Local Computer Full-Access MCP

A Windows-first MCP server that gives an MCP client Codex-like local capabilities through explicit tools:

• unrestricted PowerShell, Command Prompt, or Bash commands;
• read, create, edit, copy, move, search, and delete files/directories;
• list drives and inspect disk capacity;
• start, inspect, and terminate processes;
• local JSONL audit logging;
• stdio transport for local MCP hosts;
• Streamable HTTP plus an HTTPS tunnel for ChatGPT;
• DNS-rebinding protection with tunnel Host-header rewriting;
• one-click shutdown via STOP_MCP.bat.

run_command makes this genuinely full access under the Windows account running the server. It is not a simulated filesystem.

[!CAUTION] This project can execute arbitrary commands, modify or delete files, start processes, and expose everything accessible to the Windows account running it. Use it only on a computer you control. Keep the server bound to 127.0.0.1, never publish the complete MCP endpoint URL, and stop the server when it is not in use. Read SECURITY.md before enabling full access.

ChatGPT connectivity and availability

ChatGPT cannot connect directly to 127.0.0.1 on your PC. This package keeps the MCP service on localhost and uses cloudflared to create an outbound HTTPS tunnel for testing.

Availability of custom MCP apps and write/modify actions depends on the ChatGPT plan and workspace configuration and may change over time. Check OpenAI's current developer mode and MCP apps documentation. The server also works with compatible local MCP hosts over stdio.

Install on Windows

1. Extract this folder to a permanent location, for example:

   %USERPROFILE%\Documents\Local-Computer-Full-Access-MCP

2. Double-click:

   INSTALL_WINDOWS.bat

The installer creates a Python virtual environment, installs the official MCP Python SDK, installs cloudflared through winget when needed, creates .env, enables full access because that is the requested mode, generates a random secret endpoint, and runs tests.

Start for ChatGPT

1. Double-click START_CHATGPT.bat.
2. Keep the terminal window open.
3. Wait until it prints CHATGPT MCP ENDPOINT.
4. Copy the complete endpoint ending in /mcp/<long-secret>.
5. In a supported ChatGPT workspace on the web, enable Developer mode and create a custom app/MCP connector.
6. Paste the endpoint, choose No authentication for this temporary capability-URL setup, scan the tools, and create the app.
7. Enable the app in the chat. Leave confirmations enabled for risky actions.

To stop everything, close the launcher window normally or run STOP_MCP.bat.

The TryCloudflare hostname changes whenever the script restarts, so update the custom app endpoint after each restart. TryCloudflare is for testing, not a permanent deployment. If cloudflared reports that a Quick Tunnel cannot start because you already have %USERPROFILE%\.cloudflared\config.yml or config.yaml, temporarily rename that file or use a separately configured stable Cloudflare Tunnel.

Start over stdio

Double-click START_STDIO.bat, or point a local MCP client at:

command: <folder>\.venv\Scripts\python.exe
args: -m pc_mcp.server
environment: PC_MCP_TRANSPORT=stdio

An example generic client config is in mcp-client-config.example.json.

Tools

Read-only tools:

• pc_status
• list_drives
• file_info
• list_directory
• read_text_file
• read_binary_file_base64
• search_files
• list_processes

Write/action tools:

• write_text_file
• write_binary_file_base64
• replace_text
• make_directory
• copy_path
• move_path
• delete_path
• run_command
• start_process
• terminate_process

Example prompts after connection

• "Use my local-computer app to list my drives and show free space."
• "Inspect the selected project folder, run its tests, fix failures, and show me the changed files."
• "Search the selected project folder for references to a specified phrase without changing anything."
• "Create a backup of this folder before editing it. Ask before deleting anything."

Configuration

The installer creates .env. Important settings:

PC_MCP_FULL_ACCESS=1
PC_MCP_TRANSPORT=streamable-http
PC_MCP_HOST=127.0.0.1
PC_MCP_PORT=8765
PC_MCP_ENDPOINT_SECRET=<random-secret>

To restrict filesystem tools:

PC_MCP_FULL_ACCESS=0
PC_MCP_ALLOWED_ROOTS=%USERPROFILE%\Documents;%USERPROFILE%\Projects

See SECURITY.md before leaving this server running or converting the test tunnel into a permanent endpoint.

Test manually

Run RUN_TESTS.bat.

For MCP protocol inspection, activate the virtual environment and run:

.\.venv\Scripts\Activate.ps1
mcp dev server.py

Audit log

Tool actions and command outcomes that reach the core implementation are recorded locally at:

.data\audit.jsonl

File contents, binary payloads, and environment dictionaries are redacted and hashed in the audit record.