| How it sees the screen | Accessibility tree first (UI Automation, macOS Accessibility, AT-SPI2), OCR and marked screenshots as fallback, one reference space | Screenshots plus accessibility tree with element refs, Peekaboo on macOS by default | Set-of-marks screenshots, vision or accessibility-tree modes | Screenshots and coordinates, no accessibility tree given to the model, images downscaled to about 1372x887 |
|---|
| Model calls and token use | One model call plans many steps (up to 100), Melaya runs and checks them | Users report 80 to 150k input tokens per task | Not documented | Reviewers found it slow and token-hungry (a 5-hour Pro allowance used in 30 minutes, PCWorld) |
|---|
| Verified writes, no false success | Every write checked against the window, "no effect" instead of a false success, admin windows reported up front | Not documented | Documented: on elevated Windows windows, capture returns 0 elements and click reports success while doing nothing | Not documented |
|---|
| Background control on Windows | Background first through accessibility patterns, says when it had to use the foreground | Windows and Linux driver marked experimental, primary display only | Background-first by design | Works on the visible screen on Windows (background windows on macOS 15+) |
|---|
| Linux and headless VMs | Linux on X11 and Wayland, plus headless servers and VMs with npx @melaya/runner --computer | Windows and Linux driver marked experimental | Not documented | Not documented |
|---|
| Per-app permission levels | View, click or full control per app, sensitive apps off by default | No per-action confirmation, safety through durable arming and tool policy | Approval modes, including a bounded mode | Strong per-app approval tiers |
|---|
| Stop and safety | Stop button and shortcut, pauses when you touch the mouse or keyboard, never types into password fields | CVE-2026-25253 (one-click RCE) and malicious skills found in its skill hub | Relies on private macOS APIs for background input, which can break with OS updates | Esc stops it from anywhere, one session at a time (machine-wide lock) |
|---|
| Phone, browser and computer in one | Yes: the same agents drive your Android phone, your browser and your computer | Not documented | Not documented | Not documented |
|---|
| Scheduled runs on your computer | Scheduled pipelines run on your own computer, kept awake for the run | Cron and heartbeat scheduling | Not documented | The machine must stay awake for local apps |
|---|
| Any model, MCP access | Claude, GPT, Gemini, Qwen or local models, and reachable from Claude Code, Codex and Cursor over MCP | Not documented | Not documented | Runs on Claude, a very capable model |
|---|