系统中床台器

Trusted cert (no browser warnings) — requires mkcert installed

mkcert -install && mkcert 192.168.1.100

**Step 2 — Start with TLS:**

**OpenClaw config with HTTPS:**

---

🔒 Dependency security updates

• Added minimum constraints for idna>=3.15 and starlette>=1.0.1 to avoid known vulnerable versions.

With Optional Dependencies

```bash

Install development dependencies

pip install winremote-mcp[test] ```

2. Install with OCR dependencies

pip install winremote-mcp[ocr] ```

Install from PyPI

pip install winremote-mcp

Hermes Setup

Run winremote-mcp on the Windows machine, then add it to Hermes as an MCP server:

pip install winremote-mcp
winremote-mcp --host 0.0.0.0 --port 8090 --auth-key "your-secret-key"

mcp_servers:
  winremote:
    type: streamable-http
    url: http://<windows-ip>:8090/mcp
    headers:
      Authorization: Bearer your-secret-key

See the full Hermes integration guide for local stdio setup, verification prompts, and available capabilities.

Manual Setup (Step by Step)

Step 1 — Install on Windows

pip install winremote-mcp

Step 2 — Start the server

Local-only quick start (default, safest):

winremote-mcp

Remote access requires authentication:

Starting with v0.4.20, winremote-mcp refuses to bind HTTP transport to a non-loopback address without authentication. Use an API key for LAN or remote access:

winremote-mcp --host 0.0.0.0 --port 8090 --auth-key YOUR_SECRET_KEY

For lab-only legacy behavior, you can explicitly acknowledge the risk with --allow-insecure-remote; do not use this on shared, routed, or internet-exposed networks.

Auto-start on boot:

winremote-mcp install

Step 3 — Connect OpenClaw

Add to your openclaw.json:

{
  "plugins": {
    "entries": {
      "winremote": {
        "type": "mcp",
        "url": "http://192.168.1.100:8090/mcp",
        "headers": {
          "Authorization": "Bearer YOUR_SECRET_KEY"
        }
      }
    }
  }
}

Or tell your OpenClaw agent: > "Add winremote MCP at http://192.168.1.100:8090/mcp with auth key YOUR_SECRET_KEY."

Step 4 — What your agent can do

Once connected, your AI agent has full Windows control:

---

Optional break-glass flag for legacy trusted-LAN deployments only.

Installation

Install with OCR support (includes pytesseract)

pip install winremote-mcp[ocr]

OCR Setup (Optional)

For text extraction from screenshots: ```bash

1. Install Tesseract OCR engine

winget install UB-Mannheim.TesseractOCR

Development Setup

git clone https://github.com/dddabtc/winremote-mcp.git
cd winremote-mcp
pip install -e ".[test]"
pytest  # Run tests

Quickstart (30 seconds)

```bash

Usage

Basic Usage

Q: Screenshot tool returns empty/black images?

A: Windows may be locked or display turned off. Ensure: - Windows is unlocked and display is active - No screen saver is running - For multi-monitor setups, specify monitor parameter

`winremote.toml` — Full Config Reference

Place in your working directory or ~/.config/winremote/winremote.toml:

```toml [server] host = "0.0.0.0" port = 8090 auth_key = "your-secret-key"

Config file (`winremote.toml`)

Search order: 1. --config /path/to/winremote.toml 2. ./winremote.toml 3. ~/.config/winremote/winremote.toml

[server]
host = "127.0.0.1"
port = 8090
auth_key = ""
ssl_certfile = ""       # Path to SSL certificate for HTTPS
ssl_keyfile = ""        # Path to SSL private key for HTTPS

[security]
ip_allowlist = ["127.0.0.1", "192.168.1.0/24"]
enable_tier3 = false
disable_tier2 = false
oauth_client_id = ""    # Expected OAuth client ID (optional)
oauth_client_secret = "" # OAuth client secret for confidential clients

[tools]
enable = ["Snapshot", "Click", "Type"]
exclude = []

Precedence: CLI flags override config file values; config file values override defaults.

Or via config [security].ip_allowlist

```

Supports both single IPs and CIDR ranges (IPv4/IPv6). Non-allowlisted clients receive HTTP 403 with a clear error.

MCP Client Configuration

For Claude Desktop (claude_desktop_config.json):

{
  "mcpServers": {
    "winremote": {
      "command": "winremote-mcp",
      "args": ["--transport", "stdio"]
    }
  }
}

For HTTP MCP clients:

{
  "mcpServers": {
    "winremote": {
      "type": "streamable-http", 
      "url": "http://192.168.1.100:8090/mcp",
      "headers": {
        "Authorization": "Bearer your-secret-key"
      }
    }
  }
}

🤖 Agent Integrations

winremote-mcp works with MCP-compatible AI agents and clients. Client-specific setup guides live in this repo:

• Hermes — add winremote as a native streamable HTTP or stdio MCP server.
• OpenClaw — use winremote as OpenClaw's Windows control layer.
• Claude Desktop / Claude Code — configure local stdio or remote streamable HTTP.
• Cursor — add winremote to .cursor/mcp.json.

🤖 OpenClaw Integration

winremote-mcp is the official Windows control layer for OpenClaw. Together they give your AI agent full remote control over any Windows machine — screenshots, PowerShell, file transfer, GUI automation, and more.

---

Troubleshooting / FAQ