
Agentbridge
io.github.SeanFDZPublished by GitHub account SeanFDZv1.0.2Updated Oct 27, 2026
Control Classic Mac OS (System 7-9) from AI agents via shared folder protocol.
Overview
Lets an AI agent drive a Classic Mac OS 7–9 machine or emulator — windows, menus, mouse, keyboard, clipboard, apps and files — through a shared folder.
- What you can do
- Check targets, ping, heartbeat and system info for each configured Classic Mac
- List windows, the front window and running processes, and read the menu bar and menu items
- Select menu items, click, move, drag, type text and press keys with modifiers
- Read and set the clipboard text
- Launch, activate, quit apps and send Apple Events
- List mounted volumes and folder contents by HFS path
- When to use it
- Useful when you need an assistant to inspect or operate a real 68k or PowerPC Mac running System 7–9, or a BasiliskII/SheepShaver emulator, for example to automate legacy software or check what is on screen. Not relevant if you have no Classic Mac or shared folder set up.
- Requirements
- A local Node.js runtime (20 or newer) running the classic-mac-mcp package via npx or a global install, plus a fleet.json config listing each target's shared folder path. The AgentBridge application must be copied into and launched from that shared folder on the Classic Mac, which needs System 7.0 or later. The shared folder must be readable and writable from both machines (NAS/AFP/SMB share or emulator host directory).
Installation
In SourceWeft
- Open Agentbridge in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
AgentBridge
Let AI talk to your Classic Mac.
AgentBridge is a native Classic Mac OS application that lets AI agents (like Claude) interact with Mac OS 7–9 through structured commands and responses. It works on real hardware and emulators — no modifications to your Mac required.
Drop AgentBridge into a shared folder, launch it on your Mac, and an AI agent can list windows, open apps, type text, read the clipboard, browse files, and more — all through a simple text-based protocol.
[AgentBridge splash screen on a Mac SE]
How It Works
The transport is just a folder. How that folder is shared between the AI and the Mac is up to you:
- NAS/file server (AFP or SMB) — multiple Macs and your modern computer all mount the same share
- Emulator shared folder — BasiliskII and SheepShaver both support host directory sharing
- Any other shared filesystem — if both sides can read and write files, it works
No SSH. No special drivers. No modifications to your Mac's system. AgentBridge is a regular application — launch it, quit it, done.
MCP Tools Reference
The MCP server exposes these tools to AI agents. If the fleet has only one target, the target parameter is optional on all tools.
System & Status
classic_mac_list_targets
List all configured Classic Mac targets and their status (heartbeat alive/dead).
No parameters.
classic_mac_ping
Health check — returns pong if AgentBridge is responding.
classic_mac_heartbeat
Read the heartbeat file — shows uptime, front app, free memory, timestamp.
classic_mac_get_about
System information — OS version, machine type, RAM, free memory, uptime.
Windows & Processes
classic_mac_list_windows
Enumerate all visible windows across all applications. Returns window index, title, bounds (left,top,right,bottom), and front/back layer.
classic_mac_get_front_window
Get details about the frontmost window — title, bounds, owning app.
classic_mac_list_processes
List running applications with name, creator code, PID, and memory partition.
Menus
classic_mac_list_menus
List the menu bar entries for the frontmost application.
classic_mac_get_menu_items
Get items within a specific menu by name.
classic_mac_menu_select
Activate a menu item by name. Works for items with keyboard shortcuts.
Mouse & Keyboard
classic_mac_click
Click at screen coordinates.
classic_mac_mouse_move
Move the cursor without clicking.
classic_mac_mouse_drag
Click and drag from one point to another.
classic_mac_type_text
Type a string of text into the frontmost application.
classic_mac_key_press
Press a single key with optional modifiers.
Clipboard
classic_mac_get_clipboard
Read the current clipboard text contents.
classic_mac_set_clipboard
Set the clipboard text contents.
Application Control
classic_mac_launch_app
Launch an application by HFS path or creator code.
*One of path or creator is required.
classic_mac_activate_app
Bring a running application to the front.
classic_mac_quit_app
Send a quit Apple Event to a running application.
classic_mac_send_appleevent
Send a generic Apple Event to a running application.
Files & Volumes
classic_mac_get_volumes
List all mounted volumes with name, free space, and total size.
classic_mac_list_folder
List contents of a folder by HFS path. Returns name, type code, creator code, size, and whether each item is a folder.
Compatibility
AgentBridge requires System 7.0 or later (for Apple Events support).
Quick Start
Pre-built Binaries
Download from the Releases page:
AgentBridge-68k.bin— MacBinary for 68k Macs (System 7–8.1)AgentBridge-68k.dsk— HFS disk image for 68k Macs (System 7–8.1)AgentBridge-ppc.bin— MacBinary for PowerPC Macs (OS 8.5–9.2.2)AgentBridge-ppc.dsk— HFS disk image for PowerPC Macs (OS 8.5–9.2.2)
Setup
-
Create a shared folder accessible to both your Mac and your modern computer. This can be a NAS share, an emulator's host directory, or any shared filesystem.
-
Create the directory structure inside the shared folder:
-
Copy AgentBridge into the folder alongside inbox/outbox/assets.
-
Launch AgentBridge on the Classic Mac. It will automatically find its folder and start polling for commands.
-
Send a test command from your modern computer:
-
Read the response:
You should see
RESULT pongandSTATUS ok.
[Text typed by Claude into a Mac SE via AgentBridge]
Multiple Macs
Each Mac gets its own subfolder with its own copy of AgentBridge:
AgentBridge uses its own launch location as its working directory — no configuration needed.
MCP Server
The MCP server exposes AgentBridge commands as tools for AI agents like Claude. It's a Node.js TypeScript server that communicates via stdio (standard MCP transport).
Install via npm
Or run directly with npx (no install needed):
Install from source
Configuration
Create a fleet.json file to point at your shared folders:
Claude Desktop
Add to your Claude Desktop config (claude_desktop_config.json):
Or if you installed from source:
Protocol
AgentBridge uses a line-oriented key-value text protocol designed for Classic Mac constraints:
- No JSON — parseable with ~50 lines of C, zero dynamic memory allocation
- CR line endings (Classic Mac native)
- MacRoman text encoding (translated to UTF-8 by the MCP server)
- 32KB max message size
- Files named
C00001.msg(commands) andR00001.msg(responses)
Command Format
Commands are text files written to the inbox/ directory, named C{seq}.msg (e.g. C00001.msg). Sequence numbers are zero-padded to 5 digits.
All lines are KEY value pairs, terminated by --- on its own line. Line endings are CR (0x0D, Classic Mac native). Text encoding is MacRoman (the MCP server handles UTF-8 conversion). Multi-line text uses + continuation lines after the TEXT key. Maximum message size is 32KB.
Response Format
Responses appear in the outbox/ directory as R{seq}.msg, matching the command's sequence number. AgentBridge deletes command files after processing; the MCP server deletes response files after reading.
STATUS is either ok or error. On error, ERRCODE and ERRMSG fields provide details. Multi-value responses (windows, processes, volumes, files, menu items) use repeated keys (WINDOW, PROCESS, VOLUME, FILEENTRY, MENUBAR, MENUITEM) with pipe-delimited fields.
Heartbeat
AgentBridge writes a heartbeat file in its working directory every ~2 seconds:
The MCP server monitors the heartbeat file's modification time to determine if AgentBridge is alive.
Building from Source
Requires Node.js 20+.
AgentBridge binaries are available as pre-built downloads — source code is not distributed.
Project Structure
Design Principles
No host-side dependencies. AgentBridge does everything through the Mac Toolbox. There's no SSH, no screen capture, no input injection at the host OS level. This means it works identically on real hardware and emulators.
No system modifications. AgentBridge is a regular application. It doesn't modify your System Folder, install extensions, or change boot configuration. Launch it, quit it, delete it — your Mac is untouched.
Transport agnostic. The protocol is just text files in a folder. How that folder is shared (NAS, AFP, SMB, emulator extfs, USB drive, carrier pigeon) is not AgentBridge's concern.
Cooperative multitasking citizen. AgentBridge yields CPU via WaitNextEvent() every cycle. Other apps run normally.
Stateless commands. Every command is self-contained. The MCP server can crash and restart without the Mac side needing to know.
Credits
AgentBridge 1.0.1 Sean Lavigne © 2026 Falling Data Zone, LLC
Built with Retro68 by Wolfgang Thaller.
Also From Falling Data Zone
MacMind — a single-layer transformer neural network implemented entirely in HyperTalk, trained and running on a Macintosh SE/30. Proof that 1987 scripting can do machine learning.
More apps at apps.fallingdata.zone.
License
This project has two components with separate licenses:
MCP Server (TypeScript, src/ directory) — GNU General Public License v3.0 — free to use, modify, and distribute under GPL terms.
AgentBridge.app (Classic Mac application, source in classic-mac-src/) — modified PolyForm Noncommercial 1.0.0. © 2026 Falling Data Zone, LLC. Pre-built binaries are available for download.
Protocol — the AgentBridge protocol as documented in this README is open.
Source: README.md at commit 26b0305
Tools
0Version history
1- v1.0.2LatestSep 16, 2026
Score
50% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts