MCP SERVER · GOOGLE ANTIGRAVITY · GEMINI

Windows for Antigravity.
One look, one batch.

Windows computer use for Antigravity, in the background.

An MCP server, nexus-computer, for Google Antigravity: Gemini sees and drives Windows applications while you keep the mouse, the keyboard and the foreground window.

Explore the code See the features

Designed for Gemini
Every action read back
Irreversible under confirmation

For

A Windows screen whose numbered elements are linked to Antigravity — Illustration of an exchange: every reply states the next step in one line, and an irreversible gesture waits for confirm: true.

MCPGOOGLE ANTIGRAVITYWIN32UI AUTOMATIONPYTHON 3.14MIT

01 / WHY

A fast model.
Tools that guide it.

Screenshot-and-click computer use moves the real cursor and brings windows to the front. This server acts in the background first, reads the effect back, and only falls back to the real mouse or keyboard when the step allows it (foreground=True).

It is built for a fast model: one look, then one batch of steps named by their label, and every reply says what to do next.

02 / WHAT IT DOES

Five tools.
One golden rule.

Look, then act in one batch with label targets. The ten older tool names stay callable.

computer_list_windows
Application windows, optionally grouped by application.
computer_look
One line per element (role, name, value, states, position) and an image, without bringing the window forward.
computer_act
Several steps in one call (click, typing, check box, list, menu, keys…), each read back.
computer_open_path
Opens a document, folder, program or shortcut; the opening is read back.
computer_close_window
Closes a window cleanly: UI Automation, then WM_CLOSE.
next
Every reply states the next step in one line (✓ done, = already done, ~ effect not seen, ✗ failure) and attaches the window image when the effect was not read back.

repeat
A batch identical to one sent less than 10 s earlier, without a new look, is refused.
foreground=True
Even then, background first: a targeted point is mapped to the UI Automation element under it, covered windows included.
Win32 · WinForms
Direct messages to native controls, with their notifications; WinForms through UI Automation then messages.
WPF · UWP · Chromium
UI Automation only, read in one round trip; a truncated read is reported, never a silent empty list.
verified
Read back in the application: value, state, selection, focused element, title, image. Never a success on “command sent” alone.
Clipboard
Saved in all its formats and restored as it was; used only as a last resort for long typing.

Checks: ruff, Pyright and pytest offline; real validation on its own Win32, WinForms and WPF windows, shown without activation.

03 / SAFEGUARDS

The agent acts.
You stay in control.

The rules live in the tool itself, not only in the agent’s instructions.

Window always named

Never the foreground window by default; an ambiguous title or label is refused with the list of candidates.

Read back before real input

The target window is read back in the foreground right before every physical input and cursor move, otherwise nothing is sent.

Irreversible gestures under confirmation

Pay, buy, order, transfer money, send, publish, delete permanently, uninstall, format, reset, cancel a subscription, erase data or make a repository public need confirm: true, the Enter key included.

Password managers

KeePass, KeePassXC, Bitwarden, 1Password, Dashlane, NordPass, RoboForm and LastPass are never looked at, captured or driven.

System screens

Sign-in screen, lock screen and UAC prompt: refused.

Said plainly

Confirmation is on by default; NEXUS_AGY_CONFIRM=off in the server environment turns it off entirely.

04 / ALONGSIDE OTHER AGENTS

One PC.
Several agents.

Two file-based protocols shared by the NexusWindows editions and NexusBrowser. Any agent can implement them.

Foreground token

A shared file, held only while really using the mouse or the foreground, never for a background action. Windows releases it if the agent stops; a waiting agent gives up after a few seconds and says who holds it.

Emergency stop

Ctrl+Alt+Shift+Esc blocks every desktop action for 2 minutes, for every agent; reads stay allowed. Deleting the file or changing the clock does not lift the stop.

You first

Your physical input is read through Raw Input: the server waits for a pause before any real mouse or keyboard, and stops at the next checkpoint if you touch the keyboard or mouse.

05 / INSTALLATION

One installer.
One MCP entry.

Requirements: Windows 10 or 11, PowerShell 7 and uv (installed by install.ps1 if missing). The Python environment, logs and screenshots live outside the clone; the server is then declared in Antigravity’s mcp_config.json.

pwsh -NoProfile -File install.ps1

Independent project, not affiliated with Microsoft or Google.

Version: 2.8.2
System: Windows 10 or 11
Client: Google Antigravity
Requirements: PowerShell 7, uv, Python 3.14
Licence: MIT
Limits: Keyboard input refused in UWP, WinUI and Chromium, and Ctrl/Alt shortcuts in WPF, where it cannot be done in the background; for the web, NexusBrowser is more reliable. Messages in French.