Uindow — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Uindow (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<p align="center"> <a href="https://uindow.com/?ref=github"> <img src="https://uindow.github.io/img/github-banner.png"/> </a> </p>
Uindow drives a real, signed Chromium/Electron browser with genuine OS-level input - actual cursor movement, real keystrokes, and native file dialogs rather than synthetic page events. It runs entirely on your own machine and your own network, and every line of code it executes sits in plain sight in this repository.
Automate it three ways:
MCP server, so Claude, Cursor, VS Code, or any MCP-compatible client can list, create, and run automation modules directly. See Control Uindow from AI assistants.
debug automations with ease. Auto-completion, code healing, JavaScript parsing, and linting are all built in.
In order to use the app, create an account for free at uindow.com and follow the on-screen instructions.
We build signed binaries for macOS, Windows, and Linux directly from the dist source, and host them on the GitHub Releases page (current and older versions) and on the Uindow install page.
npxOne command to fetch the CLI and launch the app:
npx -y @uindow/cli@latest app:startOther lifecycle commands:
npx @uindow/cli app:status # check whether the app is running
npx @uindow/cli app:stop # stop the appClone the repository and launch the app directly from source.
git clone https://github.com/uindow/uindow.git uindow
cd ./uindow/
npm install
npm startUindow exposes a local Model Context Protocol server, so any MCP-compatible client can drive web-automation agents directly. The server communicates over stdio securely and is launched on demand by the AI assistant.
Requirements: Node.js 18+ with npx on your PATH.
npx -y @uindow/cli@latest mcpUindow provides a 1-click connector for the most popular AI assistants.
Go to Uindow > AI assistants > Connect
| AI assistant | Instant connect | Root key | Config location |
|---|---|---|---|
| Claude Code (CLI + Desktop Code) | ✅ yes | mcpServers | ~/.claude.json |
| Claude Desktop (Chat / Cowork) | ✅ yes | mcpServers | claude_desktop_config.json |
| Cursor | ✅ yes | mcpServers | ~/.cursor/mcp.json |
| VS Code (Copilot) | ✅ yes | servers | mcp.json (MCP: Open User Configuration) |
| Windsurf | ✅ yes | mcpServers | ~/.codeium/windsurf/mcp_config.json |
| Zed | ✅ yes | context_servers | settings.json |
| Codex | ✅ yes | TOML [mcp_servers.*] | ~/.codex/config.toml |
| Gemini CLI | ✅ yes | mcpServers | ~/.gemini/settings.json |
| Cline | ✅ yes | mcpServers | cline_mcp_settings.json |
| Goose | ✅ yes | YAML extensions | ~/.config/goose/config.yaml |
Go to Settings > Tools > AI Assistant > Model Context Protocol (MCP) and click Add, then paste the JSON. In the same dialog, set the scope to Global rather than project-scoped so the server is available in every project you open, then click Apply to start it.
{
"mcpServers": {
"uindow": {
"command": "npx",
"args": ["-y", "@uindow/cli@latest", "mcp"]
}
}
}Most remaining AI assistants accept the same object under mcpServers. Look for the config file in your home directory (~/.<client>/...) rather than the one in your project root - the home-directory copy is the global one:
{
"mcpServers": {
"uindow": {
"command": "npx",
"args": ["-y", "@uindow/cli@latest", "mcp"]
}
}
}Point the AI assistant at the command npx with arguments -y @uindow/cli@latest mcp.
If your AI assistant requires an explicit transport field, use "type": "stdio".
Run the launch command by hand first - it's the fastest way to separate "Uindow is broken" from "the AI assistant can't start it":
npx -y @uindow/cli@latest mcpA stdio server prints nothing and blocks. A silent, hung terminal means it started correctly; press Ctrl-C and go back to your AI assistant. Any stack trace you see here is the real error your AI assistant was swallowing.
Then confirm the scope took: open the AI assistant from a different directory than the one you configured it in, and check that Uindow's tools are still listed. If they vanish, the entry landed in a project-local config.
#### Troubleshooting
project-local. In Claude Code, claude mcp list from the other directory will come up empty; re-add with --scope user. In Gemini CLI, re-add with -s user. In Cursor and VS Code, move the entry from .cursor/mcp.json or .vscode/mcp.json to ~/.cursor/mcp.json or the user-profile mcp.json.
shell's PATH, which bites anyone using nvm, asdf, or Volta. Run which npx (where npx on Windows) and put the absolute path in command.
restart - quit the app entirely (macOS: Cmd+Q; Windows: quit from the tray icon) rather than closing the window.
servers for VS Code, context_servers for Zed, mcp_servers in TOML for Codex, mcpServers everywhere else. A wrong key is ignored silently in most AI assistants.
config, so an old project-local uindow entry will silently win over the new global one. Delete the stale entry rather than editing both.
tool search by default and loaded on demand, so they may not appear in an upfront tool list. Ask for a Uindow tool by name, or set "alwaysLoad": true on the server entry to load its tools at session start.
claude mcp list and /mcp (Claude Code), Output panel > MCPLogs (Cursor), Output > MCP (VS Code), ~/Library/Logs/Claude/mcp*.log or %APPDATA%\Claude\logs\mcp*.log (Claude Desktop).
You can run Uindow from any CI/CD pipeline or command-line interface.
npx -y @uindow/cli@latest --helpAlternatively, you can use node dist/bin.js --help instead of npx @uindow/cli --help for a faster response.
USAGE
$ npx @uindow/cli <command> [options]
AVAILABLE COMMANDS
$ npx @uindow/cli mcp Uindow MCP server (stdio)
$ npx @uindow/cli app_docs Query SDK documentation
$ npx @uindow/cli app_status Get application status
$ npx @uindow/cli app_start Start application
$ npx @uindow/cli app_stop Stop application
$ npx @uindow/cli agent_list List agents
$ npx @uindow/cli agent_create Create agent
$ npx @uindow/cli agent_update Update agent
$ npx @uindow/cli agent_delete Delete agent
$ npx @uindow/cli agent_status Get agent status
$ npx @uindow/cli agent_start Start agent
$ npx @uindow/cli agent_stop Stop agent
$ npx @uindow/cli agent_screenshot Grab agent screenshot
$ npx @uindow/cli agent_viewport Scan agent viewport
$ npx @uindow/cli agent_execute Execute code in an agent
$ npx @uindow/cli agent_logs Get agent logs
$ npx @uindow/cli agent_settings_get Get settings
$ npx @uindow/cli agent_settings_set Update settings
$ npx @uindow/cli agent_results_get Get latest results
$ npx @uindow/cli src_sample Module: get sample (yaml)
$ npx @uindow/cli src_export Module: get source (yaml)
$ npx @uindow/cli src_code_get Module: get state or function code
$ npx @uindow/cli src_code_set Module: set state or function code
$ npx @uindow/cli src_keys_list Module: list item keys
$ npx @uindow/cli src_keys_reorder Module: reorder item keys
$ npx @uindow/cli src_keys_update Module: update item key
$ npx @uindow/cli src_keys_delete Module: delete item
$ npx @uindow/cli src_input_get Module: get input
$ npx @uindow/cli src_input_set_bool Module: set boolean input
$ npx @uindow/cli src_input_set_int Module: set integer input
$ npx @uindow/cli src_input_set_string Module: set string input
$ npx @uindow/cli src_input_set_files Module: set files input
$ npx @uindow/cli src_input_set_table Module: set table input
$ npx @uindow/cli src_output_get Module: get output
$ npx @uindow/cli src_output_set_bool Module: set boolean output
$ npx @uindow/cli src_output_set_int Module: set integer output
$ npx @uindow/cli src_output_set_string Module: set string output
$ npx @uindow/cli src_output_set_files Module: set files output
$ npx @uindow/cli src_output_set_table Module: set table output
OPTIONS
--help Help menu for a specific command
--version Package version There are three ways to build a module - reach for them in this order:
browser exactly as you normally would: point, click, scroll, upload and download files. The recorder turns your actions into JavaScript for you - deterministically, without any AI, and instantly. What you see is what you get.
your local AI assistant over MCP and have it author the module on your behalf. Describe the outcome and let it produce the code for you. You're always in control of your automations, and you can use the included IDE to debug your code.
both come up short, go straight to the source:
code hints, formatting and linting
For most people the learning curve is zero - the recorder is all you'll ever touch. And if you decide to go pro, it stays shallow: the SDK is there when you want it, not before.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.