About Openmanus MCP
Openmanus MCP is an MCP server in the AI category: fastMCP 3.1 Server + Webapp wrapping OpenManus (FOSS CLI, 100% local LLM when you configure Ollama / LM Studio in OpenManus). Not Manus.im.
Install
git clone https://github.com/sandraschi/openmanus-mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (5)
APIHigh
Parameters not published.
bashCritical
Parameters not published.
computerHigh
Parameters not published.
python_executeHigh
Parameters not published.
str_replace_editorModerate
Parameters not published.
Ask AI
Ask AI about Openmanus MCP
Powered by Claude · Grounded in docs
Security checks
- ✓README presentThe repository ships documentation.
5 checks have not been run yet.
README
openmanus-mcp — MCP bridge + dashboard for OpenManus
FastMCP 3.2 server that wraps OpenManus (FOSS agent framework) into MCP tools, with a SOTA fleet webapp dashboard.
Includes Windows-native computer use (mouse/keyboard/screenshot via win32 API) and bash execution — both with security hardening.
Architecture
MCP hosts ←→ openmanus-mcp (FastMCP 3.2, stdio)
↕ subprocess / REST
OpenManus agent
├── bash (denylisted)
├── computer (local win32)
├── python_execute (restricted)
├── browser_use (Playwright)
└── str_replace_editor (workspace-scoped)
- FastAPI backend on
:10768—/api/v1/*for webapp + fleet - Vite + React dashboard on
:10769— SOTA fleet standards - OpenManus fork at
sandraschi/OpenManus— security-hardened
Features
| Capability | Detail |
|---|---|
| Computer use | Windows-native mouse/keyboard/screenshot (win32 API, no Docker/cloud needed) |
| Bash execution | Full terminal with denylist (rm -rf /, sudo, useradd, dd blocked) |
| Python execution | Restricted builtins — os/subprocess/socket imports blocked |
| Web browsing | Playwright-based browser automation |
| File editing | Read/write/edit files scoped to workspace root |
| API security | Optional Bearer token auth on all REST endpoints |
| Fleet integration | Registered in mcp-central-docs, fleet discovery, glama.json |
Ports
| Port | Service |
|---|---|
| 10768 | Backend (FastAPI) |
| 10769 | Frontend (Vite) |
Quick Start
# Start everything
.\web_sota\start.ps1
# Or individually:
uv run python -m openmanus_mcp # MCP server
uv run python -m openmanus_mcp.run_api # FastAPI backend
cd web_sota && npm run dev # Frontend
Configuration
Set OPENMANUS_MCP_API_KEY for API authentication:
$env:OPENMANUS_MCP_API_KEY = "your-secret-key"
If not set, a random key is auto-generated and written to .api_key.
Security
See SECURITY.md and Upstream SECURITY.md.
| Tool | Risk | Mitigation |
|---|---|---|
bash |
Critical | Denylist + obfuscation detection |
computer |
High | Confirmation gate (blocked in headless) |
python_execute |
High | Restricted builtins |
str_replace_editor |
Moderate | Workspace-scoped paths |
| API | High | Optional Bearer auth |
Requirements
- Python 3.12+
- uv
- OpenManus fork (
sandraschi/OpenManus) - Windows (for computer use tool; bash works cross-platform)
README copy captured when this server was indexed; it may lag the repository. The original is authoritative.