Back to MCP Trust Indexm8ven
75
/ 100
3 days ago
github_topic

GhostDesk

Give any AI agent a full desktop — it sees the screen, clicks, types, and runs apps like a human. Automate anything with a UI: browsers, legacy software, internal tools. No API needed. One Docker command.

→ YV17labs/GhostDesk· listed on github_topic
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for the top badge — read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Verified

Install from

GitHubGlama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: GHOSTDESK_TLS_KEY, GHOSTDESK_AUTH_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configGHOSTDESK_PORT— 3000 MCP server listening port
configGHOSTDESK_HOST
configGHOSTDESK_TLS_CERT— /etc/ghostdesk/tls/server.crt Path to the TLS certificate. When the file exists, websockify and the MCP server auto-switch to wss:// / https://. See [Security](#security).
🔐 secretGHOSTDESK_TLS_KEY— /etc/ghostdesk/tls/server.key Path to the TLS private key (matching GHOSTDESK_TLS_CERT).
configGHOSTDESK_ALLOWED_ORIGINS
🔐 secretGHOSTDESK_AUTH_TOKEN— export =$(openssl rand -hex 32)
configGHOSTDESK_SCREEN_WIDTH— 1280 Virtual screen width in pixels
configGHOSTDESK_SCREEN_HEIGHT— 1024 Virtual screen height in pixels
configGHOSTDESK_IDLE_TIMEOUT
configXDG_RUNTIME_DIR
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/yv17labs-ghostdesk-xs78sm)](https://m8ven.ai/mcp/yv17labs-ghostdesk-xs78sm)
commit: 3d7873ed8da3981164796a1588bfa56bce77479a
code hash: 1fbb6f5415638b805dc34cbe76b8ef1f9e775f6df6a82ae4af2d662113e49ee4
verified: 8/7/2026, 2:24:04 AM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client