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
@funly/macpilot
Advanced tools
MCP server for MacPilot — gives AI agents mouse, keyboard, screenshot, and accessibility control of macOS via a local HTTP API
MCP (Model Context Protocol) server for MacPilot — gives AI agents mouse, keyboard, screenshot, and accessibility control of macOS desktops.
MacPilot is a local HTTP API that runs as a menu bar app on macOS. This MCP server wraps that API so any MCP-compatible AI agent (Claude, etc.) can control the desktop through standard MCP tool calls instead of raw HTTP.
npm install -g @funly/macpilot
Add to your MCP config:
{
"mcpServers": {
"macpilot": {
"command": "npx",
"args": ["-y", "@funly/macpilot"],
"env": {
"MACPILOT_HOST": "127.0.0.1",
"MACPILOT_PORT": "49901",
"MACPILOT_API_KEY": ""
}
}
}
}
| Variable | Default | Description |
|---|---|---|
MACPILOT_HOST | 127.0.0.1 | MacPilot server host |
MACPILOT_PORT | 49901 | MacPilot server port |
MACPILOT_API_KEY | (empty) | API key if MacPilot has auth enabled |
session_status — Check current status (available/active/user_control/user_finished/paused)session_start — Start a session (required before any actions)session_end — End session (always call when done)capture_window — Screenshot a window (returns image + dimensions)capture_region — Screenshot a screen regionmouse_click — Click using normalized coords (nx/ny 0.0–1.0)mouse_double_click — Double-click (select word)mouse_scroll — Scroll at positionmouse_move — Move cursormouse_drag — Drag between positionsmouse_position — Get current cursor positionclick_and_type — Click field + type text (most reliable form filling)keyboard_type — Type text via clipboard pastekeyboard_key — Press key with modifierskeyboard_shortcut — Named shortcuts (copy, paste, etc.)list_apps — All running apps with windowIdsfocus_app — Bring app to frontlaunch_app — Launch an appfocused_app — Get frontmost appaccessibility_elements — List UI elements (buttons, fields, labels)batch — Multiple actions in one calldiagnostics — Recent API call logsession_start with your agent namelist_apps to find target windowcapture_window to see the screennx = pixelX / imageWidth, ny = pixelY / imageHeightmouse_click or click_and_type at those coordinatescapture_window again to verifysession_end when doneMIT
FAQs
MCP server for MacPilot — gives AI agents mouse, keyboard, screenshot, and accessibility control of macOS via a local HTTP API
We found that @funly/macpilot demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.