Runtime Cloud is answering right now. Last checked 3 min ago. 3 550 installs a week from npm. Last commit 24 Oct 2026.
Linux microVM sandboxes for AI agents: run commands, files, processes, pause and wake.
We read the source, 1 h ago · rules 995398eba69f
A value the model can set ends up inside a file or shell call. That is not a flaw by itself — for a terminal server it is the job — but it is where things go wrong when it is not.
started = await self._sandbox._resuming(lambda box: box.spawn(
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
'mkdir -p -- "$(dirname -- "$1")" && rm -rf -- "$1"',
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
const process = await this.sandbox.spawn(options.command, {
candidates = ([os.path.join(root, dockerfile) + ".dockerignore"] if dockerfile else []) + [
async def exec(self, cmd: list[str], input: Union[str, bytes, None] = None, cwd: Optional[str] = None,
# puts sbx.exec("python3 /workspace/invoice.py", check: true).stdout
it to ~/.ssh/config
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
That is not a flaw by itself — but it is where things go wrong when it is not the job. We re-read this code on every release. Watch it and you hear from us the day another one appears.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 3 min ago.
claude mcp add runtime --transport http https://api.withruntime.com/mcp
https://api.withruntime.com/mcp
[mcp_servers.runtime]
url = "https://api.withruntime.com/mcp"
{
"mcpServers": {
"runtime": {
"url": "https://api.withruntime.com/mcp"
}
}
}
{
"servers": {
"runtime": {
"type": "http",
"url": "https://api.withruntime.com/mcp"
}
}
}
This endpoint answered with an authorization challenge. The server is running, and it signs you in through your browser: there is no API key to paste.
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://api.withruntime.com/mcp | streamable-http | sign-in | 430 ms | 3 min ago |
Cloud Linux VMs for your agent: run code, Docker, files and HTTPS previews in a Sandboxer microVM.
Persistent cloud workspaces for AI agents: run commands, edit files, use git and a browser.
Linux VMs for AI agents: create VMs, run commands, edit files and open preview URLs.
Disposable microVM sandboxes for AI agents: run code, read/write files, git, preview URLs.
Disposable Firecracker microVM sandboxes for agents: run code, snapshot, fork. Needs Linux with KVM.
Give an agent a real Linux VM: run commands, move files, expose a preview URL, destroy it.
JSON-first Coreutils CLI for AI agents. 114 commands with sandbox, dry-run, and MCP support.
A neutral index of cloud sandboxes for AI agents.
Answers built from our own checks of this server.