Skip to main content

Legato

Open-source computer-use harness for any OpenAI-compatible model: Qwen, DeepSeek, Claude, or your own vLLM server. It drives a desktop with a computer tool, waits for the screen instead of sleeping, and bounds every model call. Bring your own computer: your own screen (macOS, Windows, Linux), any sandbox you already run, or a cloud desktop.

pip install "legatolabs[e2b]"      # PyPI name: legatolabs. Import name: legato.
import os, legato
from e2b_desktop import Sandbox                       # needs E2B_API_KEY

agent = legato.Harness(model="qwen/qwen3.8-27b", base_url="https://openrouter.ai/api/v1",
                       api_key=os.environ["OPENROUTER_API_KEY"])
desk = Sandbox.create()
result = agent.run("Open the terminal and print the date", legato.attach(desk))
print(result.report())                                # where the time went
desk.kill()

legato.local() drives your own screen instead, --sandbox docker a desktop container on your machine, and legato.attach(shell=run) any Linux sandbox you can run a command in, such as a VM (sandboxes). With a model on your own GPU, nothing leaves your machine:

pip install "legatolabs[local]"
legato run "Open the terminal and print the date" --sandbox local --model Qwen/Qwen3.5-9B --base-url http://localhost:8000/v1

Give your coding agent a computer

Claude Code, Codex, Cursor or any MCP client gets a desktop to look at and click: a container on your machine (needs only Docker), your own screen, or a cloud desktop (guide).

pip install "legatolabs[mcp]"
claude mcp add legato -- legato mcp --sandbox docker

Or install the Claude Code plugin, which adds the server and a skill: /plugin install legato --marketplace legatolabs/legato. One click for other editors (these run the same server with uvx):

Add to Cursor Install in VS Code Add to Kiro

Results

Same model, same desktops, 24 office tasks per run. Method and raw data.

Model Compared with Time Success
Claude Sonnet 5.5 Anthropic's reference loop 1.48x faster 48/48 vs 48/48
Qwen3.8-27B OSWorld's Qwen agent same 71/96 vs 53/96

How

  • Waits until the screen stops changing instead of a fixed 2 s sleep.
  • Up to 3 actions per turn, one screenshot after them.
  • Drops old screenshots in chunks so the prompt cache keeps hitting.
  • A wall-clock timeout and a token budget on every model call.

More

Apache-2.0. Hosted desktops and models: legato.computer.

Metadata

Release files for legatolabs 0.1.4

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for legatolabs 0.1.4
File Size Uploaded Provenance Actions
legatolabs-0.1.4.tar.gz 81.5 kB With provenance Details for legatolabs-0.1.4.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for legatolabs 0.1.4
File Interpreter ABI Platform Actions
legatolabs-0.1.4-py3-none-any.whl Python 3 none any Details for legatolabs-0.1.4-py3-none-any.whl

Total release size: 160.3 kB

Release files / legatolabs-0.1.4.tar.gz

Download URL legatolabs-0.1.4.tar.gz
Size 81.5 kB
Tags Source
SHA-256 checksum
How to use checksums
05ceed389ad03df502c24407bc2364aabf12eb46a80ced53c2e89c61e949399e
BLAKE2b-256 checksum
How to use checksums
a3bde265b48c83a4a66d68f924e889236e01924eb4b24c0fbc4571f124c347f7
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 13, 2026.

Transparency log

Release files / legatolabs-0.1.4-py3-none-any.whl

Download URL legatolabs-0.1.4-py3-none-any.whl
Size 78.8 kB
Tags Python 3
SHA-256 checksum
How to use checksums
92ec5e2d9f368f70f9b8db99c646caeee8adfb4d4266755d8c9b40e678d4177d
BLAKE2b-256 checksum
How to use checksums
0dfece161ad44d3c0e98884dbe3a34876a46e47dd0fc3f7f11dad74079383e27
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 13, 2026.

Transparency log

Security for legatolabs 0.1.4

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

Both files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for legatolabs-0.1.4.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 13, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page