// SCAN REPORT

OScribe

24 tools. 19 can modify or destroy data without limits.

19 write tools that can modify data. Rate limits recommended.

Last updated: 29 Jun 2026

19 can modify or destroy data

5 read-only

24 tools total

Community server · catalogue entry verified 29/06/2026

How to control OScribe ↓

TOOL MAP

What OScribe exposes to your agents

Read (5) Write / Execute (19) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous OScribe tools

Execute · Medium os_mouse_down This tool triggers a physical mouse button press action on the desktop, which is a UI interaction/execution operation. Execute · Medium os_mouse_up This tool triggers a physical UI interaction (mouse button release) on the desktop, completing an action sequence that can interact with any application. Execute · High os_browser_restart_with_cdp This tool executes external operations (browser restart with debugging protocol enablement) whose effects depend on arguments and system state. Execute · Medium os_nvda_start Starting a screen reader is an Execute action rather than Read because it launches and controls an external application process, potentially affecting system behavior and accessibility settings.

19 of OScribe's 24 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control OScribe

PolicyLayer is an MCP gateway — it sits between your AI agents and OScribe, and nothing reaches the server without passing your rules. These are the rules we recommend:

Cap read operations

{
  "os_inspect_at": {
    "limits": [
      {
        "counter": "os_inspect_at_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register OScribe — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON OSCRIBE →

Instant setup, no code required.

FULL CATALOGUE

All 24 OScribe tools

EXECUTE 19 tools

Execute os_browser_restart_with_cdp Restart Chromium browser (Chrome, Edge, Brave, Arc) with Chrome DevTools Protocol (CDP) enabled. Also works fo Execute os_click Click at current cursor position. Use os_move first to position the cursor, then os_click to click. This ensur Execute os_click_at Click at specific screen coordinates (moves and clicks in one action). Prefer using os_move + os_click for mor Execute os_drag Perform a drag-and-drop operation: moves to start position, holds mouse button, smoothly drags to destination, Execute os_focus Focus a window by title or app name Execute os_hotkey Press a keyboard shortcut Execute os_mouse_down Press and hold mouse button at current cursor position. For drag-and-drop, prefer os_drag which handles the co Execute os_mouse_up Release mouse button at current cursor position. Use after os_mouse_down to complete manual drag operations. F Execute os_move Move mouse cursor to specific coordinates Execute os_nvda_install Download and install NVDA portable for Electron app accessibility. Windows only. Execute os_nvda_start Start NVDA screen reader in silent mode. Required for Electron app accessibility. Windows only. Execute os_nvda_stop Stop NVDA screen reader. Windows only. Execute os_scroll Scroll in a direction Execute os_system_ui Get all Windows system UI elements (taskbar, Start button, system tray, desktop icons, action center, widgets) Execute os_type Type text using the keyboard Execute os_unity_setup Automatically set up the Unity Bridge for any Unity Mono game (Windows & macOS). This tool automates the full Execute os_voiceover_start Start VoiceOver screen reader in silent mode (no audio). Required for Electron app accessibility. macOS only. Execute os_voiceover_stop Stop VoiceOver screen reader. macOS only. Execute os_wait Wait for a specified duration (useful for waiting for UI to load)

READ 5 tools

Read os_inspect_at Get the UI element at specific coordinates. Returns element type, name, bounds, and state. Read os_nvda_status Check NVDA screen reader status (Windows only). NVDA is needed for Electron app accessibility. Read os_screenshot Capture a screenshot with UI elements and cursor position. Returns: (1) the image, (2) cursor coordinates (x, Read os_voiceover_status Check VoiceOver screen reader status (macOS only). VoiceOver is needed for Electron app accessibility. Read os_windows List all open windows

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about OScribe

Is the OScribe MCP server safe to use without restrictions? +

The OScribe server is primarily read-only with 5 read tools. While it cannot modify data, an agent in a retry loop can make thousands of API calls per minute, exhausting rate limits and running up costs. Rate limiting is still recommended.

How many tools does the OScribe MCP server expose? +

24 tools across 4 categories: Destructive, Execute, Read, Write. 5 are read-only. 19 can modify, create, or delete data.

How do I enforce a policy on OScribe? +

Register the OScribe MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every OScribe tool call.

Deterministic rules across all 24 OScribe tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON OSCRIBE →

Instant setup, no code required.

24 OScribe tools catalogued and risk-classified — across an index of 43,000+ MCP servers.