Exo Control

Realtime PC eyes and hands for any AI agent

Any model · MCP · CLI · Python
Compact. Leased. Honest.

Install · Agent instructions · Safety · Exo Launcher

Exo Control is a Windows Python library that gives any AI eyes and hands on the desktop. Same ops over MCP, CLI, or Python. Not an app and not a Setup.exe — install with pip.

Works with Exo Launcher when it is installed. Not required.

Install

pip install exo-control
exo-control doctor

Optional browser CDP: pip install "exo-control[browser]" then playwright install chromium.

Pin: pip install "exo-control==2.1.0" or pip install "git+https://github.com/ImAvgErix/ExoControl.git@v2.1.0".

State lives under ~/.exo/. Legacy ~/.aether/ is migrated automatically.

MCP

{
  "mcpServers": {
    "exo-control": {
      "command": "python",
      "args": ["-m", "exo_control.slim_mcp_server"]
    }
  }
}

Do not set PYTHONPATH at a second tree. exo-control doctor reports shadowing.

Quick script

exo-control script examples/notepad.json

from exo_control import ExoExecEngine

ExoExecEngine().execute({
    "steps": [
        {"op": "lease_acquire", "agent_id": "demo", "task": "notepad", "ttl_sec": 90},
        {"op": "launch", "app": "notepad"},
        {"op": "type", "text": "hello from Exo Control"},
        {"op": "verify", "text": "hello from Exo Control"},
    ],
    "finally": [
        {"op": "window_close", "title": "Notepad", "discard_unsaved": True},
        {"op": "lease_release"},
    ],
})

Failed steps do not attach screenshots unless screenshot_on_fail: true. Use {"op":"last_error"}. Drop AGENTS.md into any model's rules.

What it can do

{"op":"help"} lists the core ops. detail=true is the full catalog.

Safety

• One desktop lease; lease_status never returns the token
• Destructive OS ops need confirm=true (agent assertion, not a human prompt)
• Files stay in EXO_FILE_ROOTS unless the operator sets EXO_ALLOW_OUTSIDE_ROOTS=1
• Hard denies: anti-cheat, unnamed PID kill, critical services, non-loopback CDP
• SECURITY.md

Docs

License

MIT