5
/ 100
1 month ago
glama
open-computer-use
MCP server that gives any LLM a managed Docker workspace with live browser, terminal, code execution, document skills, and autonomous sub-agents.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Reads files from sensitive locations
Touches: ~/.config/libreoffice/4/user/basic/Standard
🚨
Code appears obfuscated
5 files are unreadable to a human reviewer. Cannot audit what they do.
⚠️
Known vulnerabilities in dependencies: 1 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 9 credentials: MCP_API_KEY, MCP_TOKENS_API_KEY, ANTHROPIC_AUTH_TOKEN, OPENAI_API_KEY, AZURE_OPENAI_API_KEY, OPENROUTER_API_KEY, ANTHROPIC_API_KEY, VISION_API_KEY, API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies1 high
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
markdown-pdf vulnerable to local file read via server side cross-site scripting (XSS)
Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.🔐 secret
MCP_API_KEY— Bearer token for MCP endpointconfig
BASE_DATA_DIR🔐 secret
MCP_TOKENS_API_KEY— Settings Wrapper auth keyconfig
OPENCODE_MODEL_ALIASESconfig
CLAUDE_SUB_AGENT_DEFAULT_MODELconfig
CODEX_SUB_AGENT_DEFAULT_MODELconfig
CODEX_MODELconfig
OPENCODE_SUB_AGENT_DEFAULT_MODELconfig
OPENCODE_MODELconfig
DOCKER_SOCKETconfig
DOCKER_IMAGE— open-computer-use:latest Sandbox container imageconfig
CONTAINER_MEM_LIMITconfig
CONTAINER_CPU_LIMITconfig
COMMAND_TIMEOUT— 120 Bash tool timeout (seconds)config
ENABLE_NETWORKconfig
PUBLIC_BASE_URL— docker exec computer-use-server env grep ^=config
CONTAINER_IDLE_TIMEOUTconfig
ORCHESTRATOR_CONTAINER_NAMEconfig
MCP_TOKENS_URL— Settings Wrapper URL (optional, see below)config
SUB_AGENT_MAX_TURNSconfig
SUB_AGENT_TIMEOUT— 3600 Sub-agent timeout (seconds)🔐 secret
ANTHROPIC_AUTH_TOKEN— Anthropic key (for Claude Code sub-agent)config
ANTHROPIC_BASE_URLconfig
ANTHROPIC_MODELconfig
ANTHROPIC_DEFAULT_SONNET_MODELconfig
ANTHROPIC_DEFAULT_OPUS_MODELconfig
ANTHROPIC_DEFAULT_HAIKU_MODELconfig
CLAUDE_CODE_SUBAGENT_MODELconfig
CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETASconfig
DISABLE_PROMPT_CACHINGconfig
DISABLE_PROMPT_CACHING_SONNETconfig
DISABLE_PROMPT_CACHING_OPUSconfig
DISABLE_PROMPT_CACHING_HAIKU🔐 secret
OPENAI_API_KEY— Edit .env — set (or any OpenAI-compatible provider)config
OPENAI_BASE_URL🔐 secret
AZURE_OPENAI_API_KEYconfig
AZURE_OPENAI_ENDPOINTconfig
AZURE_OPENAI_API_VERSIONconfig
CODEX_CONFIG_EXTRA🔐 secret
OPENROUTER_API_KEY🔐 secret
ANTHROPIC_API_KEYconfig
OPENCODE_CONFIG_EXTRAconfig
SUBAGENT_CLI🔐 secret
VISION_API_KEY— Vision API key (for describe-image)config
VISION_API_URLconfig
VISION_MODELconfig
SINGLE_USER_MODE— true = one container, no chat ID needed; false = require X-Chat-Id; unset = lenientconfig
SKILLS_CACHE_DIRconfig
SKILLS_CACHE_HOST_PATHconfig
_PATCH_TARGET_OVERRIDE🔐 secret
API_KEYconfig
SKILLS_DIRconfig
CONFIG_PATH// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 8 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/wide-moat-open-computer-use-1t8zzx)commit: d7c182fa42687dd5ea328fe2b84e982931b66025
code hash: 0edcca346d016f5324108045367c595aff5ef62f7bf0e6669be0cfde48e6c1bb
verified: 6/18/2026, 11:04:41 AM