Disposable Firecracker microVM sandboxes for agents: run code, snapshot, fork. Needs Linux with KVM.
Fcvm is an MCP integration. Disposable Firecracker microVM sandboxes for agents: run code, snapshot, fork. Needs Linux with KVM.
The published pypi package is fcvm-mcp, version 0.7.0. Its declared MCP transport is stdio.
The package declares FCVM_MCP_NETWORK: Pin the network policy for every sandbox: none, or an allowlist such as @pypi,@github; FCVM_MCP_TEMPLATE: Template used when the agent names neither an image nor a template, e.g. python-sandbox; FCVM_MCP_TTL: Stop sandboxes this long after boot unless the agent sets a lifetime, e.g. 4h; FCVM_MCP_IDLE_STOP: Stop sandboxes that saw no exec or file operation for this long, e.g. 30m; FCVM_MCP_SECRETS: Names of environment variables passed into every sandbox as secrets, e.g. GITHUB_TOKEN; FCVM_MCP_FORWARD: Host credentials relayed into every sandbox: ssh-agent, git; FCVM_MCP_CACHE: 1: restricted sandboxes fetch pip and npm packages through the host's mirror; FCVM_MCP_JAIL: 0: don't run sandboxes under the Firecracker jailer even when it is set up; FCVM_BIN: Path of the fcvm command, when it isn't on PATH, in ~/.local/bin or in /usr/local/bin.
Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.
View the publisher’s registry entry · Project repository · Project website. This profile uses version 0.7.0 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.
Browse related code execution & sandboxes MCP servers for tools that cover the same kind of work.
| Variable | Description | Required |
|---|---|---|
| FCVM_MCP_NETWORK | Pin the network policy for every sandbox: none, or an allowlist such as @pypi,@github | Check documentation |
| FCVM_MCP_TEMPLATE | Template used when the agent names neither an image nor a template, e.g. python-sandbox | Check documentation |
| FCVM_MCP_TTL | Stop sandboxes this long after boot unless the agent sets a lifetime, e.g. 4h | Check documentation |
| FCVM_MCP_IDLE_STOP | Stop sandboxes that saw no exec or file operation for this long, e.g. 30m | Check documentation |
| FCVM_MCP_SECRETS | Names of environment variables passed into every sandbox as secrets, e.g. GITHUB_TOKEN | Check documentation |
| FCVM_MCP_FORWARD | Host credentials relayed into every sandbox: ssh-agent, git | Check documentation |
| FCVM_MCP_CACHE | 1: restricted sandboxes fetch pip and npm packages through the host's mirror | Check documentation |
| FCVM_MCP_JAIL | 0: don't run sandboxes under the Firecracker jailer even when it is set up | Check documentation |
| FCVM_BIN | Path of the fcvm command, when it isn't on PATH, in ~/.local/bin or in /usr/local/bin | Check documentation |
Give your assistant a real code sandbox — isolated cloud VMs for actually running the code it writes.
Runs Python code locally within an interactive REPL environment.
Executes Python code within ephemeral Daytona sandboxes, facilitating tasks such as code execution, file manipulation, and web server previewing.
Enables Claude to manage software development projects with project context awareness and code execution via Docker.
Give your agent a persistent workspace: files, a code sandbox and a public URL to publish to.
Build Apps and run code in 30 languages — sandboxed, with persistent sessions for agent loops.