Fork

Your local agent, connected to every Fork sandbox you control.

Codex, Claude Code, Cursor, and other OAuth-capable MCP clients can inspect code, edit it, run commands, test the real website, and create safe restore points.

https://agent.fork-dev.miguelmau.com/mcp

Code workspace

Read, search, edit, and run bounded shell commands inside the selected microVM.

Rendered website

Open the real frontend, click and type, take screenshots, and inspect console or network failures.

Restore points

List, create, preview, and restore LVM-backed snapshots without GitHub.

Tools

24 tools exposed by the production server

Workspace

2 tools
fork_list_sandboxes

List only the Fork sandboxes the signed-in account currently owns, edits, or may control as a super admin.

readread only
fork_workspace_status

Inspect one authorized sandbox's health, hostname, agent availability, and current active work.

readread only

Files & commands

6 tools
fork_list_files

List non-secret files under an authorized sandbox's /workspace.

readread only
fork_read_file

Read one bounded UTF-8, non-secret workspace file and return its SHA-256 for safe edits. If redacted is true, use fork_edit_file so hidden values are preserved.

readread only
fork_search

Search bounded non-secret workspace text files without exposing .env or credential files.

readread only
fork_write_file

Atomically create or replace a UTF-8 workspace file. Existing files require the hash from fork_read_file.

write
fork_edit_file

Replace one exact text occurrence in an existing workspace file using optimistic concurrency.

write
fork_exec

Run a bounded shell command as root inside the authorized Firecracker microVM, never on the Fork host. Output is secret-redacted.

write

Snapshots

3 tools
fork_list_snapshots

List restorable snapshots for one authorized sandbox, including their immutable preview URLs.

readread only
fork_create_snapshot

Create a crash-consistent named LVM-thin snapshot after a coherent unit of work.

write
fork_restore_snapshot

Restore one authorized sandbox from a snapshot. This replaces its current workspace state.

writedestructive

Browser

13 tools
fork_preview_open

Open a relative path in this sandbox's real rendered frontend.

browser
fork_preview_snapshot

Inspect the current page's accessibility tree.

browserread only
fork_preview_screenshot

Capture the current frontend as an image for visual verification.

browserread only
fork_preview_click

Click one uniquely identified element in the sandbox preview.

browser
fork_preview_type

Fill or append text in one preview control; the entered value is not echoed.

browser
fork_preview_select

Select values in one preview select control.

browser
fork_preview_press

Press a key or shortcut, optionally on a uniquely identified element.

browser
fork_preview_hover

Hover one uniquely identified preview element.

browser
fork_preview_wait

Wait briefly for a selector, visible text, or page settling.

browser
fork_preview_viewport

Resize the preview to a desktop, tablet, or mobile viewport.

browser
fork_preview_console

Read recent browser console messages and uncaught errors.

browserread only
fork_preview_network

Read recent failed requests and HTTP error responses.

browserread only
fork_preview_reset

Discard this sandbox's browser state and start clean.

browserdestructive

Connect

Approval happens in your browser and access always follows your live Fork role.

Codexcodex mcp add fork --url https://agent.fork-dev.miguelmau.com/mcp codex mcp login fork
Claude Codeclaude mcp add --transport http fork https://agent.fork-dev.miguelmau.com/mcp

Secrets and dotenv files are blocked, file writes use hash-based conflict checks, browser access stays on the chosen sandbox, and bearer tokens never enter mutable guest code.