TheHalfMoon/Orcel

Your computer, your terms.
A local-first, approval-driven MCP gateway that helps AI assistants work within the boundaries you control.
Website ·
Get started ·
Releases ·
Contribute ·
Security ·
Brand kit
## Why Orcel?
Orcel is an open-source computer-access authority layer for MCP-compatible AI agents. It connects supported clients, including ChatGPT through the OpenAI Secure MCP Tunnel, to explicitly trusted local workspaces. Read operations are bounded; sensitive changes require approval on your own Windows desktop. A client cannot grant itself new privileges.
| Designed for | What you get |
| Your authority | Workspace trust and narrowly scoped, one-time local approvals; Windows Hello for high-risk actions |
| Your machine | Local-first operation without an inbound port for the ChatGPT tunnel integration |
| Your choice of clients | Local MCP over stdio or token-protected loopback HTTP, plus the remote 26-tool core profile |
| Your confidence | Fail-closed policy, release checksums/provenance, security documentation, and public CI |
Boundaries matter: Orcel is not an unrestricted remote shell, general-purpose remote desktop, or blanket browser/UI automation service. The local tool surface has 31 tools; remote clients see a smaller 26-tool core profile. Desktop observation, clipboard, and web fetch are local-only, and UI actuation is not exposed over MCP. Read the current limitations before installing.
Website: https://thehalfmoon.github.io/Orcel/
Canonical releases: https://github.com/TheHalfMoon/Orcel/releases
> Platform & release status: Orcel's current source targets Windows 10/11 x64, but source changes on main are not automatically published binaries. The published v0.1.0 release is an archival Cotra-era build, not a qualified Orcel installer. Check release notes and asset names before following any installation example.
> Identity migration: Orcel is the current product and repository name. Existing clients, credentials, and trusted state are not automatically migrated from historical names; consult the identity migration record before updating.
## Explore and contribute
Start here: Install, Configure, Connect ChatGPT, or use local MCP.
Learn the design: Architecture and delivery plan, threat model, and current state.
Help improve Orcel: Open issues and proposals, contribution guide, support, code of conduct, and project stewardship.
Check what ships: Changelog, release assets, source license, and required third-party notices.
Use the brand correctly: Identity specifications and brand media kit.
## What ChatGPT can do through Orcel
Local MCP clients get the default desktopstructured profile: exactly the 45 tools below (the generated contract with every tool's bounds is docs/p16/TOOLCONTRACT.md; a test keeps this table equal to the profile):
| Area | Tools | Approval |
| Status | systemstatus, workspaceget | none (read-only) |
| Files in a trusted workspace | fsstat, fslist, fsread, fsreadrange, fssearch, fsfind | none (read-only, bounded) |
| File writes | fswritepreview, fswrite, fsedit, fsmkdir, fsmove | local approval for each write, bound to the exact content and current file hash |