---
title: "ghost"
description: "Verified control of the whole desktop for agents on Windows and Linux: apps with no API, windows, shell, browser."
canonical: https://agentpluginsdirectory.com/plugins/ghost
last-updated: 2026-10-23
---

# ghost
Verified control of the whole desktop for agents on Windows and Linux: apps with no API, windows, shell, browser.
- Slug: ghost
- Publisher: Northtek
- Repository: https://github.com/NORTHTEKDevs/ghost
- Manifest: plugin.json
- Version: 0.23.4
- License: MIT
- Category (editorial): other
- Skills: 0
- MCP servers: 1 (ghost)
- Stars: 28
- Repository created: 2026-04-17
- Repository last pushed: 2026-09-06
- Publisher type: User
- Listing: https://agentpluginsdirectory.com/plugins/ghost
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json

## What ghost does, in the publisher's words

Verified control of the whole desktop, for agents and programs, on Windows and Linux. Ghost gives Claude Code, Codex, Cursor, any MCP harness, or a plain script the operating system's own control surface: the apps with no API, the windows, the shell, and the browser you are already logged into, in the background without taking your screen or cursor, with every action proven to have happened.

Like Playwright, but for the native desktop, and built for agents. Ghost does the perceiving, the acting, and the verifying; the model you are already running does any looking that is needed, so there is no vision API key to set.

One MCP surface, two engines: Win32 UI Automation on Windows, AT-SPI2 over D-Bus on Linux. The verbs, the locator tiers and the act-then-verify loop are written once and behave the same on both.

From the project README, punctuation lightly normalized. Full text: https://raw.githubusercontent.com/NORTHTEKDevs/ghost/HEAD/README.md

## MCP servers

- ghost: transport: stdio; command: ghost-mcp

Read from the plugin's own mcp.json. Environment variable names only, never values.