GhostDesk

What GhostDesk does

One binary exposes one MCP endpoint over Streamable HTTP, and the same tools, such as mouse_click and app_launch, work on all three desktops. On Linux it runs as a Docker container with a virtual desktop inside the image, a disposable and sandboxed setup driven through zwlr_virtual_pointer_v1, Sway IPC and grim. On macOS and Windows it runs as a native binary against the machine in front of you, with no sandbox. The default image ships Firefox, the foot terminal, mousepad and galculator, and the agent user has passwordless sudo.

To connect Hermes Agent, point its MCP client config at http://localhost:3000/mcp. The README gives the same URL for Claude Code, Claude Desktop and OpenCode, with no headers needed in the demo posture. A secure local run adds TLS and authentication, the README covers running many agents, and a custom image can be built on a base image with other apps. Its demo prompt asks the agent to open Firefox, visit Google News and report the technology headlines.

Key features

• MCP server over Streamable HTTP with screen, mouse, keyboard, app launch and shell tools
• Sandboxed virtual Linux desktop in a Docker container
• Native binaries for macOS and Windows that drive the real desktop
• Default image with Firefox, foot, mousepad and galculator
• Secure local run with TLS and authentication
• Custom image support for other application sets

When to use it

• Automate legacy software or internal tools that have no API
• Let a Hermes agent browse a website in a disposable desktop
• Run QA flows through a real browser driven by an agent

Who it is for: Developers who want an AI agent, including Hermes Agent, to operate graphical applications.

How it fits with Hermes Agent

Hermes Agent is named as an MCP client that can use the same endpoint URL; the server is a general tool for any MCP-compatible agent.

How to install GhostDesk

These commands are copied from the project's README. Check the repository for the latest steps before you run them.

docker run -d --name ghostdesk-demo --shm-size 2g -p 3000:3000 -p 6080:6080 ghcr.io/yv17labs/ghostdesk:latest

Requirements: Docker for the Linux container route; macOS and Windows use a native binary instead.

Note: The quick-start container runs over plain HTTP with every auth gate disarmed, which the README says is not fit for anything beyond a trusted laptop.

FAQ