Skip to content
Agentmart
Submit a tool

Superserve

MCP server for Superserve sandboxes: create, exec, and manage Firecracker microVMs

Connector by superserve-ai · GitHub account verified by the MCP Registry

IndexedApache-2.0Local (stdio)Remote (HTTP)★ 467
Write a review

Install

Works with Claude Code, VS Code, Codex, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/superserve-ai-mcp

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Remote endpoint

  • https://mcp.superserve.ai Remote (HTTP)

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

MCP server for Superserve sandboxes: create, exec, and manage Firecracker microVMs

Use cases: cloud-management, containers-kubernetes

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list and install config. Checked Oct 25, 2026.

Tools
8 read · 9 write · 3 delete
Secrets
2 (API keys, tokens or passwords)
Install scripts
Not scanned yet
Runs as
Node.js package

Tools by what they do 20

Read from the source code; the running server may list different tools.

Read 8 · Look things up without changing anything.

  • sandbox_files_download_dir
  • sandbox_files_list
  • sandbox_files_read
  • sandbox_info
  • sandbox_list
  • sandbox_network_log
  • sandbox_template_list
  • secret_list

Write 9 · Create, change, send or run things.

  • sandbox_attach_secret
  • sandbox_computer
  • sandbox_create
  • sandbox_exec
  • sandbox_files_write
  • sandbox_pause
  • sandbox_preview_url
  • sandbox_resume
  • sandbox_template_create

Delete 3 · Delete, drop, revoke or wipe things.

  • sandbox_detach_secret
  • sandbox_kill
  • sandbox_update

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

  • Authorization
  • SUPERSERVE_API_KEY

Other settings (environment variables or headers).

  • SUPERSERVE_BASE_URL

Network hosts it talks to 1

  • mcp.superserve.ai · found in remote endpoint, install command

Files it touches

  • Any path the agent passes to its tools

Tools (20)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • sandbox_attach_secretBind a secret to a sandbox

    Bind a stored team secret to a sandbox under an environment variable. The sandbox sees a proxy token; the platform swaps in the real credential for outbound requests to the secret's allowed hosts. Takes effect for processes started after this call. Auto-resumes a paused sandbox.

  • sandbox_computerControl a desktop sandbox (computer use)

    Drive a GUI desktop in a Superserve sandbox (requires a desktop template, e.g. superserve/desktop): capture screenshots and send mouse/keyboard input. One action per call. Input actions return a fresh screenshot of the result by default. Screen coordinates are [x, y] pixels with the origin at the top-left. Paused sandboxes are resumed automatically.

  • sandbox_createCreate a sandbox

    Create a new Superserve sandbox (a Firecracker microVM). Returns the sandbox id to use in subsequent tool calls. The sandbox is active and ready immediately.

  • sandbox_detach_secretUnbind a secret from a sandbox

    Remove a secret binding from a sandbox by its environment-variable key. The proxy token is revoked, so requests using it are refused. Auto-resumes a paused sandbox. Idempotent.

  • sandbox_execRun a command in a sandbox

    Run a shell command in a Superserve sandbox and return stdout, stderr, and exit code. Paused sandboxes are resumed automatically — you do NOT need to resume first.

  • sandbox_files_download_dirDownload a directory as a zipread-only

    Description is built at runtime.

  • sandbox_files_listList a directory in a sandboxread-only

    List directory contents in a sandbox. Returns name, type (file/directory/symlink), size, and modification time for each entry.

  • sandbox_files_readRead a file from a sandboxread-only

    Read a file from a sandbox. Returns UTF-8 text by default, or base64 when encoding is set to base64 (use it for binary files). Files larger than 1 MiB are rejected — read a slice with sandbox_exec instead.

  • sandbox_files_writeWrite a file to a sandbox

    Write a file to a sandbox, creating or overwriting it. Parent directories are created automatically. Set encoding to base64 to write binary content. Inline content is limited to 8 MiB; upload larger files with the SDK/CLI.

  • sandbox_infoGet sandbox detailsread-only

    Get current details (status, resources, metadata, timeout) for one sandbox by id. Read-only — does not resume a paused sandbox.

  • sandbox_killDelete a sandboxcan change or delete data

    Permanently delete a sandbox and all its state. Irreversible. Idempotent — deleting an already-deleted sandbox succeeds.

  • sandbox_listList sandboxesread-only

    List your sandboxes (active and paused), optionally filtered by metadata. Returns ids, names, and statuses.

  • sandbox_network_logAudit a sandbox's egressread-only

    List the outbound network connections a sandbox made (newest first) — host, verdict (allowed/blocked), bytes, and credential-injected requests. Use it to audit what a sandbox actually reached and to verify allow_out/deny_out rules. When has_more is true, pass next_cursor as before to fetch the next page. Read-only — does not resume a paused sandbox.

  • sandbox_pausePause a sandbox

    Pause a sandbox to save resources. State is preserved; resume it, or just run a command (exec auto-resumes).

  • sandbox_preview_urlPublish a port and get its preview URL

    Publish a sandbox port and return a browser-ready preview URL. Private ports receive an expiring signed URL; public ports receive a clean URL, and unpublished ports remain closed. This does not verify that a process is listening (start one with sandbox_exec, e.g. `python3 -m http.server 8000`).

Show 5 more tools
  • sandbox_resumeResume a sandbox

    Explicitly resume a paused sandbox. Usually unnecessary — sandbox_exec and the file tools auto-resume a paused sandbox.

  • sandbox_template_createBuild a custom template

    Build a reusable template (base image) so you can launch sandboxes with a specific vCPU/memory/disk shape or preinstalled software. Sandbox resources are inherited from the template and cannot be set at sandbox_create time, so this is how you get, say, a 4 vCPU sandbox. The build runs asynchronously: this returns immediately with status 'building' (or 'pending'). Poll sandbox_template_list (filter by name) until the template's status is 'ready' before passing it to sandbox_create's from_template. A build can take a few minutes.

  • sandbox_template_listList templatesread-only

    List the templates (prebuilt base images) your team can launch sandboxes from. Call this before sandbox_create to choose a from_template instead of guessing a name. Official templates are curated by Superserve, available to every team, and named with the reserved `superserve/` prefix — e.g. `superserve/python-3.11`, `superserve/node-22`, `superserve/openclaw`; names without that prefix are your team's own templates. Returns each template's name, status, and resources; only templates whose status is ready can be used.

  • sandbox_updateUpdate a sandboxcan change or delete data

    Change a sandbox's metadata, egress network rules, auto-delete window, or auto-pause timeout after creation. Use this to lock down or open up outbound network access (rules apply to new connections), or to schedule cleanup of a sandbox you no longer need running. Only the fields you pass are changed.

  • secret_listList team secretsread-only

    List the team's stored secrets you can bind to sandboxes — names, auth type, and allowed hosts. Returns metadata only; secret values never leave the platform. Bind one with sandbox_attach_secret or the secrets argument on sandbox_create. Create new secrets via the Superserve SDK or console.

Compare and alternatives

    Featured in

    Signals

    Stars
    467
    Forks
    53
    Open issues
    5
    Contributors
    11
    Last commit (this folder)
    Oct 16, 2026 (12 days ago)
    Last release
    Oct 23, 2026 (5 days ago)

    From GitHub (fetched Oct 24, 2026).

    Details

    Registry name
    io.github.superserve-ai/mcp
    Version
    0.3.3
    Auth
    Bearer token, API key
    Packages
    npm @superserve/mcp
    License
    Apache-2.0
    Repository
    github.com/superserve-ai/superserve
    Website
    superserve.ai
    First seen
    Oct 24, 2026
    Last checked
    Oct 24, 2026
    Source
    Official MCP Registrygithub-graphql
    Cite this page

    Superserve MCP server. Agent Mart. https://agentmart.dev/connectors/superserve-ai-mcp (last updated 2026-10-24)