local_computer

Item: local_computer
Rating: 37
Author: M8ven

Enables AI assistants to access files and terminal of a local computer via a public HTTPS endpoint, secured with GitHub OAuth.

→ ApsidD/local-computer-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Tool annotations don’t match behaviour

1 read-only tool performs write/delete/exec — video_screenshots (line 359: probe = subprocess.run()

⚠️

Tool descriptions don’t match what handlers do

1 tool describes read intent but its handler mutates — multi_edit (line 484: target.write_text(working, encoding="utf-8"))

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: GITHUB_CLIENT_SECRET, JWT_SIGNING_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configALLOWED_ROOT— корень для файловых инструментов (пусто = домашняя папка)

configALLOWED_GITHUB_USERS— ApsidD — твой GitHub-логин. Без него внутрь пустит любого.

configGITHUB_CLIENT_ID— , GITHUB_CLIENT_SECRET из шага 1

🔐 secretGITHUB_CLIENT_SECRET— GITHUB_CLIENT_ID, из шага 1

configBASE_URL— (Tailscale Funnel или ngrok). Дальше в claude.ai вставляешь адрес /mcp.

configHOST

configPORT

configMAX_READ_BYTES

configCOMMAND_TIMEOUT

🔐 secretJWT_SIGNING_KEY— (необязательно) — чтобы не логиниться заново после рестарта

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/apsidd-local-computer-mcp-7mi833)](https://m8ven.ai/mcp/apsidd-local-computer-mcp-7mi833)

commit: 04d936eb9be96fa249898dcaf887b131cfd75223

code hash: 5056de5322fa3771db7553a3c788b7d1cc9d17b7292f60d72c2e1f8e45e98ddd

verified: 6/18/2026, 10:28:45 AM

view raw JSON →