FileCart

UI-TARS Desktop 0.3.1

GUI Agent for computer control using UI-TARS vision-language model

filecart Mac Updated Oct 12, 2026
Download
7downloads
1this week
FreeLicense
0reviews

About UI-TARS Desktop

GUI Agent for computer control using UI-TARS vision-language model
Release info Update on Oct 08, 2026
Release notes This release closes several security issues in the Agent TARS CLI server (@agent-tars/cli, @tarko/agent-server). It changes how the server can be reached, so please read Upgrading from 0.3.0 before you update.

Upgrading from 0.3.0

If you run the CLI on your own machine and open it at http://localhost, nothing changes.

Otherwise:
• The server only listens on 127.0.0.1 by default. It used to listen on all network interfaces. To reach it from another machine or from outside a container, pass --host, e.g. --host 0.0.0.0.
• A non-loopback --host requires an access token. Set one with --auth-token or TARKO_AUTH_TOKEN (at least 16 characters). If you set none, a random token is generated on every start and printed with a ready-to-open ?token= link, so old links stop working after a restart. Set a fixed token if you need stable links.
• Domains, reverse proxies and port forwarding need TARKO_ALLOWED_HOSTS. Requests whose Host header is not a loopback name, an IP address or the configured --host are rejected with 403 Invalid Host header. Add your hostname, comma-separated: TARKO_ALLOWED_HOSTS=agent.example.com.
• A Web UI served from a non-localhost origin needs TARKO_ALLOWED_ORIGINS. Otherwise creating a session fails with 403 Origin not allowed. Use the full origin: TARKO_ALLOWED_ORIGINS=https://agent.example.com.
• agentOptions from requests and URLs only accepts agentMode. This applies to /creating?agentOptions=..., welcome cards and POST /api/v1/sessions/create. Any other key (mcpServers, model, aioSandbox, ...) is rejected with 400. Configure those on the server instead.
• Direct API calls need a CSRF token. Fetch one from GET /api/v1/csrf-token and send it as the x-csrf-token header on POST requests. When the server requires an access token, also send Authorization: Bearer .

Example for a remote server behind a domain:

bash
TARKO_AUTH_TOKEN= \
TARKO_ALLOWED_HOSTS=agent.example.com \
TARKO_ALLOWED_ORIGINS=https://agent.example.com \
agent-tars --host 0.0.0.0…
Listing dataHomebrew Cask

Reviews

No reviews yet. Be the first to review UI-TARS Desktop.

Used UI-TARS Desktop? Tell other visitors what you thought.

Log in to write a review

Other products by this publisher

Most viewed Mac Miscellaneous

  1. 1 OpenChamber 2.7.0 Desktop and web interface for OpenCode AI agent 137
  2. 2 OpenClaw 2026.11.2 Personal AI assistant 106
  3. 3 A Better Finder Attributes 7.55 File and photo tweaking tool 90
  4. 4 SwiftDefaultApps 2.0.1 Replacement for RCDefaultApps, written in Swift 89
  5. 5 AgentsView 0.47.0 Browse, search and analyse your past AI coding sessions 82
  6. 6 Yap 0.1.16 On-device voice dictation 80
  7. 7 Craft Agents 0.15.9 AI assistant for connecting and working across data sources 78
  8. 8 86Box 6.0 Emulator of x86-based machines based on PCem 74
  9. 9 Taphouse 1.5.9.2 Native GUI for Homebrew package management 74
  10. 10 5ire 0.15.4 AI assistant and MCP client 72

Most downloaded Mac Miscellaneous

  1. 1 WaveForms 3.25.1 Virtual instrument suite for Digilent Test and Measurement devices 63
  2. 2 p2p.kiwi 3.10.0 Cross-platform screen sharing tool 62
  3. 3 Send to Kindle 1.1.1.259 Tool for sending personal documents to Kindles from Macs 58
  4. 4 Whalebird 6.3.1 Mastodon, Pleroma, and Misskey client 58
  5. 5 LocationSimulator 0.2.2 Application to spoof your iOS, iPadOS or iPhoneSimulator device location 54
  6. 6 WhoDB 0.138.0 Database management tool with AI-powered features 54
  7. 7 DOSBox 0.74-3 Emulator for x86 with DOS 53
  8. 8 Overlayed 0.6.2 Modern, open-source, and free voice chat overlay for Discord 53
  9. 9 Submariner 3.4 Subsonic client 53
  10. 10 86Box 6.0 Emulator of x86-based machines based on PCem 52