High-risk tools in Omarchy-MCP
249 of the 466 tools in Omarchy-MCP are classified as high risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at high risk
-
agent_gridExecuteONE-CALL agent workspace orchestration. For
-
audio_device_set_defaultExecuteSelect an exactly enumerated local output sink or input source, move active streams through Omarchy, verify the default, and roll back on mismatch. Supports dry-run.
-
audio_output_switchExecuteCycle to Omarchy
-
audio_volumeExecuteRaise, lower or toggle mute, verify the exact expected PipeWire transition, and restore prior volume/mute state whenever the mutation is not confirmed.
-
background_thumbnail_cache_buildExecuteBuild current-theme thumbnails locally through Omarchy and verify its signature, rows and output files afterwards.
-
bar_position_setExecuteMove the bar to an exact screen edge and verify shell.json afterwards.
-
bar_visibility_setExecuteExplicitly show or hide the bar, then verify the on-disk visibility flag.
-
bar_widget_moveExecuteMove an existing widget to an exact bar section/index and verify its final location.
-
bluetooth_connectExecuteConnect to or disconnect a known device by MAC address using Omarchy
-
bluetooth_toggleExecuteUse Omarchy
-
brightness_displayExecuteRead or adjust brightness on the focused display and report the measured value afterwards.
-
capture_region_clipboardExecuteLaunch Omarchy
-
hypr_dispatchExecuteRun any Hyprland dispatcher via the Omarchy Lua API. Expression must start with
-
image_to_asciiExecuteConvert an absolute local PNG or SVG with Omarchy
-
input_device_controlExecuteRead or explicitly enable/disable the locally detected touchpad or touchscreen using Omarchy
-
launch_appExecuteDispatch an installed local app through Omarchy with detached closed stdio, then verify a new mapped window or a matching existing window gaining focus. Browser URLs and Discord...
-
layout_gridExecuteForce an explicit C x R cell grid on the active workspace (e.g. 4x4). Omit both to return to aspect-aware auto sizing.
-
layout_modeExecuteSwitch the active workspace between layout modes of the native Lua grid:
-
layout_preselectExecuteChoose which side of the focused tile the NEXT opened window will occupy. Chain with open_window for split layouts, e.g. preselect
-
layout_swap_windowsExecuteExchange the grid/master placement order of two windows by their positions in layout_order (1-based). Verified with fresh geometry afterwards.
-
layout_togglesplitExecuteFlip the split orientation of the active workspace (horizontal <-> vertical).
-
layout_tomasterExecuteIn master mode, move the Nth window (see layout_order) into the full-height left column; the remaining windows stack in the right column.
-
local_tui_launchExecuteLaunch a supported local TUI in Omarchy
-
local_utility_openExecuteOpen About or Files using local installed commands, or focus an exact existing class. An optional Files directory is validated and always opens a new window.
-
media_source_switchExecuteCycle the active local MPRIS media source forward/backward, optionally transferring playback, with before/after shell status evidence. Supports dry-run.
-
media_transcodeExecuteTranscode one absolute local media path directly with ImageMagick or ffmpeg using Omarchy-equivalent format/resolution settings. No clipboard, notifications, shell, network, ove...
-
mic_mute_toggleExecuteToggle microphone mute, confirm mute inversion with unchanged PipeWire source volume, and restore the exact prior source state on any failed mutation or verification.
-
notification_dismissExecuteDismiss visible notifications whose headline contains the supplied substring.
-
notification_sendExecuteSend a local desktop notification and return the daemon-assigned ID. Click commands, remote images, and arbitrary notify-send options are intentionally unsupported.
-
omarchy_agentExecuteLaunch the default coding agent in a terminal [group:agent] Args: [--inline] [--pick]
-
omarchy_agent_crashExecuteDiagnose a crashed process with the default coding agent [group:agent] Args: <pid> [comm] [exe] [signal]
-
omarchy_agent_promptExecuteLaunch the default coding agent with a prompt [group:agent] Args: [--inline] <prompt...>
-
omarchy_audio_input_muteExecuteToggle microphone mute. Drives the hardware mic-mute LED on laptops that expose one. [group:audio]
-
omarchy_audio_input_set_defaultExecuteSet the default audio input and move active streams [group:audio] Args: <node-id> <source-name>
-
omarchy_audio_output_set_defaultExecuteSet the default audio output and move active streams [group:audio] Args: <node-id> <sink-name>
-
omarchy_audio_output_switchExecuteSwitch between audio outputs while preserving the mute status [group:audio]
-
omarchy_audio_output_volumeExecuteAdjust output volume and show the Omarchy OSD [group:audio] Args: <raise|lower|mute-toggle|+N|-N>
-
omarchy_audio_source_switchExecuteCycle to the next media source and transfer playback when the current source is playing [group:audio] Args: [next|previous]
-
omarchy_audio_tuningExecuteManage the speaker tuning for this laptop [group:audio] Args: <on|off|status|match|fronted-sink> [--force]
-
omarchy_bluetooth_deviceExecuteControl a Bluetooth device [group:bluetooth] Args: [pair|connect|disconnect|forget] <address>
-
omarchy_bluetooth_powerExecuteTurn Bluetooth on or off, remembered across reboots [group:bluetooth] Args: <on|off|toggle|is-on>
-
omarchy_brightness_displayExecuteShow or adjust brightness on the focused display. [group:brightness] Args: [--no-osd] [--monitor name] [+N%|N%-|N%|off|on]
-
omarchy_brightness_display_appleExecuteShow or adjust Apple Studio Display and Apple XDR Display brightness using asdcontrol. [group:brightness] Args: [--no-osd] [+N%|N%-|N%]
-
omarchy_brightness_display_ddcExecuteShow or adjust DDC/CI display brightness for a Hyprland monitor. [group:brightness] Args: <monitor> [+N%|N%-|N%]
-
omarchy_brightness_keyboardExecuteAdjust keyboard backlight brightness using available steps. [group:brightness] Args: [--no-osd] <up|down|cycle|off|restore>
-
omarchy_brightness_keyboard_muteExecuteSet the mic-mute indicator LED on laptops that expose a platform::micmute LED node. [group:brightness] Args: <on|off>
-
omarchy_capture_screenrecordingExecuteStart or stop screen recording [group:capture] Args: [--fullscreen] [--with-desktop-audio] [--with-microphone-audio] [--with-webcam] [--webcam-device=<device>] [--webcam-size=<s...
-
omarchy_capture_screenrecording_with_webcamExecutePick a webcam and start a screen recording with it [group:capture]
-
omarchy_capture_webcam_resizeExecuteResize the active webcam recording overlay [group:capture] Args: <smaller|larger|reset|small|medium|large>
-
omarchy_default_agentExecuteSet and launch the default coding agent [group:default] Args: [pi|omp|opencode|claude|codex|grok|gemini|copilot|crush]
-
omarchy_dev_benchmark_cliExecuteMeasure Omarchy CLI response times [group:dev] Args: [--repeat=<count>]
-
omarchy_dev_benchmark_theme_switcherExecuteMeasure theme switcher cache and selector prep times [group:dev] Args: [--repeat=<count>] [--keep-cache]
-
omarchy_dev_install_ydooExecuteInstall and enable ydotool mouse automation for Omarchy development [group:dev] [sudo]
-
omarchy_dev_linkExecutePoint Omarchy at a local checkout after reboot [group:dev] Args: <path-to-checkout> [--no-reboot]
-
omarchy_dev_pkg_testExecuteBuild and install an Omarchy package from a local checkout [group:dev] Args: [package-name] [path-to-checkout]
-
omarchy_dev_theme_previewExecutePreview an Omarchy theme palette in the terminal [group:dev] Args: [theme-name|theme-dir|colors.toml] [--no-color] [--no-osc|--osc]
-
omarchy_dev_ui_previewExecuteOpen the omarchy-shell dev gallery (qs.Ui kit preview) [group:dev] Args: [section]
-
omarchy_disk_speedtestExecuteMeasure live disk read and write speed [group:disk] Args: [target-dir]
-
omarchy_drive_passwordExecuteSet a new encryption password for a drive selected. [group:drive] [sudo]
-
omarchy_execExecuteScan-validated generic executor for the 356 installed
-
omarchy_hibernation_setupExecuteSet up hibernation with swap and boot resume configuration [group:hibernation] Args: [--force] [--no-rebuild] [sudo]
-
omarchy_hookExecuteRun a named hook from ~/.config/omarchy/hooks/<name> and ~/.config/omarchy/hooks/<name>.d/. [group:hook] Args: [name] [args...]
-
omarchy_hw_recover_internal_monitorExecuteClear the internal-monitor-disable toggle if no external display is connected. [group:hw]
-
omarchy_hyprland_focus_appExecuteFocus a Hyprland window by application identity [group:hyprland] Args: <app-name>
-
omarchy_hyprland_monitor_internalExecuteEnable, disable, toggle, or recover the internal laptop display [group:hyprland] Args: <on|off|toggle|recover>
-
omarchy_hyprland_monitor_internal_mirrorExecuteEnable, disable, toggle, or recover mirroring the internal display to an external monitor [group:hyprland] Args: <on|off|toggle|recover>
-
omarchy_hyprland_monitor_scalingExecuteShow, set, or adjust focused Hyprland monitor scaling [group:hyprland] Args: [up|down|SCALE]
-
omarchy_hyprland_monitor_watchExecuteWatch Hyprland monitor events and recover monitor toggles when a monitor is removed [group:hyprland]
-
omarchy_hyprland_toggleExecuteToggle permanent Hyprland flags by copying them into a directory that
-
omarchy_hyprland_window_gaps_toggleExecuteToggles the window gaps globally between no gaps and the default. [group:hyprland]
-
omarchy_hyprland_window_popExecuteToggle to pop-out a tile to stay fixed on a display basis. [group:hyprland] Args: [width height x y]
-
omarchy_hyprland_window_single_square_aspect_toggleExecuteToggle single-window square aspect ratio. [group:hyprland]
-
omarchy_hyprland_window_tiled_fullscreen_toggleExecuteToggle tiled fullscreen for the focused Hyprland window [group:hyprland]
-
omarchy_hyprland_window_transparency_toggleExecuteToggles transparency for the currently focused window. [group:hyprland]
-
omarchy_hyprland_window_widthExecuteSave or restore the focused Hyprland window width [group:hyprland] Args: <save|restore>
-
omarchy_hyprland_workspace_layout_toggleExecuteToggle the layout on the current active workspace between dwindle and scrolling [group:hyprland]
-
omarchy_install_ai_chatgptExecuteInstall the ChatGPT desktop app [group:install] [sudo]
-
omarchy_install_and_launchExecuteInstall a packaged app and launch it once it finishes [group:install] Args: <display-name> <packages> <desktop-id>
-
omarchy_install_appExecuteInstall a packaged app, surfacing the install in a floating terminal [group:install] Args: <display-name> <packages>
-
omarchy_install_browserExecuteInstall a supported browser [group:install] Args: <chrome|brave|brave-origin|edge|firefox|zen>
-
omarchy_install_chromium_copy_urlExecuteInstall the native messaging host for the Copy URL Chromium extension [group:install]
-
omarchy_install_chromium_google_accountExecuteAllow Chromium to sign in to Google accounts by adding the required OAuth credentials [group:install]
-
omarchy_install_chromium_ytdlpExecuteInstall the native messaging host for the yt-dlp Chromium extension [group:install]
-
omarchy_install_dev_envExecuteInstall a supported development environment [group:install] Args: <ruby|node|bun|deno|go|laravel|symfony|php|python|elixir|phoenix|rust|java|zig|ocaml|dotnet|clojure|scala> [sudo]
-
omarchy_install_docker_dbsExecuteInstall one of the supported databases in a Docker container with the suitable development options. [group:install] [sudo]
-
omarchy_install_editor_emacsExecuteInstall Emacs with Omarchy theme and font integration via the omarchy-emacs AUR package [group:install]
-
omarchy_install_editor_helixExecuteInstall Helix and configure it to use the current Omarchy theme [group:install]
-
omarchy_install_editor_vscodeExecuteInstall VS Code and configure Omarchy defaults for secrets, updates, and theme [group:install]
-
omarchy_install_editor_zedExecuteInstall Zed Editor and configure it with the current Omarchy theme [group:install]
-
omarchy_install_fontExecuteInstall a Nerd Font package and switch the system to it [group:install] Args: <display-name> <package> <family>
-
omarchy_install_gaming_battlenetExecuteInstall Battle.net standalone via umu-launcher + GE-Proton (no Steam, no Lutris, no Heroic). [group:install] [sudo]
-
omarchy_install_gaming_geforce_nowExecuteInstall and launch Geforce Now. [group:install]
-
omarchy_install_gaming_gpu_lib32ExecuteInstall lib32 graphics drivers (Vulkan + NVIDIA) for any detected GPUs. [group:install] [sudo]
-
omarchy_install_gaming_heroicExecuteInstall Heroic Games Launcher (Epic, GOG, Amazon Prime Gaming) with graphics drivers. [group:install] [sudo]
-
omarchy_install_gaming_lutrisExecuteInstall Lutris with Wine + DXVK for running Windows games (Battle.net, EA, Ubisoft Connect, etc.) [group:install] [sudo]
-
omarchy_install_gaming_retroarchExecuteInstall RetroArch with the full libretro core set plus FBNeo and a ~/Games ROM directory. [group:install]
-
omarchy_install_gaming_steamExecuteInstall Steam and graphics drivers selected for this system [group:install] [sudo]
-
omarchy_install_gaming_xbox_cloudExecuteInstall Xbox Cloud Gaming as a web app and launch it. [group:install]
-
omarchy_install_gaming_xbox_controllersExecuteInstall support for using Xbox controllers with Steam/RetroArch/etc. [group:install] [sudo]
-
omarchy_install_preinstallsExecuteRestore the preinstalled Omarchy applications (web apps, TUIs, and selected packages). [group:install] [sudo]
-
omarchy_install_service_1passwordExecuteInstall 1Password and its Chromium extension. [group:install] [sudo]
-
omarchy_install_service_dropboxExecuteInstall and start the Dropbox service. Must then be authenticated via the web. [group:install]
-
omarchy_install_service_nordvpnExecuteInstall the NordVPN service with optional GUI. [group:install] [sudo]
-
omarchy_install_service_onceExecuteInstall the ONCE service, enable its background service, and launch the TUI. [group:install] [sudo]
-
omarchy_install_service_signalExecuteInstall Signal and launch it. [group:install] [sudo]
-
omarchy_install_service_spotifyExecuteInstall Spotify. [group:install] [sudo]
-
omarchy_install_service_sunshineExecuteInstall Sunshine and open Moonlight streaming ports for LAN and Tailscale. [group:install] [sudo]
-
omarchy_install_service_tailscaleExecuteInstall the Tailscale mesh VPN service and a web app for the Tailscale Admin Console. [group:install] [sudo]
-
omarchy_install_terminalExecuteInstall one of the approved terminals and set it as the default for Omarchy (Super + Return etc). [group:install] Args: <alacritty|foot|ghostty|kitty> [sudo]
-
omarchy_launch_1passwordExecuteLaunch 1Password or start its installer when missing. [group:launch]
-
omarchy_launch_aboutExecuteLaunch the fastfetch TUI that gives information about the current system. [group:launch]
-
omarchy_launch_battlenetExecuteLaunch the installed Battle.net client via umu-launcher + GE-Proton. [group:launch] Args: [--with-mangohud]
-
omarchy_launch_browserExecuteLaunch the default browser as determined by xdg-settings. [group:launch] Args: [url]
-
omarchy_launch_config_editorExecuteOpen a config file in the user
-
omarchy_launch_discord_communityExecuteOpen the Omarchy Discord community in the Discord app or a browser. [group:launch]
-
omarchy_launch_editorExecuteLaunch the default editor selected via Omarchy defaults. [group:launch] Args: [--inline] <path>
-
omarchy_launch_floating_terminal_with_presentationExecuteLaunch a floating terminal with the Omarchy presentation wrapper [group:launch] Args: <command>
-
omarchy_launch_nautilusExecuteLaunch Files [group:launch]
-
omarchy_launch_nautilus_cwdExecuteLaunch Files in the active terminal
-
omarchy_launch_or_focusExecuteLaunch an app or focus an existing window matching a pattern [group:launch] Args: <window-pattern> <launch-command>
-
omarchy_launch_or_focus_tuiExecuteLaunch a TUI or focus an existing terminal window for it [group:launch] Args: [--app-id=<app-id>] <command> [args...]
-
omarchy_launch_or_focus_webappExecuteLaunch or focus on a given web app identified by the window-pattern. [group:launch] Args: <window-pattern> <url-and-flags...>
-
omarchy_launch_screensaverExecuteLaunch the Omarchy screensaver in the default terminal on the system with the correct font configuration. [group:launch]
-
omarchy_launch_signalExecuteLaunch Signal or start its installer when missing. [group:launch]
-
omarchy_launch_spotifyExecuteLaunch Spotify or start its installer when missing. [group:launch]
-
omarchy_launch_terminalExecuteLaunch a terminal in the active terminal
-
omarchy_launch_terminal_herdrExecuteLaunch or attach to the persistent herdr session in a terminal [group:launch]
-
omarchy_launch_terminal_tmuxExecuteLaunch or attach to the Work tmux session in a terminal [group:launch]
-
omarchy_launch_tuiExecuteLaunch a TUI command in the default terminal with Omarchy styling [group:launch] Args: [--app-id=<app-id>] <command> [args...]
-
omarchy_launch_webappExecuteLaunch a URL as a web app in the default supported browser [group:launch] Args: <url>
-
omarchy_menuExecuteControl the Omarchy menu (toggle / summon / close / refresh) [group:menu] Args: [toggle|summon|close|refresh|ping] [route]
-
omarchy_menu_clipboardExecuteLaunch the clipboard manager [group:menu]
-
omarchy_menu_emojiExecuteLaunch emojis [group:menu]
-
omarchy_menu_fileExecutePick a file from a menu [group:menu] Args: label paths formats [menu args...]
-
omarchy_menu_inputExecutePrompt for text input from a menu [group:menu] Args: prompt [menu args...]
-
omarchy_menu_pluginExecutePick a shell plugin to enable, disable, clone, or remove [group:menu] Args: <enable|disable|clone|remove>
-
omarchy_menu_selectExecutePick one option from a menu [group:menu] Args: prompt [option...] [-- menu args...]
-
omarchy_migrateExecuteRun pending Omarchy migrations. [group:migrate] Args: [--pending]
-
omarchy_mise_installExecuteInstall a small mise-backed wrapper for a given tool. [group:mise] Args: <package> [command-name [bin-name]]
-
omarchy_network_speedtestExecuteMeasure live internet speed for one direction [group:network] Args: [down|up]
-
omarchy_notification_dismissExecuteDismiss a notification by summary substring. Used by the first-run notifications to dismiss them after clicking for action. [group:notification] Args: <summary>
-
omarchy_notification_sendExecuteSend an Omarchy desktop notification [group:notification] Args: [--app-name <app-name>] [-g <glyph>] [-u <low|normal|critical>] [-i <icon>] [-t <ms>] [-r <id>] [-p] [--image <pa...
-
omarchy_notification_weatherExecuteToggle the current weather panel [group:notification]
-
omarchy_osdExecuteShow the Omarchy Quickshell on-screen display [group:osd] Args: [-i|--icon <icon>] [-m|--message <text>] [-p|--progress <0-100>] [-d|--duration <ms>]
-
omarchy_pkg_addExecuteInstall Arch packages if they are missing [group:pkg] Args: <packages...> [sudo]
-
omarchy_pkg_aur_addExecuteAdd the named packages to the system from the AUR if they
-
omarchy_pkg_aur_installExecuteShow a fuzzy-finder TUI for picking new AUR packages to install. [group:pkg] [sudo]
-
omarchy_pkg_installExecuteShow a fuzzy-finder TUI for picking new Arch and OPR packages to install. [group:pkg] [sudo]
-
omarchy_plugin_addExecuteAdd a shell plugin from git [group:plugin] Args: [git-url] [--enable] [--yes]
-
omarchy_plugin_disableExecuteDisable a shell plugin [group:plugin] Args: <id>
-
omarchy_plugin_enableExecuteEnable a shell plugin [group:plugin] Args: <id> [placement]
-
omarchy_plugin_updateExecuteUpdate installed git-managed plugins [group:plugin] Args: [id] [--yes]
-
omarchy_plymouth_previewExecutePreview a Plymouth boot screen with custom colors and logo [group:plymouth] Args: <background-hex> <text-hex> <path-to-logo.png> <output-path>
-
omarchy_plymouth_resetExecuteRestore the default Omarchy Plymouth boot theme and SDDM login screen [group:plymouth] [sudo]
-
omarchy_plymouth_set_by_themeExecuteSet the Plymouth boot theme from an Omarchy theme [group:plymouth] Args: <theme-name> [sudo]
-
omarchy_plymouth_switcherExecuteOpen the Plymouth unlock screen switcher [group:plymouth]
-
omarchy_powerprofiles_initExecuteSet the correct power profile on boot based on current AC/battery state. [group:powerprofiles]
-
omarchy_powerprofiles_setExecuteSet and remember the power profile for AC or battery use [group:powerprofiles] Args: [autodetect|ac|battery] [power-saver|balanced|performance]
-
omarchy_refresh_applicationsExecuteEnsure default application launchers and mise wrappers are installed. [group:refresh]
-
omarchy_refresh_hyprsunsetExecuteOverwrite the user config for hyprsunset with the Omarchy default and restart the service. [group:refresh]
-
omarchy_refresh_pacmanExecuteOverwrite the package configuration for /etc/pacman with the Omarchy default of using its dedicated mirrors and repositories, then update all packages. [group:refresh] [sudo]
-
omarchy_refresh_sddmExecuteRefresh the SDDM theme from default [group:refresh] [sudo]
-
omarchy_reinstall_pkgsExecuteReinstall all default Omarchy packages from the stable channel [group:reinstall] [sudo]
-
omarchy_restart_appExecuteRestart an application by killing it and relaunching via uwsm. [group:restart] Args: <application-name> [application-args...]
-
omarchy_restart_audioExecuteRestart audio services and recover stuck USB audio devices. [group:restart]
-
omarchy_restart_bluetoothExecuteUnblock and restart the bluetooth service. [group:restart]
-
omarchy_restart_btopExecuteReload btop configuration (used by the Omarchy theme switching). [group:restart]
-
omarchy_restart_helixExecuteReload Helix configuration [group:restart]
-
omarchy_restart_herdrExecuteReload herdr if running with the latest configuration [group:restart]
-
omarchy_restart_hyprctlExecuteReload hyprland configuration (used by the Omarchy theme switching). [group:restart]
-
omarchy_restart_hyprsunsetExecuteRestart the hyprsunset service (used for blue light filtering/night light). [group:restart]
-
omarchy_restart_opencodeExecuteReload opencode configuration (used by the Omarchy theme switching). [group:restart]
-
omarchy_restart_shellExecuteRestart the Omarchy shell [group:restart]
-
omarchy_restart_terminalExecuteReload supported terminal emulators after config changes [group:restart]
-
omarchy_restart_tmuxExecuteRestart tmux if running with the latest configuration [group:restart]
-
omarchy_restart_trackpadExecuteReset the trackpad by unbinding and rebinding its driver. [group:restart] [sudo]
-
omarchy_restart_wifiExecuteUnblock and restart the Wi-Fi service. [group:restart]
-
omarchy_restart_xcomposeExecuteRestart the XCompose input method service (fcitx5) to apply new compose key settings. [group:restart]
-
omarchy_screensaverExecuteRun the Omarchy screensaver using random effects from TTE. [group:screensaver]
-
omarchy_setup_direct_bootExecuteAdd or remove an EFI boot entry for the Omarchy UKI, allowing the system to boot directly [group:setup] [sudo]
-
omarchy_setup_security_fido2ExecuteSet up FIDO2 authentication for sudo and polkit [group:setup] [sudo]
-
omarchy_setup_security_fingerprintExecuteSet up fingerprint authentication for sudo, polkit, and lock screen [group:setup] [sudo]
-
omarchy_setup_security_sshdExecuteSet up the OpenSSH server, open the firewall, and authorize an SSH key [group:setup] Args: [--key=<public-key>] [sudo]
-
omarchy_setup_security_sudoless_dockerExecuteEnable sudoless Docker by adding your user to the docker group (root-equivalent!) [group:setup] [sudo]
-
omarchy_shareExecuteShare clipboard, files, or folders with LocalSend [group:share] Args: <clipboard|file|folder> [path...]
-
omarchy_shellExecuteSend an IPC call to the running Omarchy shell [group:shell] Args: [-q] <target> <method> [args...]
-
omarchy_show_logoExecuteDisplay the Omarchy logo in the terminal using green color. [group:show]
-
omarchy_sudo_keepaliveExecutePrompt for sudo once and keep the credential alive in the background. [group:sudo] [sudo]
-
omarchy_sudo_passwordlessExecuteToggle passwordless sudo for the current user. [group:sudo] Args: [MINUTES] [sudo]
-
omarchy_system_lockExecuteLock the computer and turn off the display [group:system]
-
omarchy_system_logoutExecuteLog out after closing application windows [group:system]
-
omarchy_system_wakeExecuteWake displays and restore brightness after idle [group:system]
-
omarchy_theme_bg_cacheExecuteCache background switcher thumbnails for the current theme [group:theme]
-
omarchy_theme_bg_switcherExecuteOpen the Omarchy background switcher [group:theme]
-
omarchy_theme_installExecuteInstall a theme from a git repository [group:theme] Args: [git-repo-url]
-
omarchy_theme_refreshExecuteRefresh the current theme from its templates. [group:theme]
-
omarchy_theme_setExecuteApply an Omarchy theme [group:theme] Args: <theme-name>
-
omarchy_theme_switcherExecuteOpen the Omarchy theme switcher [group:theme]
-
omarchy_toggleExecuteToggle Omarchy features between enabled and disabled [group:toggle] Args: <flag-name> [toggle|on|off]
-
omarchy_toggle_barExecuteToggle bar visibility without killing the Omarchy shell [group:toggle] Args: [toggle|on|off]
-
omarchy_toggle_hybrid_gpuExecuteToggle dedicated vs integrated GPU mode via supergfxd (for hybrid gpu laptops, like Asus G14). [group:toggle] [sudo]
-
omarchy_toggle_idleExecuteToggle idle behavior so the system either idles normally or stays awake [group:toggle] Args: [toggle|stay-awake|allow-idle|status]
-
omarchy_toggle_nightlightExecuteToggle nightlight screen temperature [group:toggle] Args: [--status]
-
omarchy_toggle_notification_silencingExecuteToggle notification do-not-disturb mode [group:toggle]
-
omarchy_toggle_screensaverExecuteToggle screensaver availability [group:toggle]
-
omarchy_toggle_suspendExecuteToggle suspend availability in the system menu [group:toggle]
-
omarchy_toggle_touchpadExecuteEnable, disable, or toggle the touchpad [group:toggle] Args: [on|off|toggle]
-
omarchy_toggle_touchscreenExecuteEnable, disable, or toggle the touch functionality of the screen [group:toggle] Args: [on|off|toggle]
-
omarchy_transcodeExecuteTranscode pictures and videos for sharing [group:transcode] Args: [--path path] [input] [format] [resolution]
-
omarchy_updateExecuteUpdate Omarchy and system packages [group:update] Args: [-y] [sudo]
-
omarchy_update_aur_pkgsExecuteUpdate AUR packages if any are installed [group:update]
-
omarchy_update_confirmExecutePrompt for confirmation before starting an update [group:update]
-
omarchy_update_firmwareExecuteUpdate system firmware using fwupd. Ensures the fwupd EFI binary is installed [group:update] [sudo]
-
omarchy_update_keyringExecuteEnsure the Omarchy and Arch keyring packages are installed and populated [group:update] [sudo]
-
omarchy_update_miseExecuteUpdate mise-managed tools [group:update]
-
omarchy_update_restartExecutePrompt for required reboot or service restarts after updates [group:update]
-
omarchy_update_system_pkgsExecuteUpdate system packages with pacman [group:update] [sudo]
-
omarchy_update_timeExecuteRestart system time synchronization [group:update] [sudo]
-
omarchy_upgrade_to_quattroExecuteUpgrade a legacy Omarchy install to the package-backed Omarchy quattro layout. [group:upgrade] Args: [--yes] [--reboot] [--dev] [--channel stable|rc|edge] [--user USER] [sudo]
-
omarchy_voxtype_installExecuteInstall and configure Voxtype dictation [group:voxtype] [sudo]
-
omarchy_webapp_handler_heyExecuteOpen HEY webmail and translate mailto links [group:webapp] Args: [url]
-
omarchy_webapp_handler_zoomExecuteOpen Zoom web meetings from browser protocol links [group:webapp] Args: [url]
-
omarchy_windows_vmExecuteInstall, launch, stop, inspect, or remove the Windows VM [group:windows] Args: <install|remove|launch|stop|status> [options] [sudo]
-
open_window_splitExecutePreselect a split direction and launch a command, then VERIFY on-screen that the new window actually tiled into that split. Returns the landed window
-
osd_showExecuteDisplay a local Omarchy on-screen message or 0-100 progress value and verify that the OSD opened.
-
pkg_addExecuteInstall packages through Omarchy, then verify that all are present. Requires enableDangerous.
-
pkg_add_aurExecuteInstall AUR packages through Omarchy, then verify that all are present. Requires enableDangerous.
-
plugin_local_enableExecuteEnable an already-discovered plugin. Bar widgets require an exact section/index; bar replacements are refused. Defaults to dry-run.
-
powerprofiles_setExecuteSet and remember a profile for the detected, AC, or battery power source; verify active and persistent state, with exact failure rollback. Defaults to dry-run.
-
screenrecording_startExecuteStart a non-interactive full-screen recording with closed inherited stdio, then confirm one recorder PID, its Omarchy marker/output relationship, and a nonempty regular MP4. Nev...
-
screenrecording_stopExecuteStop only the exact recorder PID/start-time identity whose Omarchy marker and output path match. Signals never use global pkill; unrelated recorders are not touched. Requires a ...
-
self_window_snapExecuteFloat + pin + resize + position OUR OWN host window (found via PID lock) to a corner of a monitor, then verify the result. corner: tl=tr/bl=br or center. No focus stealing; targ...
-
system_powerExecuteLock is always available. Reboot and shutdown require enableDangerous because they terminate the desktop session.
-
theme_bg_nextExecuteSwitch to the next background, verify it, and automatically restore the prior theme and content-identical wallpaper after any mutation failure.
-
toggle_featureExecuteToggle or explicitly enable/disable nightlight, screensaver availability, or suspend availability. Handles Omarchy 4
-
update_systemExecuteRun the full Omarchy update workflow. It can take many minutes and requires enableDangerous.
-
webcam_overlay_resizeExecuteResize the active screen-recording webcam overlay and report its geometry before and after.
-
wifi_connectExecuteActivate a saved NetworkManager Wi-Fi connection by its connection name and verify it becomes active. Does not accept or create passwords.
-
wifi_toggleExecuteTurn Wi-Fi on or off and verify the radio state afterwards. Turning it off may disconnect the MCP client.
-
window_float_toggleExecuteToggle a window between floating and tiling. Defaults to the focused window; pass address/match for an explicit target.
-
window_focusExecuteMove focus to the neighboring window in a direction.
-
window_fullscreenExecuteToggle fullscreen (real) or maximized (fake). Defaults to the focused window; pass address/match for an explicit target.
-
window_keysExecuteOne-shot keyboard shortcuts to ANY window: resolve + verify-focus target, then inject keys via wtype. Each step is a keysym with optional modifiers joined by
-
window_resizeExecuteResize by pixel deltas, e.g. x=100 grows right side, x=-100 shrinks. relative=true is implied. Optionally pass address/match to resize an explicit window instead of the focused ...
-
window_snapExecuteFloat + pin + resize + position ANY window to a corner of the focused monitor, then verify on-screen. Target by exact address or by class/title substring match (e.g. match=
-
window_swapExecuteSwap a tiled window with its neighbor using a locked address target, then verify geometry changed.
-
window_to_workspaceExecuteMove a window to another workspace, optionally following focus. Defaults to the focused window; pass address/match for an explicit target.
-
window_typeExecuteOne-shot text input to ANY window: resolve target (match/address), focus it with measured verification, then type via wtype. Defaults to the currently focused window if no targe...
-
workspace_layoutExecuteSwitch a workspace between the MCP grid, Hyprland dwindle, master, or scrolling tiling engine and verify tiledLayout. Use dwindle before layout_preselect/open_window_split; use ...
Attacks that target this class
High-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.