Umbriel MCP Server

Drive any Windows app through five layers - fall back to OCR and pixel-matching when there's no other way in, see and manage windows even when they're hidden, use cursor-free semantic or posted input where Windows permits it, target controls by name and role, and reach past the GUI to drive the OS itself: processes, services, the registry, scheduled tasks, the firewall, network, power, displays, disks, environment…

People connecting security tools to Claude, Cursor, VS Code, or another MCP client. The project is written in TypeScript.

VERIFIED ACTIVE

LAST COMMIT 2026-08-15 · ★ 2 · #77 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

MIT · TypeScript servers · how we verify → /methodology

01 · Install Umbriel

before you install - you'll need

UMBRIEL_PROFILE is optional or environment-specific per the README.

Claude Code

claude mcp add obscuritysrl-umbriel -- npx -y umbriel

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "obscuritysrl-umbriel": {
      "command": "npx",
      "args": [
        "-y",
        "umbriel"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package umbriel - unscoped; check the name against the project README before installing

registry namespace io.github.ObscuritySRL is GitHub-verified and matches the repo owner

03 · Who maintains Umbriel

umbriel is maintained by obscuritysrl. We track 2 MCP servers from obscuritysrl - 2 actively maintained, 21 combined GitHub stars, oldest repo from Apr 2026. Full record: all servers from obscuritysrl.

bun-uia Playwright for the Windows desktop, from Bun - drive native GUIs via UI Automation + MCP. ★ 19

04 · Facts

repository: github.com/obscuritysrl/umbriel
category: security - ranked #77 of 182 actively-maintained security servers as of 2026-08-25.
registry: io.github.ObscuritySRL/umbriel (active, first published 2026-06-18 · 8 versions)
packages: npm:umbriel

05 · Umbriel FAQ

What is Umbriel?

Is Umbriel still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-15. We re-verify nightly.

How do I install Umbriel?

Run `npx -y umbriel`. The README documents one environment variable (UMBRIEL_PROFILE) to set first. UMBRIEL_PROFILE is optional or environment-specific per the README. You can also paste the ready-made client config above.

Does Umbriel run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

06 · Alternatives to Umbriel

Alternatives to Umbriel

Maintained security servers if Umbriel isn't the fit.

Pairs well with

Servers that cover what Umbriel doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Dns (ofershap) · Microsoft 365 Admin · Onelogin MCP · Onplana · Operant MCP

More TypeScript MCP servers · Octen MCP · Octopus Blackboard · AI Context Kit · Cloudflare · see all