Flyto Core MCP Server

by flytohub Your server? Claim it

local only

Flyto Core runs on your own machine — the client starts it, so there is no endpoint to ping. 2 530 installs a week from pypi. Last commit 30 Oct 2026.

Execution engine for AI agents. 412 modules: browser, file, Docker, data, crypto.

Installs per day peak 1 425 · avg 370 · -10% w/w

a month agotoday

2 530

Installs / week

pypi · flyto-core

484

Stars

0 open issues

30 Oct 2026

Last commit

from GitHub

Apache-2.0

License

Python

What the code does

We read the source, 2 d ago · rules 995398eba69f

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Builds a file path from a variable src/core/enterprise/rpa/impl.py:631, src/core/modules/audit/report_generator.py:60, [пакет] src/core/enterprise/rpa/impl.py:631 и ещё 1

            filepath = os.path.join(self._screenshot_dir, filename)

Runs an external command src/core/modules/atomic/document/word_to_pdf.py:183, [пакет] src/core/modules/atomic/document/word_to_pdf.py:183, src/core/plugin/loader.py:596 и ещё 1

        subprocess.run([

Runs with shell=True src/core/modules/validator.py:736, [пакет] src/core/modules/validator.py:736

            caps.shell = True

Known vulnerability in the package flyto-core · GHSA-2956-977x-2w3r

Known vulnerability in the package flyto-core · GHSA-794r-5rp2-fpg8

Known vulnerability in the package flyto-core · GHSA-c9hr-64h3-gxpc

Known vulnerability in the package flyto-core · PYSEC-2026-2481

Known vulnerability in the package flyto-core · GHSA-h9f9-h6gm-wc85

Known vulnerability in the package flyto-core · GHSA-hr7p-wg7r-hg9m

Known vulnerability in the package flyto-core · GHSA-jx74-cqjv-2c67

Known vulnerability in the package flyto-core · GHSA-qq9q-xgm3-xv9g

Known vulnerability in the package flyto-core · PYSEC-2026-2482

Known vulnerability in the package flyto-core · PYSEC-2026-3568

Known vulnerability in the package flyto-core · PYSEC-2026-3569

Known vulnerability in the package flyto-core · PYSEC-2026-3570

Known vulnerability in the package flyto-core · PYSEC-2026-3571

Known vulnerability in the package flyto-core · PYSEC-2026-3572

Known vulnerability in the package flyto-core · PYSEC-2026-3573

Known vulnerability in the package flyto-core · GHSA-pgwh-4jj4-qm8v

Touches key and credential files workflows/pentests/file_misconfig.yaml:24, [пакет] workflows/pentests/file_misconfig.yaml:24

        - { method: GET, url: "{{target_url}}/api/download?name=../../../etc/shadow" }

Sends data to a third-party sink [пакет] src/core/modules/third_party/communication/messaging/telegram.py:254, src/core/modules/third_party/communication/messaging/telegram.py:255

        url = f"https://api.telegram.org/bot{self.bot_token}/sendMessage"

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add flyto-core -- uvx flyto-core

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "flyto-core": {
      "command": "uvx",
      "args": [
        "flyto-core"
      ]
    }
  }
}

~/.codex/config.toml

[mcp_servers.flyto-core]
command = "uvx"
args = ["flyto-core"]

.cursor/mcp.json

{
  "mcpServers": {
    "flyto-core": {
      "command": "uvx",
      "args": [
        "flyto-core"
      ]
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "flyto-core": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "flyto-core"
      ]
    }
  }
}

Alternatives to Flyto Core

same job, measured the same way

Ghostfox

by autokeren

Self-hosted stealth browser for AI agents: Firefox engine + Rust MCP runtime.

233 installs/wk local only

Browser Use

by browser-use

Browser agents and stealth cloud browsers for AI: run web tasks, fill forms, extract data.

1 534 493 installs/wk 7 tools answering

SPACE-CORE

by space-core

Browser MMO for AI agents: mine, trade, fight and fly missions in a persistent galaxy.

35 tools answering

ChromeWalk

by gator8125

Local browser automation for AI agents: real-browser fetch, capture, smoke tests, cross-engine QA.

local only

ChromeWalk

by chromewalk

Local browser automation for AI agents: real-browser fetch, capture, smoke tests, cross-engine QA.

local only

Plasmate

by plasmate-labs

Browser engine for AI agents. HTML in, Semantic Object Model out. 16x fewer tokens.

45 installs/wk local only

Irmu — Web Data MCP

by polgoide

Web scraping, browser automation, screenshots and AI data extraction for AI agents via MCP.

answering

Anakin

by anakin

Web data for AI agents: scrape, crawl, search, deep research, site monitoring, browser automation

70 installs/wk local only

Flyto Core — questions

Answers built from our own checks of this server.

Why is there no uptime for Flyto Core?

Flyto Core runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package flyto-core was installed 2 530 times last week.

How do I connect Flyto Core?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls flyto-core straight from pypi; nothing to host, nothing to sign up for.

How many people use Flyto Core?

The pypi package flyto-core was installed 2 530 times in the last week. Week over week that is -10%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Flyto Core open source?

Yes — it is published under the Apache-2.0 licence, written in Python and 484 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.