Hypothesi Tauri MCP Server: Setup for Claude Code, Cursor and Other Apps

• Gives steps to add the bridge plugin to a Tauri app

  Returns step-by-step guidance for installing or updating the bridge plugin in your Tauri project. The text tells the assistant to look at your project first and ask before it changes anything.

  Try: “Help me set up the MCP bridge plugin in this Tauri project.”

  Read · get_setup_instructions

• Lists Android devices and booted iOS simulators

  Runs the Android adb tool and Apple's xcrun to list connected Android devices and running iOS simulators. Only useful for Tauri mobile work.

  Try: “Which Android and iOS devices are available?”

  Runs code · list_devices

• Connects to or disconnects from a running Tauri app

  Opens a connection to a running Tauri app through its bridge plugin, or checks or stops it. Every webview and IPC tool needs this session first, and several apps can be connected at once.

  Try: “Connect to my running Tauri app.”

  Network · driver_session

• Finds elements in the app and reports their position and text

  Looks up elements by CSS selector, XPath or text and returns their size, position, text, accessible name, attributes and whether they can be clicked. Can include computed styles.

  Try: “Find the Save button and tell me if it is visible.”

  Read · webview_find_element

• Reads console, Android, iOS or desktop logs

  Pulls log lines from the webview console, Android logcat, the iOS simulator or the desktop system log, so the assistant can see errors as they happen.

  Try: “Show the latest console errors from my app.”

  Runs code · read_logs

• Clicks, scrolls and swipes in the app

  Performs clicks, double clicks, hover, right click, long press, scroll, swipe and focus on elements you pick by selector, XPath or text.

  Try: “Click the Settings button.”

  Write · webview_interact

• Takes a screenshot of the app's visible area

  Captures the visible part of the webview as an image, or saves it to a file path you give. Has a quality and width limit.

  Try: “Take a screenshot of the main window.”

  Files · webview_screenshot

• Types text or sends key presses

  Types into a chosen field or sends keyboard events to the app, which changes what is entered in your running app.

  Try: “Type 'test@example.com' in the email field.”

  Write · webview_keyboard

• Waits for an element, text or event

  Pauses until a selector, some text or an IPC event shows up in the app, so the assistant can continue after a page loads.

  Try: “Wait until the loading spinner disappears.”

  Read · webview_wait_for

• Runs JavaScript inside the app's webview

  Executes JavaScript you or the assistant provide in the app's webview, with access to the Tauri JavaScript API. Returns the result if it can be turned into JSON.

  Try: “Run a script that returns the number of items in the cart.”

  Runs code · webview_execute_js

• Returns a text outline of the page

  Produces a YAML outline of the page, either the accessibility tree with roles and names or the DOM structure with tags and classes, optionally limited to one part of the page.

  Try: “Give me an accessibility snapshot of the sidebar.”

  Read · webview_dom_snapshot

• Lets you click an element to show it to the assistant

  Shows a picker overlay in your app. When you click an element, the assistant gets its tag, classes, text, position, styles, parent chain and an annotated screenshot.

  Try: “I will point at the broken button, then look at it.”

  Read · webview_select_element

• Reads the element you Alt+Shift+Clicked

  Returns the same details as the element picker for the element you last Alt+Shift+Clicked in the app, plus a screenshot.

  Try: “Look at the element I just Alt+Shift+Clicked.”

  Read · webview_get_pointed_element

• Calls a Rust command in your Tauri backend

  Invokes one of your app's Tauri commands with arguments you set. It goes through the webview, so your app's capability rules still apply, but the command itself can do whatever your code does.

  Try: “Call the get_user_settings command.”

  Runs code · ipc_execute_command

• Starts or stops recording IPC calls

  Turns on or off capture of the calls your frontend makes to the Rust backend.

  Try: “Start monitoring IPC calls.”

  Write · ipc_monitor

• Shows the recorded IPC calls

  Returns the captured commands and events with their arguments and responses. Monitoring must be on first.

  Try: “Show me the IPC calls from the last minute.”

  Read · ipc_get_captured

• Sends a Tauri event to the app

  Emits an event with a payload so you can test how the app's event handlers react.

  Try: “Emit a 'refresh' event.”

  Write · ipc_emit_event

• Reads app name, Tauri version and environment

  Returns basic facts about the connected app, which is handy to confirm you reached the right one.

  Try: “What app and Tauri version am I connected to?”

  Read · ipc_get_backend_state

• Lists, inspects, resizes and focuses windows

  Lists the app's windows, gets one window's size and position, and can resize, focus, minimize or maximize it. Focus, minimize and maximize need bridge plugin 0.13.0 or newer.

  Try: “List the app's windows and resize the main one to 1280 by 800.”

  Write · manage_window

Watch out for

• The bridge plugin listens on every network interface, with no sign-in

  By default the tauri-plugin-mcp-bridge plugin binds its WebSocket (port 9223) to 0.0.0.0, and the source has no token or origin check. Anyone on the same network who can reach that port could use the app tools, including running JavaScript. Our advice: build the app with Builder::new().bind_address("127.0.0.1").build() unless you debug a phone or tablet over the network. github.com

• It can run any JavaScript in your app

  webview_execute_js runs code you or the assistant write inside the app's webview, with access to the Tauri JavaScript API. Point it at a dev build, not one with real accounts. github.com

• It can call your Rust backend commands

  ipc_execute_command invokes your app's commands with arguments the assistant picks. If one of them deletes data or touches files, this tool can trigger it. github.com

• It clicks, types and sends events as you

  The interaction, keyboard and event tools change state in the running app, so test data can be edited or removed. github.com

• Screenshots and logs can show private data

  Screenshots, page snapshots and logs from your app go to your AI provider. Keep real customer data out of the dev build. github.com

• It runs adb and xcrun on your machine

  list_devices and read_logs call the Android and Apple command-line tools to list devices and read logs. github.com

• Written with AI coding tools

  The README says the project was developed with agentic coding tools and may contain bugs. github.com

Security advisories