IsolatedTester — TinkyVision system

io.github.AgewellEPMPublished by GitHub account AgewellEPMv1.2.1Updated Oct 24, 2026

Isolated macOS app tests, MCP images, OCR/ASCII frames, accessibility and evidence reports.

VerifiedSTDIODesktop onlyBrowser Automation Developer Tools Security & Monitoring

Server details

Identifier: io.github.AgewellEPM/isolated-tester
Transport: STDIO
Runtime: Desktop only
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified the GitHub account AgewellEPM for this listing. That does not show the account is the product's maker.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.AgewellEPM%2Fisolated-tester.svg)](https://sourceweft.com/mcp/io.github.AgewellEPM%2Fisolated-tester?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Lets an assistant run isolated macOS app sessions on a virtual display and inspect them through screenshots, OCR, ASCII frames, and accessibility trees.

What you can do: IsolatedTester places a macOS app in an isolated virtual-display session and exposes tools to create, list, and stop sessions, capture images and frames, read text via OCR, and read structured accessibility elements. It also offers ASCII frames for text-only models, bounded frame history, session sealing, and evidence or trend reports. Input tools let the assistant click and type into the isolated app.
When to use it: Use it when an assistant needs to observe or drive a macOS application in a contained session, for example UI testing, visual inspection, or collecting evidence reports. It suits Apple silicon Macs and Claude Desktop, and text-only models that need ASCII or OCR representations rather than native images.
Requirements: A local Apple silicon Mac running macOS 14 or later, installed through Claude Desktop's extension UI as an MCPB bundle, or run over stdio with the bundled executable. macOS Screen Recording and Accessibility permissions must be granted to the relevant executables. Optional autonomous tests can call Anthropic or OpenAI using the operator's credentials.

Before you install

This is UI isolation, not a filesystem, network, or OS security sandbox; the app keeps its OS-level permissions and an arbitrary click can trigger a destructive action. Input tools must be authorized by the operator. Screenshots and UI text can contain private information, and client configuration decides whether image or text results go to a hosted model. Do not post private screenshots, API keys, or recordings publicly.

Installation

In SourceWeft

Open IsolatedTester — TinkyVision system in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

TinkyVision + IsolatedTester

Created by Luke Kist / TinkyBink · AgewellEPM

Screen understanding and isolated app testing over MCP. Connect an AI assistant to macOS applications through screenshots, on-device OCR, accessibility elements, and explicit input tools. IsolatedTester adds virtual-display app sessions, ASCII frames for text-only models, bounded visual history, and evidence reports.

Early-access release 0.2.0. The packages target Apple silicon Macs running macOS 14 or later. This project is independently developed; an Anthropic listing or endorsement is not claimed. Clean-install Claude Desktop UI acceptance remains pending. See release validation.

Published MCP Registry entries

Both companion servers are active in the official MCP Registry:

io.github.AgewellEPM/tinkyvision — version 0.2.0
io.github.AgewellEPM/isolated-tester — version 1.2.1

The Registry entries reference the versioned GitHub MCPB assets and their SHA-256 checksums. Registry publication is separate from Anthropic's directory review; the Anthropic form submission is still pending.

Install

Download the two companion extensions from the 0.2.0 release:

tinkyvision-0.2.0-macos-arm64.mcpb — screen capture, OCR, window discovery, scoped accessibility, and consent-gated control. Includes the Swift helpers and Node dependencies; Claude Desktop supplies Node.
isolated-tester-1.2.1-macos-arm64.mcpb — isolated app sessions, screenshots, OCR/ASCII frames, accessibility, input, recording controls, and reports. Includes its native MCP executable.

Install both through Claude Desktop's extension installation UI. Grant the requested macOS Screen Recording and Accessibility permissions to the relevant executables; permissions are machine-specific and cannot be bundled. TinkyVision starts in read-only mode by default; change its extension setting only when input control is intended. IsolatedTester exposes input tools whose use must be authorized by the operator.

The native artifacts are intended for Apple silicon. Intel, Windows-hosted, and Linux-hosted execution are not claimed. Windows guests require separately installed Perslis/GhostBridge and the exact licensed guest disk. Guest images are not distributed here.

Other MCP clients can extract the bundles and run the TinkyVision src/server.mjs with Node 20+ or the IsolatedTester bin/isolated-mcp executable over stdio. MCPB installation support varies by client.

What the model receives

Need	Tools
An image directly through MCP	`os_screenshot_image`, `session_image`, `portal_snapshot`
Recognized text and positions	`vision_find_text`, `ocr_frame`
Structured interface elements	`os_ax_snapshot`, `get_accessibility_tree`, `get_interactive_elements`
A spatial view for text-only models	`ascii_frame`
Captures saved on the Mac	`os_screenshot`, `session_frame`, `screenshot`
Inspect and manage isolated sessions	`setup_status`, `list_sessions`, `create_session`, `stop_session`
Review recorded evidence	`frame_history`, `seal_session`, `session_report`, `trend_report`

A text-only model receives text representations, not native image perception. A file path is distinct from an MCP image response. Client configuration determines whether image/text results are sent to a hosted model.

First session

Check setup_status and existing sessions. Run at most one isolated app or VM session.
Create a session for a disposable native test app, with a clear objective.
Observe through session_image, OCR, or accessibility before selecting input targets.
Verify the result through a fresh observation.
Stop the session in guaranteed cleanup and verify that its owned app/helpers are gone.

Keep continuous capture at or below 1 FPS and retain the 300-frame recycler. TinkyStream capture is available in the included helper/source; the extensions do not install a background recording service. GhostBridge portal tools require a separately configured active portal. They fail when that dependency is absent.

Permissions and boundaries

TinkyVision preserves its sensitive-app deny list, read-only control, self-protection checks, native consent, and audit logging. Scoped accessibility grants bind to a specific window and expire. Read-only mode does not mean a tool has no privacy implications: screenshots and UI text can contain private information.

IsolatedTester places an app on a virtual display. This is UI isolation, not a filesystem, network, or operating-system security sandbox. The app and tools retain their OS-level permissions. An arbitrary click can activate a destructive application action. Tool annotations describe effects and do not replace operator authorization.

Privacy Policy

Read the Privacy Policy before connecting a client. It explains screen data, model-provider sharing, local logs, recordings, retention, and deletion. Optional autonomous tests can call Anthropic or OpenAI using the operator's credentials.

Credit and citation

Please credit Luke Kist / TinkyBink (AgewellEPM) and link this repository when demonstrating or building on the system. Use CITATION.cff for a versioned software citation. Preserve the included notices for IsolatedTester contributors and third-party dependencies.

Source and support

TinkyVision is MIT licensed; native helpers and build sources are in this repository. IsolatedTester is distributed with its MIT notice as a companion binary. Support and bug reports. Do not post private screenshots, API keys, or session recordings in public issues.

Maintainer packaging and submission details: release guide, reviewer instructions.

Source: README.md at commit 3d84d9e

Tools

SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

v1.2.1LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts