MCP tools for a Parallels Desktop VM

VMBridge speaks MCP. An agent on the Mac starts vmbridge over stdio. An agent inside a VM uses the daemon on the Parallels Shared or Host-Only network, with a token that works only for that VM.

What an agent can do

• See the screen and read the text on it (vm_screenshot, vm_read_screen).
• Click, type, scroll, and drag with the VM's own keyboard and mouse.
• Run commands and move files (vm_run, vm_exec, vm_copy_to_guest, vm_copy_from_guest).
• List and focus windows, open an app or URL, and search files by name.
• Start, stop, pause, clone, and create VMs, and take and revert snapshots.
• Sign in at the login screen without the agent seeing the password.

What it does not do

• It does not record video of the VM.
• It does not read the guest accessibility tree. On-screen text is OCR.
• It does not rename snapshots. prlctl has no rename.
• It is not a hypervisor. Parallels Desktop runs the VM.