Agentify Desktop — Watchlist

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Follow desktop session and tool-authorization changes as Agentify develops

Reviewed Oct 5, 2026 · Documentation review; complete setup workflow not independently tested

Best fit

Operating already-authenticated AI web sessions from coding agents.

What we know

Local desktop host/MCP for ChatGPT, Claude, Perplexity, Gemini, AI Studio and Grok browser sessions with tabs, navigation, prompts, file upload and artifacts.

Maintenance / activity evidence

Observed May 18, 2026 (UTC)Fix Windows Chrome CDP spawn

Tracking evidence observed Oct 5, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Activity source · commits ↗Activity source · releases ↗

Verification gaps / watch-outs

Installation and comprehensive security have not been independently audited.
Browser-session authority of signed-in sites plus selected local files. Writes: Submit prompts; Navigate/create/close tabs; Upload files; Manage artifacts.
Local bearer token.
Sensitive access: Authenticated AI accounts, Browser cookies, Local files

The agent can act inside authenticated web sessions and upload local files; isolated profiles are safer than existing-profile mode.

Security source · repository notice ↗Security source · policy file ↗Security source · policy file (attribution not established) ↗

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

565 repository stars

Stars observed Sep 25, 2026.

Do not overwrite existing reviewed stars/download metrics with nulls from this enrichment batch.

All limitations / Review context

Which desktop controls and MCP client integrations are currently documented?

The bounded assessment reviewed the official README, repository notices, security policy path, and security page for known material public-tracking blockers. No such blocker was identified. This is a public-tracking assessment, not an installation safety certification.

The agent can act inside authenticated web sessions and upload local files; isolated profiles are safer than existing-profile mode.
Browser-session authority of signed-in sites plus selected local files.
Local bearer token.
Session cookies/localStorage and artifacts are stored locally.
Reviewed write actions: Submit prompts; Navigate/create/close tabs; Upload files; Manage artifacts
Sensitive access: Authenticated AI accounts, Browser cookies, Local files
Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
No independent runtime, installation, or comprehensive security audit was performed.
No installation, runtime, client matrix, or complete tool-contract audit was performed in this review.
CAPTCHAs/login challenges require manual action.
Reusing an existing Chrome profile exposes sensitive session state.
Supports only listed sites/UI versions.

Original activity observations

2026-05-18T03:35:38Z: Fix Windows Chrome CDP spawn

Technical identity

github.com/agentify-sh/desktop

Exact implementation source: https://github.com/agentify-sh/desktop ↗
Reviewed resource type: Host
Repository identity: agentify-sh/desktop
Package identity: npm:@agentify/desktop
Service endpoint: 127.0.0.1 (configurable port)

Evidence & Sources

Evidence basis: Recorded source evidence
Setup runtime verification: Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed Oct 5, 2026 · Latest source observation Oct 7, 2026

GitHub repository ↗
agentify-sh/desktop
Recorded repository material and project history.
Includes references whose attribution is not established.

Setup · Watchlist

Host / Desktop app setup

Publisher instructions.

Source evidence observed Oct 12, 2026.

Additional setup details required — see the specific gaps below.

Download / install
Publisher instructions
Publisher local Agentify GUI: `npx @agentify/desktop` (Node.js 20+). Register its MCP endpoint using publisher client integration instructions; GUI alone does not register its MCP tools.
npx @agentify/desktop
codex mcp add agentify-desktop -- npx -y @agentify/desktop mcp
Configure application / integrations
Publisher instructions
Open the Agentify Desktop Control Center, create/show a provider tab and sign in locally. `npx @agentify/desktop` launches the GUI; `npx @agentify/desktop mcp` starts the separate stdio MCP server. Codex registers the latter with name agentify-desktop.
Check connection
Suggested check
Run the local Agentify GUI, then inspect the host MCP tool list for `agentify_status`, `agentify_tabs`, and `agentify_query`. `agentify_status` checks local readiness; do not send an authenticated web prompt merely for a smoke check.
Disconnect / uninstall / revoke
MCP100 setup guide
Remove the matching MCP configuration from the client. This does not uninstall the local package or revoke provider credentials. Client disconnect (codex, only if registered using the name `agentify`): `codex mcp remove agentify`. This unregisters the client entry; it does not uninstall packages or revoke remote service credentials.
codex mcp remove agentify

Official Documentation & Sources

What it does

Local desktop host/MCP for ChatGPT, Claude, Perplexity, Gemini, AI Studio and Grok browser sessions with tabs, navigation, prompts, file upload and artifacts.

Capability: Browser Automation
Resource type: Host
Best fit: Operating already-authenticated AI web sessions from coding agents.

Representative uses

Prompt authenticated web sessions
Read/navigate supported pages
Upload files
Manage tabs/artifacts/context bundles

Limitations

CAPTCHAs/login challenges require manual action.
Reusing an existing Chrome profile exposes sensitive session state.
Supports only listed sites/UI versions.

Reviewed access

Access & risk

Review the exact access boundary before connecting this MCP to accounts, credentials, or sensitive data.

Authentication: Local bearer token.
Permissions: Browser-session authority of signed-in sites plus selected local files.
Data handling: Session cookies/localStorage and artifacts are stored locally.
Cost: free
Risk and cautions: The agent can act inside authenticated web sessions and upload local files; isolated profiles are safer than existing-profile mode.

Access scope and cautions

Write actions: Submit prompts Navigate/create/close tabs Upload files Manage artifacts
Sensitive access: Authenticated AI accounts Browser cookies Local files
Risk level: high

FAQ

Based on reviewed evidence as of 2026-10-07. Watchlist tracking is not a recommendation or a security certification.

Which tasks are documented for this implementation?

The reviewed tasks include: Prompt authenticated web sessions; Read/navigate supported pages; Upload files; Manage tabs/artifacts/context bundles.

What setup and authentication are documented?

Recorded installation/entrypoint step: npx @agentify/desktop mcp. Recorded transport: stdio, local_http. Recorded environment-variable notes: AGENTIFY_DESKTOP_PORT optional. No configuration values are supplied here. Prerequisites: Node.js 20+. These are the documented setup details, not a claim that installation or client compatibility was independently tested. Authentication: Local bearer token stored in state directory.

Can it modify data or perform write operations?

Documented write actions include: Submit prompts; Navigate/create/close tabs; Upload files; Manage artifacts. Recorded permission boundary: Browser-session authority of signed-in sites plus selected local files.

What data-handling boundary should I consider?

Session cookies/localStorage and artifacts are stored locally. Recorded sensitive-access context: Authenticated AI accounts; Browser cookies; Local files.

What limitations and risks should I check before use?

The agent can act inside authenticated web sessions and upload local files; isolated profiles are safer than existing-profile mode. CAPTCHAs/login challenges require manual action. Reusing an existing Chrome profile exposes sensitive session state. Supports only listed sites/UI versions. No independent runtime, installation, or comprehensive security audit was performed.

Is this an official MCP?

Agentify is listed as First-party MCP in MCP100’s current evidence.