
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
thunder-eye
Advanced tools
AI gets eyes into desktop apps — MCP server for visual perception of Electron, Tauri, Flutter, Qt, and native applications
AI gets eyes into desktop apps.
An MCP server that gives AI coding agents (Claude Code, Cursor, Windsurf) visual perception of running desktop applications.
Auto-detects the framework, captures screenshots, inspects UI trees, and finds elements — so the AI can actually see what you see.
npm install -g thunder-eye
Or clone and build locally:
git clone https://github.com/Orellius/thunder-eye.git
cd thunder-eye
npm install
npm run build
| Framework | Screenshot | UI Inspection | Element Finding |
|---|---|---|---|
| Electron (VS Code, Discord, Figma) | CDP | Accessibility Tree | Yes |
| Tauri (Thunder, CrabNebula) | CDP / Native | Accessibility Tree | Yes |
| Flutter | Native | DevTools (planned) | Planned |
| Qt (OBS, VLC) | Native | AT-SPI (planned) | Planned |
| GTK (GIMP, Inkscape) | Native | AT-SPI (planned) | Planned |
| SwiftUI / AppKit | Native | macOS Accessibility | Yes |
| Any other app | Native | — | — |
claude mcp add thunder-eye node ~/path/to/thunder-eye/dist/index.js
Add to your MCP config:
{
"mcpServers": {
"thunder-eye": {
"command": "node",
"args": ["/path/to/thunder-eye/dist/index.js"]
}
}
}
screenshotCapture a screenshot of any running desktop app. The AI can analyze it visually.
"Take a look at the app" → AI captures screenshot → "I can see the button is misaligned..."
detect_appAuto-detect what desktop apps are running and their frameworks.
inspect_uiGet the accessibility tree / component hierarchy without a screenshot.
find_elementSearch for UI elements by text or role.
get_window_infoGet window dimensions, position, and framework info.
list_windowsList all visible app windows.
Thunder Eye uses a layered detection strategy:
wmctrl or xdotool for window management, import (ImageMagick) for screenshots
Built with care by Orellius.ai
Part of the Thunder ecosystem — the AI-powered multi-agent coding orchestrator.
Website · Thunder · Thunder Thinking · Thunder Eye
MIT — use it however you want.
FAQs
AI gets eyes into desktop apps — MCP server for visual perception of Electron, Tauri, Flutter, Qt, and native applications
We found that thunder-eye demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.