Is io.github.sgInnora/noracu safe to use?

io.github.sgInnora/noracu has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install io.github.sgInnora/noracu?

io.github.sgInnora/noracu supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.sgInnora/noracu do?

io.github.sgInnora/noracu provides 2 tools: element_index, wait_for. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.sgInnora/noracu?

io.github.sgInnora/noracu is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.sgInnora/noracu actively maintained?

io.github.sgInnora/noracu is actively maintained - last commit was 6 days ago. It has 4 GitHub stars.

io.github.sgInnora/noracu

noracu

Local MCP server: macOS apps and a browser by element index, plus iPhone Mirroring (experimental).

4 2.1k/wk 2 tools GitHub npm PyPI

No known CVEs

MIT license

Actively maintained

Last commit 6d ago

Works with most clients

Transport: stdio, sse, http

2 tools · ~96 tok

Grade A · 0.0% of 200K ctx

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.github.sgInnora/noracu is an MCP server that local MCP server: macOS apps and a browser by element index, plus iPhone Mirroring (experimental). Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 91/100 on MCPpedia's security, maintenance and efficiency rubric.

Other

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "noracu": {
      "args": [
        "/ABSOLUTE/PATH/TO/noracu/src/server.mjs"
      ],
      "command": "/opt/homebrew/bin/node"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-sginnora-noracu)](https://mcppedia.org/s/io-github-sginnora-noracu)

Read me

What io.github.sgInnora/noracu does

Local MCP server: macOS apps and a browser by element index, plus iPhone Mirroring (experimental).

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y 'noracu' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

91/100across 5 weighted dimensions

How we score →

0255075100

−9

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked noracu against OSV.dev.

Inventory

Tools (2)

Click any tool to inspect its schema.

~96 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.sgInnora/noracu safe to use?: io.github.sgInnora/noracu has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.sgInnora/noracu?: io.github.sgInnora/noracu supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.sgInnora/noracu do?: io.github.sgInnora/noracu provides 2 tools: element_index, wait_for. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.sgInnora/noracu?: io.github.sgInnora/noracu is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.sgInnora/noracu actively maintained?: io.github.sgInnora/noracu is actively maintained - last commit was 6 days ago. It has 4 GitHub stars.

Similar servers

Others in other

View all →

io.github.vshulcz/deja-vu95

deja-vu: local memory over the session histories of forty-three coding agents.

1.5k 6

MCP Wordpress Remote95

MCP WordPress Remote proxy server

188 10

Argo95

专门为 agent 打造的 agent 搜索工具，具备多语言搜索能力，覆盖中文/英文/学术/代码/购物/金融/新闻/百科。

260 1

Football Docs94

Searchable football data provider documentation for AI coding agents. Like Context7 for football data.

228 8

MCP Security Weekly

Get CVE alerts and security updates for io.github.sgInnora/noracu and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "noracu": {
      "args": [
        "/ABSOLUTE/PATH/TO/noracu/src/server.mjs"
      ],
      "command": "/opt/homebrew/bin/node"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-sginnora-noracu)](https://mcppedia.org/s/io-github-sginnora-noracu)

Read me

What io.github.sgInnora/noracu does

Local MCP server: macOS apps and a browser by element index, plus iPhone Mirroring (experimental).

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

npx -y 'noracu' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

noracu

A local MCP server that lets Claude, Cursor, or any MCP client operate macOS apps and a Playwright browser by element_index — and, experimentally, a real iPhone through Apple's iPhone Mirroring (OCR on the Mac, normalized taps). No API key; no telemetry from the server.

中文说明见 README.zh-CN.md。

One stdio MCP server. The agent snapshots a tree, gets an indexed element list, then clicks or types by element_index instead of raw pixels — the same observe/act split on the Mac and in the browser. The experimental iPhone layer runs the same observe → act loop over OCR text and normalized coordinates.

browser_snapshot returns an indexed ARIA tree; browser_click acts by element_index. The Mac layer runs the same loop (mac_ax_state → mac_click). Highlight boxes are overlays from demo/record-browser.mjs, not a product feature. The iPhone layer is not in this demo.

What it does

One MCP server, three control surfaces:

Layer	Tools	Drives	Status
Mac	20 (`mac_*`)	macOS Accessibility API (`src/mac-ax.js`, JXA), cliclick, screencapture	stable
Browser	12 (`browser_*`)	Playwright (persistent profile)	stable
iPhone	14 (`phone_*`)	iPhone Mirroring via the bundled imctl driver (Python + pyobjc)	experimental

The iPhone layer is experimental and ships with its driver (imctl, in imctl/). It needs Apple's iPhone Mirroring with the iPhone locked and near the Mac, and a python3 with pyobjc; it observes with OCR and acts on normalized coordinates rather than element_index. Without pyobjc, phone_* tools return a one-line imctl unavailable error with the install command, and the Mac and browser layers are unaffected. The observe/act vocabulary follows the action/observation split popularized by ChatGPT's computer-use, re-implemented on open local tooling.

Why noracu

noracu is the local hands, not the model. Your MCP client (Claude Desktop, Claude Code, Cursor) decides what to do; this server only observes and acts on this machine.

The server runs entirely on your machine. No cloud service, no API key, no telemetry, no postinstall scripts. Sole runtime dependency: Playwright. noracu makes no network calls of its own; the only automatic one is the one-time Chromium download on the first browser_launch (NORACU_DISABLE_AUTO_INSTALL=1 turns that off). With NORACU_ALLOW_CDP=1 it also talks to a DevTools port on 127.0.0.1 that it opened itself (NORACU_ALLOW_CDP=any for other loopback ports). The browser still fetches the pages you point it at, and your MCP client still sends tool results — screenshots, OCR text — to whatever model it uses.
Acts on semantics, not pixels. Observation returns the accessibility tree (Mac, read directly through the macOS Accessibility API — about 0.15 s for a 500-element window on our test Mac) or ARIA tree (browser) as an indexed list — text, not screenshots. Actions reference element_index; indices expire after 30 s. On the Mac an index is backed by identity evidence (the window's ID, the child path, role, identifier, name) and the element is re-identified before every action; in the browser, tag/name/href/position are re-checked. A gone or changed element returns element_no_longer_valid instead of clicking the wrong thing. Screenshots are there when the tree is not enough.
Says what happened. A Mac action uses the element's own accessibility action when it has one (p

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

91/100across 5 weighted dimensions

How we score →

0255075100

−9

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked noracu against OSV.dev.

Inventory

Tools (2)

Click any tool to inspect its schema.

~96 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.sgInnora/noracu safe to use?: io.github.sgInnora/noracu has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.sgInnora/noracu?: io.github.sgInnora/noracu supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.sgInnora/noracu do?: io.github.sgInnora/noracu provides 2 tools: element_index, wait_for. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.sgInnora/noracu?: io.github.sgInnora/noracu is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.sgInnora/noracu actively maintained?: io.github.sgInnora/noracu is actively maintained - last commit was 6 days ago. It has 4 GitHub stars.