GhostDesk

GhostDesk is an open-source platform designed to enable AI agents to operate within a fully isolated Linux virtual desktop environment. By providing a sandboxed desktop, GhostDesk allows agents to interact with applications visually and through input devices, mimicking human actions such as seeing the screen, clicking, and typing. This approach eliminates the need for API integrations or glue code, as agents can automate workflows directly through the user interface, tolerating changes in application interfaces without requiring ongoing maintenance of integration layers.

The system is compatible with the Model Context Protocol (MCP), supporting clients such as Claude Code, Cursor, VSCode, OpenCode, and OpenClaw, as well as any other MCP-compliant client. Users can select from a range of large language models, including both proprietary cloud-based options and open-source local models, with no enforced vendor lock-in. GhostDesk can be deployed on the user's own infrastructure for self-hosting, ensuring that data remains within the organization's perimeter, or used as a SaaS solution. The architecture is designed for scalability, supporting orchestration and auto-scaling of agent fleets to handle varying workloads.

Security and governance are emphasized through features such as complete isolation of the agent's desktop from the host system, audit trails for every action, and configurable autonomy levels that allow for either full automation or human approval on a per-action basis. Enterprises can benefit from custom sandbox architectures, fine-grained permissions, secure secrets management, and compliance with infrastructure standards. GhostDesk also offers services for integrating custom skills tailored to in-house applications, business tools, and legacy systems, as well as support for hybrid cloud and on-premise deployments.

The platform is open source, providing auditable and deployable code, and is maintained by YV17labs. Technical teams and enterprises seeking to move beyond traditional low-code automation tools are the primary audience. Maintenance and ongoing support are available through annual contracts, which include dedicated service-level agreements and security updates.