// SCAN REPORT

Computer Use Windows

22 tools. 18 can modify or destroy data without limits.

18 write tools that can modify data. Rate limits recommended.

Last updated: 3 Jul 2026

18 can modify or destroy data

4 read-only

22 tools total

Community server · catalogue entry verified 03/07/2026

How to control Computer Use Windows ↓

TOOL MAP

What Computer Use Windows exposes to your agents

Read (4) Write / Execute (18) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous Computer Use Windows tools

Execute · Low wait Wait does not itself read, write, or destroy data, nor does it involve financial operations. Execute · Medium double_click Double-clicking triggers UI interactions that can open files, launch applications, activate controls, or select text depending on context. Execute · High hold_key This tool sends keyboard input to the active window, which can trigger arbitrary application actions (e.g., holding Alt+F4 to close apps, keyboard shortcuts that delete data, system-level commands). Execute · High left_click A mouse click is an action that executes whatever UI element is at the target coordinates: it can submit forms, confirm dialogs, delete files via UI, navigate browsers, or trigger any application function.

18 of Computer Use Windows's 22 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Computer Use Windows

PolicyLayer is an MCP gateway — it sits between your AI agents and Computer Use Windows, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "write_clipboard": {
    "limits": [
      {
        "counter": "write_clipboard_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "cursor_position": {
    "limits": [
      {
        "counter": "cursor_position_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Computer Use Windows — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON COMPUTER USE WINDOWS →

Instant setup, no code required.

FULL CATALOGUE

All 22 Computer Use Windows tools

EXECUTE 17 tools

WRITE 1 tools

Write write_clipboard Write text to the clipboard. Requires the

READ 4 tools

Read cursor_position Get the current mouse cursor position. Returns image-pixel coordinates relative to the most recent screenshot, Read list_granted_applications List the applications currently in the session allowlist, plus the active grant flags and coordinate mode. No Read read_clipboard Read the current clipboard contents as text. Requires the Read zoom Take a higher-resolution screenshot of a specific region of the last full-screen screenshot. Use this liberall

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Computer Use Windows

How do I prevent bulk modifications through Computer Use Windows? +

The Computer Use Windows server has 1 write tools including write_clipboard. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Computer Use Windows.

How many tools does the Computer Use Windows MCP server expose? +

22 tools across 3 categories: Execute, Read, Write. 4 are read-only. 18 can modify, create, or delete data.

How do I enforce a policy on Computer Use Windows? +

Register the Computer Use Windows MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Computer Use Windows tool call.

Deterministic rules across all 22 Computer Use Windows tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON COMPUTER USE WINDOWS →

Instant setup, no code required.

22 Computer Use Windows tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Computer Use Windows's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →