User-level MapleMCP
Runs with the enrolled user’s ordinary Windows or Linux permissions. Use it for files, terminal work, browser control, diagnostics, development, and other tasks that do not require SYSTEM/root.
Menu
Choose the authority.
MapleMCP separates what an account may ask for from what the installed endpoint is allowed to do. Standard and Pro use the same control plane; you choose the operating-system authority.
Desktop authority
Owner Unrestricted
Runs with SYSTEM authority on Windows or root authority on Linux. Intended for owners who deliberately want full-machine administration and self-repair capability.
Privileged does not mean unaudited. Owner Unrestricted removes ordinary action friction; identity, execution ownership, epochs, audit, containment, Emergency Stop, Write Lock, and lockout protections remain.
Capability groups
A device advertises only the groups you grant. Authority and capability are separate: having SYSTEM/root does not automatically publish every tool.
Files & searchRead, edit, move, hash, index, and inspect allowed paths.
Processes & terminalCommands, services, process control, builds, and interactive sessions.
System & diagnosticsHardware, storage, networking, security posture, events, and updates.
BrowserAgent Browser, Companion, tabs, UI, DevTools, and persistent profiles.
Admin familiesSoftware, services, Windows/Linux, network, security, certificates, backup, infrastructure, and fleet administration.
Independent SSHOptional recovery transport with its own gateway, pinned hosts, and server-side credentials.
What changes with Safety Level?
| Mode | Behaviour |
|---|---|
| Guarded / Standard | High-risk mutations can require exact-action approval. Device and account restrictions always apply. |
| Full Send | Pre-authorizes routine mutations within the granted authority; R5/protected actions can still step up. |
| Owner Unrestricted | Trusted-owner privileged authority with fewer action gates. Hard safety floors and explicit session-loss confirmation remain. |
Lockout-prone actions
Network, reboot, credential, agent-repair, and similar operations can cut off the session that requested them.
Double confirm. MapleMCP asks “Are you sure?” and then “Are you really sure?” with an exact action-bound phrase. Supported network changes arm a local rollback watchdog before changing connectivity.
Android
Basic
Device information, app launch, links, and background connection.
Notification Access
Active notifications and media-session controls when Android grants the permission.
Advanced Control
Accessibility tree, screenshot, taps, scroll, text entry, global actions, and gestures after explicit Accessibility enablement.
Lock screen stays Android’s
MapleMCP does not know or defeat your PIN, password, biometric, or device lock.
Two permission layers
- MapleMCP policy: account, device, connector, capability, Safety Level, approvals, Stop/Lock controls.
- Operating system: the actual Windows/Linux/Android authority available to the endpoint.
A tool works only when both layers permit it.