GitHub repository Cua has crossed 20,300 stars in under three months, offering open-source drivers that let AI agents control computers across macOS, Windows, and Linux without stealing cursor focus. This milestone signals a shift in the computer-use agent market, where proprietary APIs from major labs have dominated until now.

The computer-use land grab is real

Computer-use agents represent the most active frontier in AI development today. These agents can click buttons, fill forms, navigate file systems, and verify results on any desktop operating system. Until Cua, the dominant solutions were proprietary APIs from companies like Anthropic, Google, and Microsoft, each locked to their own cloud platforms. Cua changes this by providing a fully open-source stack that runs locally on any machine.

The project's architecture is deceptively simple. It provides drivers that intercept mouse and keyboard events, process them through a vision-language model running locally, and execute actions without taking over the user's cursor. This background execution is critical for production use cases, because agents that steal focus break workflows and frustrate users. Cua's approach keeps the agent invisible until it needs to act, then returns control immediately.

Cross-platform support is the key differentiator. Existing open-source computer-use tools like Open-Interpreter and Adept's ACT-1 only work on Linux or macOS. Cua delivers full support for Windows, which represents the majority of enterprise desktop environments. For founders building agent products that must run on corporate IT-managed Windows machines, this is a game changer.

Why background execution matters more than speed

The most common complaint about computer-use agents is that they feel intrusive. When an agent grabs the cursor and moves it across the screen, it creates a jarring experience for the human watching. Cua's drivers solve this by running the agent in a separate process that communicates with the operating system at the input device level. The agent can click, type, and scroll without the cursor visibly moving, which means users can continue working alongside the agent without interruption.

This architectural choice has deep implications for product design. Founders building agent products can now offer a "co-pilot" mode where the agent works in the background while the human works in the foreground. The agent can monitor a spreadsheet for changes, fill out forms as data arrives, or verify that a deployment completed successfully, all without disrupting the user's flow. This is the difference between a tool that gets used and a tool that gets abandoned after the first demo.

The verification step is equally important. Cua includes built-in screen capture and OCR capabilities that let the agent confirm its actions succeeded. If an agent clicks a "Save" button, it can immediately check that the save dialog appeared or that the file timestamp updated. This verification loop prevents the cascade of errors that plagues most agent implementations, where a single failed click leads to a chain of wrong actions.

The economics of open-source computer-use

Proprietary computer-use APIs typically charge per action, with costs ranging from $0.01 to $0.10 per click or keystroke. For a product that processes thousands of actions per day, these costs add up quickly. Cua eliminates this variable cost entirely, replacing it with the fixed cost of running a local model. For most use cases, this makes the economics of agent products dramatically better.

There are tradeoffs. Proprietary APIs run on powerful cloud GPUs with low latency, while Cua depends on the user's local hardware. A MacBook with an M-series chip can run Cua's recommended vision-language model at acceptable speeds, but older machines may struggle. The project supports model quantization, which reduces memory requirements at the cost of accuracy. Founders building for enterprise customers with standardized hardware can optimize for their specific environment, but consumer-facing products must handle a wider range of hardware capabilities.

The open-source nature also means faster iteration. Cua's repository has already seen contributions from over 50 developers adding support for new operating system features, accessibility APIs, and input methods. Proprietary APIs update on vendor timelines, which can leave founders waiting months for bug fixes or new capabilities. With Cua, a critical bug can be patched in hours by the community.

Security and compliance implications

Enterprise adoption of agent products has been slowed by security concerns. Sending screenshots and keyboard input to cloud APIs creates data leakage risks that compliance teams cannot accept. Cua runs entirely locally, meaning no screen data, keystrokes, or system information ever leaves the machine. This is the difference between a product that gets blocked by IT and one that gets approved for enterprise deployment.

The local execution model also enables air-gapped deployments. Defense contractors, financial institutions, and healthcare organizations that cannot connect their systems to the internet can still use Cua-based agents. The only requirement is a local model file, which can be loaded from a USB drive or internal server. This opens markets that cloud-dependent agent products cannot reach.

There are risks. Running a vision-language model locally means the user must manage model files, which can be several gigabytes in size. The project does not include a built-in update mechanism, so users must manually download new model versions. For non-technical users, this creates a friction point that proprietary APIs avoid. Founders building for this market should consider packaging Cua with a model downloader that handles updates automatically.

What this means for founders

Cua changes the calculus for anyone building computer-use agent products. The open-source, cross-platform, background-execution model removes the two biggest barriers to adoption: cost and intrusiveness. Founders can now build agent products that work on any operating system, run locally for security, and operate without disrupting the user's workflow.

Three actionable strategies emerge from this shift:

  • Build for Windows first. The desktop automation market is dominated by Windows machines in enterprise environments. Cua's Windows support gives you access to this market without the licensing costs of proprietary APIs. Start with Windows automation and expand to macOS and Linux as your product matures.
  • Package the agent as a background service. Cua's architecture enables a new class of product where the agent runs continuously in the background, watching for conditions and acting automatically. This is more valuable than a chat-based agent that requires explicit user commands. Build a product that monitors email, updates CRM records, and fills timesheets without the user lifting a finger.
  • Differentiate on verification, not speed. Every agent product can click buttons. The ones that win are the ones that can confirm their actions succeeded and recover from failures. Invest in building robust verification loops using Cua's screen capture and OCR capabilities. This is where the real product moat lives.

The window for building on top of Cua is open now. As more developers discover the project and contribute, the capabilities will only expand. Founders who move quickly to integrate Cua into their products will have a head start on the competition, with lower costs, better security, and a user experience that does not get in the way.

Sources