Running the app
Launch from source
uv sync
uv run python main.py
The window opens on the Processes tab and immediately begins collecting live data. On first launch it also kicks off every read-only scan in the background so the other tabs are populated by the time you switch to them.
Elevation
Some actions need administrator rights:
- Killing system-owned processes.
- Reading certain protected locations during scans.
Run the app from an administrator terminal for full access. Running unelevated is perfectly safe — you simply get access denied on privileged operations, and the app tells you so rather than failing silently.
Live refresh controls
The process and connection lists refresh on a timer. You control it from two places:
- The Pause / Resume button in the status bar (bottom-right) freezes or resumes the live feed. Its tooltip shows the current interval.
- File › Settings… sets the refresh interval (see Settings & themes).
While paused, scans and manual actions still work — only the automatic polling stops.
The status bar
The bottom status bar shows:
- A live count —
N processes · M connections. - The MCP indicator (
MCP ○stopped /MCP ●listening) — hover it for the endpoint. See the MCP server. - The Pause / Resume toggle.
Hovering menu items shows a one-line description of each command here too.
Closing
Closing the window remembers your window size and position, tears down the MCP server if it was running, stops any in-flight scans, and shuts down the collection subprocess cleanly.