deskbrid-hermes-mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited deskbrid-hermes-mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Wire Deskbrid's 100+ Linux desktop control tools into Hermes as an MCP server. After setup, the agent can control windows, keyboard, mouse, clipboard, screenshots, AT-SPI accessibility, terminals, and more.
Prerequisites: Deskbrid daemon installed and running. See devops/deskbrid-install skill for system installation.
pgrep -a deskbridIf no daemon, start it:
nohup deskbrid daemon --dashboard-bind 0.0.0.0 > /tmp/deskbrid.log 2>&1 &
sleep 2
curl -s -o /dev/null -w "%{http_code}" http://127.0.0.1:20129`--dashboard-bind 0.0.0.0` makes the web dashboard accessible from LAN. Use 127.0.0.1 on single-user workstations. The dashboard exposes clipboard history, screenshots, and window titles — only bind to 0.0.0.0 on trusted networks.
# Check if already registered
hermes mcp list | grep deskbrid
# Register
hermes mcp add deskbrid --command "deskbrid mcp"This adds to ~/.hermes/config.yaml:
mcp_servers:
deskbrid:
command: deskbrid
args:
- mcp
timeout: 30hermes mcp test deskbridExpected: ✓ deskbrid: connected
MCP servers are loaded at session start. Run /reset or start a new hermes session. After restart, the agent has 100+ new tools.
After MCP registration, the agent gains these tool categories:
| Category | Tools | Examples |
|---|---|---|
| Windows | list, focus, close, minimize, maximize, move, resize, tile | list_windows, focus_window |
| Input | keyboard typing, key combos, mouse, click, scroll, drag | type_text, press_key, mouse_move |
| Clipboard | read, write, history | clipboard_read, clipboard_write |
| Screenshots | capture, OCR, diff | screenshot, screenshot_ocr |
| System | info, battery, idle, power, pressure (PSI) | system_info, system_pressure |
| AT-SPI A11y | tree, get element, click, set value, perform action | get_accessibility_tree, click_element |
| Terminal | create PTY, send input, read output | terminal_create, terminal_send |
| Files | search, read, write, watch | files_search, files_read |
| Audio | volume, mute, sink management | audio_volume, audio_mute |
| Network | WiFi, Bluetooth, connections | network_status, wifi_scan |
| MPRIS | media player control | mpris_play, mpris_pause |
| list printers, print files, manage jobs | print_file, print_list | |
| Notifications | send, dismiss, history | notify_send, notify_dismiss |
| Keyring | Secret Service credentials | secrets_get, secrets_store |
| Rules | event-triggered automation | rule_create, rule_list |
| Confirmation | approval-gated destructive actions | confirm, deny |
| Agent | inter-agent mailbox messaging | agent_send, agent_check |
| Search | unified cross-surface search | search_query |
| Macros | record and replay action sequences | macro_record, macro_replay |
| Capabilities | supported actions, high-risk listing | capabilities |
# Verify daemon is running
pgrep -a deskbrid
# Test MCP manually
echo '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' | deskbrid mcpMCP servers load at session start. Verify registration: hermes mcp list. If deskbrid shows as disabled, run hermes mcp configure deskbrid to toggle tools on.
Deskbrid uses ~/.config/deskbrid/permissions.toml. High-risk actions (clipboard read, screenshot, keyboard input, process start, terminal create) require explicit allow-listing. Edit the permissions file and restart the daemon.
If the dashboard returns 000 but the daemon is running, the SSE connection pool (max 32) is full. Restart the daemon to clear it.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.