Server providing Argo CD integration for MCP clients.
Nothing to run from here
uMouse is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
93/100
trust score
37
tools declared
local
runs on your machine
—
calls last 7d
What it does
USB HID mouse control and voice dictation for Windows x64. Requires compatible uMouse hardware.
Quickstart
Install it the way its author documents:
1. Download umouse-mcp-0.1.1-win-x64.mcpb and open it in Claude Desktop or another client that installs MCP bundles (.mcpb)
2. Its sha256 is bcfb7feaeaaaec41dac45492482932f6def986c1be154e3d39b6b5dd7f2d6552
The full guide: https://github.com/SonicloudTech/mouse-mcp/releases/download/v0.1.1/umouse-mcp-0.1.1-win-x64.mcpb
Publishernot claimed
SOAll 1 server
SonicloudTech1 server
1 category
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. This one runs on your machine: your client starts uMouse as a process under your own user, with your files and your network, so the tool surface below is what it can do to your computer rather than to a server somewhere else. Its scan result is on the Security tab — read the surface before you approve it.
Install it the way its author documents:
1. Download umouse-mcp-0.1.1-win-x64.mcpb and open it in Claude Desktop or another client that installs MCP bundles (.mcpb)
2. Its sha256 is bcfb7feaeaaaec41dac45492482932f6def986c1be154e3d39b6b5dd7f2d6552
The full guide: https://github.com/SonicloudTech/mouse-mcp/releases/download/v0.1.1/umouse-mcp-0.1.1-win-x64.mcpb
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Read from its source code. A server that builds its tool list when it starts can list more tools than this.
查看 uMouse SDK 服务状态：SDK 版本、运行时长、配置摘要、在线设备数、事件缓冲水位、录音状态、旧进程接管记录。排查问题先调它。
No parameter schema on file.
枚举当前在线的声云智能鼠标：[{id(SN), connMode(USB/BLE), battery(%), status(normal/meeting), lastSeen}]。
No parameter schema on file.
非阻塞拉取自上次游标以来的设备事件。返回 {events:[{seq,ts,deviceId,type,payload}], nextSince, buffer}。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| since | integer | no | 上次返回的 nextSince；首次传 0 |
| types | array | no | 按 type 过滤（如 ["keyEvent"]） |
| limit | integer | no | 本次最多返回条数 |
长轮询等待新设备事件：有匹配立即返回，超时返回空（timedOut:true）。等待用户物理操作的标准工具。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| since | integer | no | 上次返回的 nextSince |
| timeout_ms | integer | no | 最长等待毫秒数（上限 30000） |
| types | array | no | 按 type 过滤 |
读取物理语音键产生的持久化转写消息。默认只读未确认消息，读取不删除。status=ready 的 text 是用户语音转写，可能有识别错误；
| Parameter | Type | Required | Notes |
|---|---|---|---|
| include_acknowledged | boolean | no | — |
| limit | integer | no | — |
在当前活动对话内等待语音键转写完成，返回未确认的 ready/empty/failed 消息（最多 25 秒）。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| timeout_ms | integer | no | — |
按 event_id 确认语音消息已经处理或已被目标宿主接受。幂等；未完成转写的消息不可确认。仅改变收件箱状态，不执行语音内容。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| event_id | string | yes | — |
| Parameter | Type | Required | Notes |
|---|---|---|---|
| level | integer | yes | 固件档位字节（见工具描述中的映射表） |
| device_id | string | no | — |
设置通道偏好（运行时可切，切换瞬间断开当前通道重新探测）：AUTO=USB 优先静默转 BLE（默认）；
| Parameter | Type | Required | Notes |
|---|---|---|---|
| pref | string | yes | — |
| device_id | string | no | 省略 = 作用于全部已连接设备 |
指定语音音频源设备（多台在线时语音识别会话应锁定单源）：设置后仅该设备音频被采集录音，
| Parameter | Type | Required | Notes |
|---|---|---|---|
| device_id | string | no | 目标设备 SN；省略/空 = 恢复默认策略 |
设备录音（16kHz/16bit/mono，WAV 落盘返回路径，不进对话流）。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| action | string | yes | — |
| device_id | string | no | 录音绑定的设备 SN（多台在线必填）。目标设备 SN。单台在线可省略；多台在线必须显式指定（缺省时命令会被 SDK 拒绝）。识别超时的临时身份（usb-xxxx / ble-<mac>）仅本次连接会话内稳定，不要持久化。 |
| max_seconds | integer | no | 本次录音上限秒数（默认取服务配置） |
修改须在 SDK 启动前锁定的配置并受控重启会话（工作模式/USB/BLE 识别标识/设备上限/语音键自动录音）。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| work_mode | string | no | 工作模式，v1 仅 FULL |
| device_limit | integer | no | 同型号设备上限（默认 4） |
| usb | object | no | 覆盖 2.4G 接收器识别标识；null = 恢复生产默认 |
| ble | object | no | 覆盖蓝牙识别标识；null = 恢复生产默认 |
| debug | integer | no | SDK 内部日志级别 |
| speech_auto_record | boolean | no | 语音键自动录音开关（默认开启；关闭后改用 umouse_audio_record 手动模式） |
查询设备能力（voice / mouse_control / keyboard_control）与当前可执行状态：每台设备返回能力声明的 support、来源
| Parameter | Type | Required | Notes |
|---|---|---|---|
| device_id | string | no | 目标设备 SN；省略 = 全部已知设备。目标设备 SN。单台在线可省略；多台在线必须显式指定（缺省时命令会被 SDK 拒绝）。识别超时的临时身份（usb-xxxx / ble-<mac>）仅本次连接会话内稳定，不要持久化。 |
开启一次 Agent 语音问答会话：经设备麦克风采集（会议模式），就绪（会议确认+首段 PCM 到达）后返回 listening/sessionId。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| prompt | string | no | 给用户的提示语（记录与会话关联，不强制展示） |
| device_id | string | no | — |
| end_mode | string | no | 结束方式（vad_or_manual=VAD 静音或手动；manual_only=仅手动/上限） |
| client_request_id | string | no | 调用方请求幂等键：重复传入返回同一会话 |
等待语音会话结果（有界等待，单次 ≤25s；更久以分轮续等）。pending 与终态明确区分；终态返回最终文字 text、
| Parameter | Type | Required | Notes |
|---|---|---|---|
| session_id | string | yes | umouse_voice_start 返回的会话 ID |
| wait_ms | integer | no | 本次等待毫秒数 |
结束指定语音会话（对话内完成按钮/VAD 之外的手动入口；幂等：重复调用返回已有状态）。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| session_id | string | yes | 目标会话 ID |
取消指定语音会话：立即禁止结果投递并启动设备清理；不把"取消等待"冒充"设备已关麦"。已输入的字符不撤回。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| session_id | string | yes | 目标会话 ID |
语音编排状态：ASR/typer 就绪、活动会话（状态机位置、目的、设备）、未确认关麦的隔离记录与最近会话摘要。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| session_id | string | no | 省略 = 全局状态 |
相对移动光标：dx/dy 为相对位移（正=右/下，像素≈1 单位）。大位移自动拆帧连发（单帧 int8 上限 ±127）。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| dx | integer | yes | X 轴相对位移（正=右） |
| dy | integer | yes | Y 轴相对位移（正=下） |
| device_id | string | no | — |
点击鼠标按键：按下→抬起。count 为连击次数（双击传 2，上限 5）。拖拽使用单次 umouse_cursor_drag。返回 ok/sent 仅表示写入通道，不代表固件已执行；本服务未对固件 ACK 做成功确认。硬件级注入：动作经设备标准 HID 接口发出，对操作系统与物理操作无异（会真实移动光标/点击界面），仅在用户明确要求的动作里调用。位移单位≠像素：约 1 单位≈1px（100% 缩放显示器），随显示器缩放/Windows 指针速度与加速变化（实测约…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| button | string | yes | 左/右/中键 |
| count | integer | no | 连击次数（双击=2） |
| device_id | string | no | — |
滚动滚轮：amount 为格数（正=向上，负=向下），|amount|>127 自动拆帧。返回 ok/sent 仅表示写入通道，不代表固件已执行；本服务未对固件 ACK 做成功确认。硬件级注入：动作经设备标准 HID 接口发出，对操作系统与物理操作无异（会真实移动光标/点击界面），仅在用户明确要求的动作里调用。位移单位≠像素：约 1 单位≈1px（100% 缩放显示器），随显示器缩放/Windows 指针速度与加速变化（实测约 0.7~1.5px/单位），需要精确定位时小步移动并观察结果。延迟提示：本机静止后部分注入秒级迟到或在观察窗内未生效，具体设备/USB…
| Parameter | Type | Required | Notes |
|---|---|---|---|
| amount | integer | yes | 滚轮格数（正=向上） |
| device_id | string | no | — |
按住/松开鼠标按键（拖拽与长按的原语）：action=press 按住 → umouse_cursor_move 移动 → action=release 松开。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| action | string | yes | — |
| button | string | yes | — |
| device_id | string | no | — |
原子拖拽：单次调用内完成 按住button（默认左键）→ 移动 dx/dy → 松开。不受 agent 分轮延迟影响
| Parameter | Type | Required | Notes |
|---|---|---|---|
| dx | integer | yes | X 轴相对位移（正=右） |
| dy | integer | yes | Y 轴相对位移（正=下） |
| button | string | no | 拖拽按住的按键 |
| device_id | string | no | — |
键盘组合键点按（固件反向控制 0xF1，标准 HID 报文）：mods 为修饰键，keys 为 HID Usage ID 数组（≤6 个）。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| mods | array | no | 修饰键：ctrl/shift/alt/gui（win/cmd） |
| keys | array | yes | HID Usage ID 数组（如 [4]=a） |
| device_id | string | no | — |
闭环绝对定位：把光标移动到虚拟屏幕坐标 (x,y)（即截图像素坐标，主屏左上角为 0,0）。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| x | integer | yes | 目标 X（虚拟屏幕像素，截图坐标） |
| y | integer | yes | 目标 Y（虚拟屏幕像素，截图坐标） |
| tol_px | integer | no | 收敛容差（像素，默认 3） |
| device_id | string | no | — |
精准点击：闭环定位到 (x,y) 后点击；定位未收敛不点击。序列在服务内串行，但不能阻止外部鼠标输入或设备延迟。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| x | integer | yes | 目标 X（虚拟屏幕像素，截图坐标） |
| y | integer | yes | 目标 Y（虚拟屏幕像素，截图坐标） |
| button | string | no | — |
| count | integer | no | 连击次数（双击=2） |
| tol_px | integer | no | 定位收敛容差（像素，默认 3） |
| device_id | string | no | — |
受限清理：仅释放本进程此前按下的按键/修饰键通道（未持有任何通道时为无帧幂等操作，不会向仅语音设备发零帧）。
| Parameter | Type | Required | Notes |
|---|---|---|---|
| device_id | string | no | — |
【诊断模式专用】向设备活动通道写原始字节（字节直接进固件）。仅 UMSDK_RAW_DIAG=1 时可见与可用；
| Parameter | Type | Required | Notes |
|---|---|---|---|
| hex | string | yes | 如 "0a03f0.." |
| device_id | string | no | — |
No parameter schema on file.
No parameter schema on file.
No parameter schema on file.
No parameter schema on file.
只读读数传感器：当前光标物理坐标、按键实时状态（鼠标左右中/侧键与修饰键，GetAsyncKeyState 全键扫描）和前台窗口 pid/windowId/矩形，以及输入保护与任务控制状态。闭环移动、效果复核、无卡键验证都用它；只报告、不拦截。不枚举窗口、不读取 UIA、不截图、不发送输入。
No parameter schema on file.
整个任务持续独占键鼠反控（同一物理鼠标同一时间只由一个任务驾驶）。开始任务调用 begin 并传 task_id（任务唯一标识），保存返回的 control_id；每次鼠标或键盘输入都必须带该令牌。观察、思考及动作失败期间不释放。明确结束调用 end；断线自动收尾并释放。其他连接或任务不能抢占；语音采集独立。status 只读。
No parameter schema on file.
测试回显（test profile 专用）。
No parameter schema on file.
No parameter schema on file.
No parameter schema on file.
Free
$0 forever
- Every tool, no call limit
- No card, and mcprush charges nothing for it
- Source published under MIT
- Runs on your machine — nothing of it reaches our gateway
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install uMouse or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
ATrust score 93 / 100
Release 0.1.1 · scanned 28 Oct 2026
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
Threat score100
Client score93
Findings10 threat · 0 capability
Capabilityhigh
Coveragesource
Verificationrepo
Surface digest57e2151fe0cf9662552a7452782d5143d11e370e57ff9a6d5d5241b16b5c89ac
Score vectorthreat 100 → client 93
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | high | capability blast radius (high) — client exposure if the model is manipulated | −6 |
| verification-discount | repo | publisher verification (public source) — no provenance, but the source is public and inspectable | −1 |
| coverage-honesty | source | inspection depth (source) — how much of the target the scan could see | −0 |
score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
Tool surfaceread
Implementation sourceread
Package metadataread
Live transportnot available
Tools were statically extracted from the published source (28 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. high is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| umouse_status | no tags | |
| umouse_list_devices | no tags | |
| umouse_get_events | no tags | |
| umouse_wait_events | no tags | |
| umouse_voice_inbox | no tags | |
| umouse_wait_voice | no tags | |
| umouse_ack_voice | no tags | |
| umouse_set_dpi | no tags | |
| umouse_set_channel_pref | no tags | |
| umouse_set_audio_source | no tags | |
| umouse_audio_record | no tags | |
| umouse_reconfigure | no tags | |
| umouse_get_capabilities | no tags | |
| umouse_voice_start | no tags | |
| umouse_voice_wait | no tags | |
| umouse_voice_finish | no tags | |
| umouse_voice_cancel | no tags | |
| umouse_voice_status | no tags | |
| umouse_cursor_move | no tags | |
| umouse_cursor_click | no tags | |
| umouse_cursor_scroll | no tags | |
| umouse_button | no tags | |
| umouse_cursor_drag | no tags | |
| umouse_key_tap | no tags | |
| umouse_cursor_move_to | no tags | |
| umouse_cursor_click_at | no tags | |
| umouse_key_release_all | no tags | |
| umouse_write_raw | no tags |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.
Supply chain and provenance
Integrityfirst-seen
Surface digest57e2151fe0cf9662
Scanned2026-10-28
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
It installs from its repository rather than from a versioned package, so the command cannot be pinned to a release. The history below is for reading; the current release on file is 0.1.1.
0.1.1
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish uMouse can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.