RustGIS 0.4.0 lets outside agents drive a desktop GIS over MCP, with an audit log and undo that stays in their lane

RustGIS is a desktop and browser GIS written in Rust, from Qiusheng Wu’s opengeos organization. The repository was created on 10 October, and v0.4.0 went out on 25 October at 01:06 UTC, its fourth tagged release in 15 days. It had about 1,900 stars when we checked.

The README has an unusual disclaimer: “RustGIS is primarily built with Claude Opus 5.5, an AI model by Anthropic, working under human direction and review. Its results are tested, but check them for your own use”. That is the project’s own description. We did not measure how much of the code an AI wrote.

Agents in 0.4.0

Most of the release is GIS work: a map you can tilt and rotate over terrain, Esri File Geodatabases without GDAL, live MySQL, MariaDB and SQL Server tables, time sliders for data cubes, kriging and spatial joins, label classes and SVG layout export. The agent part, in the release notes’ words: the AI Assistant “gains skills and subagents, and can drive agents on your computer through ACP. External agents connect over MCP on HTTP or a file bridge, with an audit log, their own undo and a snapshot of the map as you see it.”

The safety pieces landed as separate pull requests between 17 and 18 October:

• #360 adds the MCP relay, “Let your Agents Control RustGIS”, with run-scoped tokens.
• #503 adds an explicit full-access opt-in for agents.
• #496 keeps an audit log of what agents do.
• #501 gives each agent its own active layer, and agents undo only their own steps.

The README also lists an MCP server in the command-line tool, so a coding agent can attach to RustGIS directly:

claude mcp add rustgis -- rustgis-cli mcp --sample

The built-in assistant works with Anthropic, OpenAI, Gemini, OpenRouter, Ollama or any OpenAI-compatible model, per the README.

Why it matters

Letting an agent operate a desktop app raises two questions: what did it change, and can I roll back its changes without losing mine? RustGIS answers both in the app itself, with a log and an undo history scoped per agent, and gates broad access behind an explicit opt-in. Those are the maintainers’ designs as described in their pull requests. We have not tested how well they hold up. The app is Apache-2.0, runs on Windows, macOS and Linux, and has a WebAssembly build at web.rustgis.app.