GhostDesk

A virtual Linux desktop as an MCP server, shipped in Docker. Agents drive screen, mouse, keyboard across any GUI — browsers, IDEs, office suites, Wine/Windows apps, legacy software — many in parallel.

→ YV17labs/GhostDesk · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama github_topic

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: GHOSTDESK_TLS_KEY, GHOSTDESK_AUTH_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configGHOSTDESK_SCREEN_WIDTH— 1280 Virtual screen width in pixels

configGHOSTDESK_SCREEN_HEIGHT— 1024 Virtual screen height in pixels

configGHOSTDESK_IDLE_TIMEOUT

configXDG_RUNTIME_DIR

configGHOSTDESK_PORT— 3000 MCP server listening port

configGHOSTDESK_HOST

configGHOSTDESK_TLS_CERT— /etc/ghostdesk/tls/server.crt Path to the TLS certificate. When the file exists, websockify and the MCP server auto-switch to wss:// / https://. See [Security](#security).

🔐 secretGHOSTDESK_TLS_KEY— /etc/ghostdesk/tls/server.key Path to the TLS private key (matching GHOSTDESK_TLS_CERT).

configGHOSTDESK_ALLOWED_ORIGINS

🔐 secretGHOSTDESK_AUTH_TOKEN— export =$(openssl rand -hex 32)

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/yv17labs-ghostdesk-1u5l4x)](https://m8ven.ai/mcp/yv17labs-ghostdesk-1u5l4x)

commit: b11aa91048cffd9ed23537ac6f341a56500fe9c9

code hash: 1fbb6f5415638b805dc34cbe76b8ef1f9e775f6df6a82ae4af2d662113e49ee4

verified: 7/4/2026, 9:18:01 AM

view raw JSON →