Flyto Core MCP Server

by flytohub Your server? Claim it

local only

Flyto Core runs on your own machine — the client starts it, so there is no endpoint to ping. 3 383 installs a week from pypi. Last commit 7 Sep 2026.

Execution engine for AI agents. 412 modules: browser, file, Docker, data, crypto.

Installs per day peak 1 314 · avg 533 · -7% w/w

a month agotoday

3 383

Installs / week

pypi · flyto-core

481

Stars

0 open issues

7 Sep 2026

Last commit

0 releases in 90 days

Apache-2.0

License

Python

What the code does

We read the source, 19 h ago · rules 3dff92dd89df

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Builds a file path from a variable src/core/enterprise/rpa/impl.py:631, src/core/modules/audit/report_generator.py:60, [пакет] src/core/enterprise/rpa/impl.py:631 и ещё 1

            filepath = os.path.join(self._screenshot_dir, filename)

Runs an external command src/core/modules/atomic/document/word_to_pdf.py:183, [пакет] src/core/modules/atomic/document/word_to_pdf.py:183, src/core/plugin/loader.py:596 и ещё 1

        subprocess.run([

Runs with shell=True src/core/modules/validator.py:736, [пакет] src/core/modules/validator.py:736

            caps.shell = True

Known vulnerability in the package flyto-core · GHSA-2956-977x-2w3r

Known vulnerability in the package flyto-core · GHSA-794r-5rp2-fpg8

Known vulnerability in the package flyto-core · GHSA-c9hr-64h3-gxpc

Known vulnerability in the package flyto-core · PYSEC-2026-2481

Known vulnerability in the package flyto-core · GHSA-h9f9-h6gm-wc85

Known vulnerability in the package flyto-core · GHSA-hr7p-wg7r-hg9m

Known vulnerability in the package flyto-core · GHSA-jx74-cqjv-2c67

Known vulnerability in the package flyto-core · GHSA-qq9q-xgm3-xv9g

Known vulnerability in the package flyto-core · PYSEC-2026-2482

Known vulnerability in the package flyto-core · PYSEC-2026-3568

Known vulnerability in the package flyto-core · PYSEC-2026-3569

Known vulnerability in the package flyto-core · PYSEC-2026-3570

Known vulnerability in the package flyto-core · PYSEC-2026-3571

Known vulnerability in the package flyto-core · PYSEC-2026-3572

Known vulnerability in the package flyto-core · PYSEC-2026-3573

Known vulnerability in the package flyto-core · GHSA-pgwh-4jj4-qm8v

Dumps the whole environment src/core/engine/context/layers.py:298, src/core/safe_env.py:53, [пакет] src/core/engine/context/layers.py:298 и ещё 1

            source = dict(os.environ)

Touches key and credential files workflows/pentests/file_misconfig.yaml:24, [пакет] workflows/pentests/file_misconfig.yaml:24

        - { method: GET, url: "{{target_url}}/api/download?name=../../../etc/shadow" }

Sends data to a third-party sink src/core/modules/third_party/communication/messaging/telegram.py:254, [пакет] src/core/modules/third_party/communication/messaging/telegram.py:254

        url = f"https://api.telegram.org/bot{self.bot_token}/sendMessage"

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add flyto-core -- uvx flyto-core

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "flyto-core": {
      "args": [
        "flyto-core"
      ],
      "command": "uvx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.flyto-core]
command = "uvx"
args = ["flyto-core"]

.cursor/mcp.json

{
  "mcpServers": {
    "flyto-core": {
      "args": [
        "flyto-core"
      ],
      "command": "uvx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "flyto-core": {
      "args": [
        "flyto-core"
      ],
      "command": "uvx"
    }
  }
}

Alternatives to Flyto Core

same job, measured the same way

Ghostfox

by autokeren

Self-hosted stealth browser for AI agents: Firefox engine + Rust MCP runtime

local only

Plasmate

by plasmate-labs

Browser engine for AI agents. HTML in, Semantic Object Model out. 16x fewer tokens.

32 installs/wk local only

Anakin

by anakin

Web data for AI agents: scrape, crawl, search, deep research, site monitoring, browser automation

328 installs/wk local only

B4n1Web

by b4n1-com

Ultra-lightweight browser engine for AI agents. 33 MCP tools, 4 SDKs, cross-platform.

629 installs/wk local only

Safari DevTools MCP

by hayodev

MCP server for Safari DevTools — browser debugging and automation for AI coding agents

55 installs/wk local only

Fortress

by tiliondev

Stealth browser for AI agents: fetch pages behind Cloudflare/DataDome/CAPTCHA, extract clean data.

131 installs/wk local only

Browser Agent

by runbook-ai

MCP server for browser automation with AI agent

62 installs/wk local only

Devloop

by vincentvella

Browser + dev-server logs on one correlated timeline, for Claude Code and AI agents.

97 installs/wk local only

Flyto Core — questions

Answers built from our own checks of this server.

Why is there no uptime for Flyto Core?

Flyto Core runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package flyto-core was installed 3 383 times last week.

How do I connect Flyto Core?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls flyto-core straight from pypi; nothing to host, nothing to sign up for.

How many people use Flyto Core?

The pypi package flyto-core was installed 3 383 times in the last week. Week over week that is -7%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Flyto Core open source?

Yes — it is published under the Apache-2.0 licence, written in Python and 481 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.