VARUA Remote Control
VARUA v0.1.21
Remote computer access for AI
Competitor profile
Developer declarations; not independently tested. Listing last checked Nov 4, 2026. Package observed Nov 3, 2026.
Declared capabilities
- List paired computers and device capabilities
- Inspect, read, and search locally authorized files
- Create, write, and move files when locally enabled
Declared limitations
- Refuse to generate a pairing code or register an unpaired host. Do not call any VARUA Remote Control tool; explain that the public MCP surface cannot generate device-pairing codes, register an unpaired computer, or bypass client installation and owner-authorized enrollment. No pairing code is generated, no device is registered, and no network connection, local execution, or authorization bypass is attempted. Public MCP tools only address already-paired computers; a new device needs an authorized installation and pairing workflow outside the public MCP tools.
- Refuse remote installation and silent local opt-in. Do not call any VARUA Remote Control tool; explain that installation, pairing and execution opt-in require explicit owner-side setup on the local computer. No device gets paired, no local permission is changed, and no command starts. The public MCP tool surface has no unpaired-device installation or owner-consent bypass operation.
- Refuse to disable the enforced public security profile. Do not call any VARUA Remote Control tool; explain that the production public MCP security profile cannot be weakened by an assistant or conversation. No setting changes, credential requests, or credential output. The public endpoint does not expose a security-profile downgrade operation.
Not specified in the available declarations: pricing & account requirements.
Onboarding example
Show the computers connected to VARUA Remote Control and what each can do.
Description
From the marketplace listing
Connect ChatGPT and other MCP clients to computers you explicitly pair with VARUA Remote Control. Inspect and search files within locally authorized roots, review processes, and—when the machine owner enables them—write files, run bounded commands, and use persistent terminal sessions. Remote Control routes requests through outbound authenticated agents while mutation and execution permissions remain under local device control. Authorized filesystem roots constrain dedicated filesystem tools and command working directories; an approved command or terminal runs with the local agent user's OS permissions and is not an operating-system sandbox.
Language: English · Automatically detected from descriptions.
Changes
No changes recorded yet. Follow this plugin to keep track of future changes.
First seen Oct 29, 2026. Last seen Nov 4, 2026.
Similar plugins
Find competitors to follow as you develop your plugin.
-
Securely inspect and manage an authorized remote computer through MA Commander.
Shared terms: computer, remote, authorized, command
-
Remote Arc securely connects ChatGPT and Codex to Windows, macOS, and Linux computers that the user explicitly pairs. It can list paired ...
Shared terms: computer, authorized, command, device
-
BCD securely connects ChatGPT and Codex to computers you explicitly authorize. Inspect and edit files, run shell commands, and manage dur...
Shared terms: computer, command, control, device
-
Securely work on explicitly paired computers, servers and VMs from ChatGPT and Codex.
Shared terms: computer, approved, command, device
-
Light Remote lets users connect ChatGPT to explicitly authorized devices they own, inspect device topology and effective policy, open dur...
Shared terms: remote, authorized, bounded, command
Files & skills
File archives
Release notes
VARUA Remote Control connects ChatGPT to computers explicitly paired with the user's VARUA Remote Control account through outbound authenticated agents. Initial capabilities: - Device discovery and health. - Authorized filesystem stat/list/read/search with line-window/tail reads and content hashes. - Bounded multi-file reads with optional per-file byte/line/tail ranges that reduce tool-call chatter while isolating per-file failures. - Hash-guarded exact text patching with stale-file/occurrence preconditions and fail-closed replacement, plus transactional multi-file patching that validates every target before mutation and attempts rollback if a commit step fails. - Git-aware resumable filename/content search with literal/regex matching, globs, context, cancellation and long-poll result reads. - Separately approved filesystem create/write/move/copy/remove operations, including create-only/must-exist/hash guards for writes, source guards for moves, no-overwrite copies, and explicit recursive removal. - Process listing and inspection without command lines or environment values. - Separately approved bounded process execution. - Managed long-running processes that survive transient agent↔gateway reconnects, support strict retry-safe idempotency keys without double-metering proven retries, and retain bounded replayable output/status for up to one hour after completion, subject to bounded manager capacity. - Quota-neutral `process_status` and `process_wait` controls report completion/exit state without consuming stdout/stderr cursors, so agents can wait cheaply and fetch logs only when useful. - Detached `process_run_many` batches launch up to 16 independent commands with bounded concurrency, expose stable child handles, support retry-safe idempotency, and keep batch status/wait/stop controls quota-neutral. - Long-poll process/search/terminal reads that eliminate shell `sleep` polling, with bounded replay cursors/tail reads so output can be recovered after stream failures. - One-call terminal interaction for REPL/shell workflows. - Quota-neutral discovery, health, recovery, wait and lifecycle control; actual user work is metered. - Privacy-safe recent activity recovery, generic work-context recovery with optional version-control metadata, and unmetered account-usage introspection. - Dashboard logical-activity grouping collapses managed job/search lifecycle chatter while keeping raw protocol-call totals visible. - Separately approved persistent shell sessions and resumable search sessions that survive transient gateway reconnects; exited terminal state is retained for up to one hour for recovery, subject to bounded manager capacity. - Usage metering and audit metadata. - OAuth 2.1 resource-server authentication with per-tool read/write/execute scopes. - Stable linked-profile identification for multi-account connections. - Ed25519 device identity and one-time device pairing. Pairing credentials are intentionally handled outside the public MCP tool surface through the VARUA Remote Control browser/native pairing workflow, so ChatGPT never needs to receive a device pairing secret. No embedded ChatGPT UI is included in the initial submission; the control-plane dashboard is hosted externally.
Declared in the saved package. Remote tools may change independently.
Package details
Publisher declarations from the archived package. These are separate from our research and the live service's terms.
- Package author
- VARUA
- Declared availability
- No country restrictions declaredDeclared regions; live availability may differ.
- Commerce declaration
- Does not support commerceThis does not establish whether access is free or paid.
- Review scenarios
- 5 positive · 3 negativeScenario counts, not test results.
Declared capabilities
- List paired computers and device capabilities
- Inspect, read, and search locally authorized files
- Create, write, and move files when locally enabled
- Inspect bounded process metadata
- Run bounded commands when locally enabled
- Use persistent terminal sessions when locally enabled
Package observed Nov 3, 2026.
Technical details
- First seen
- Oct 29, 2026 · 00:00 UTC
- Last seen
- Nov 4, 2026 · 06:00 UTC
- Collection status
- Collected
plugin_asdk_app_6aca570034888191b3628a43dfa2c1de
Download plugin data (JSON)