Persistent cloud workspaces for AI agents: run commands, edit files, use git and a browser.
Inferred from the transports this listing declares (stdio, streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.
SHARDFLUX_API_KEYAPI keyrequiredScoped Shardflux project API key (sfk_<key id>_<secret>). Its tool permissions decide which workspace tools are listed.
SHARDFLUX_WORKSPACE_KEYAPI keyoptionalPin one workspace: workspace_key becomes optional on every tool and any other key is refused (workspace_pinned).
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
project_space_readerOpen a read-only workspace to fetch saved project branches and transcripts.Open a read-only workspace to fetch saved project branches and transcripts.
No input schema was published for this tool.
credential_fillFill the workspace browser from an approved vault item. Returns filled or a refusal, never the value.Fill the workspace browser from an approved vault item. Returns filled or a refusal, never the value.
No input schema was published for this tool.
credential_requests_listList pending login approvals, without credential values.List pending login approvals, without credential values.
No input schema was published for this tool.
credential_request_denyRefuse a pending login request.Refuse a pending login request.
No input schema was published for this tool.
credential_request_fulfilRelay a credential already sealed to the workspace one-time public key. Accepts ciphertext only.Relay a credential already sealed to the workspace one-time public key. Accepts ciphertext only.
No input schema was published for this tool.
volume_openCreate or reuse a project volume by name. Waits until available unless wait is false.Create or reuse a project volume by name. Waits until available unless wait is false.
No input schema was published for this tool.
volume_listList project volumes, optionally including organization shared volumes.List project volumes, optionally including organization shared volumes.
No input schema was published for this tool.
agents_listList coding agent sessions in this project.List coding agent sessions in this project.
No input schema was published for this tool.
workspace_openOpen a persistent workspace by key: creates it from the template on first use, reconnects (or resumes) it afterwards, never resets it. Waits until it is ready unless wait is false; on timeout the start continues server side (operation_wait); a queued start has a deadline 15 minutes after it was cre…Open a persistent workspace by key: creates it from the template on first use, reconnects (or resumes) it afterwards, never resets it. Waits until it is ready unless wait is false; on timeout the start continues server side (operation_wait); a queued start has a deadline 15 minutes after it was cre…
No input schema was published for this tool.
workspace_listList the workspaces of this API key’s project (key, state, template, active operation).List the workspaces of this API key’s project (key, state, template, active operation).
No input schema was published for this tool.
workspace_statusCurrent state of one workspace (ready, mode, observed/desired state, grants, pending reason; tree_revision for a file-first workspace) and its most recent operations.Current state of one workspace (ready, mode, observed/desired state, grants, pending reason; tree_revision for a file-first workspace) and its most recent operations.
No input schema was published for this tool.
workspace_idleRead idle policy and activity without waking or recording activity.Read idle policy and activity without waking or recording activity.
No input schema was published for this tool.
workspace_hintStage a parked workspace ahead of an imminent VM tool call. Invoke explicitly when tool input starts; returns without waiting for restore. A suspended workspace must be resumed first.Stage a parked workspace ahead of an imminent VM tool call. Invoke explicitly when tool input starts; returns without waiting for restore. A suspended workspace must be resumed first.
No input schema was published for this tool.
workspace_keepalivePrevent idle suspension for seconds; never shortens an existing keepalive.Prevent idle suspension for seconds; never shortens an existing keepalive.
No input schema was published for this tool.
workspace_set_retentionDelete a persistent workspace after this many idle days (1..3650). null removes its own policy and follows the project default.Delete a persistent workspace after this many idle days (1..3650). null removes its own policy and follows the project default.
No input schema was published for this tool.
workspace_set_idle_policySet adaptive, never or fixed:<seconds> (60..604800); default restores the inherited policy.Set adaptive, never or fixed:<seconds> (60..604800); default restores the inherited policy.
No input schema was published for this tool.
workspace_set_labelsReplace all labels; an empty object clears them. Labels are searchable metadata, not secrets.Replace all labels; an empty object clears them. Labels are searchable metadata, not secrets.
No input schema was published for this tool.
workspace_suspendSuspend a running workspace (full-state checkpoint; processes stop, files and state are kept, and the next tool call resumes it). Returns the suspend operation (with wait: once finished, and its timing).Suspend a running workspace (full-state checkpoint; processes stop, files and state are kept, and the next tool call resumes it). Returns the suspend operation (with wait: once finished, and its timing).
No input schema was published for this tool.
workspace_forkFork a running or suspended workspace into a new key (an independent copy of its committed state). Returns the fork operation and the new workspace (with wait: once finished, and its timing). Not for file-first workspaces.Fork a running or suspended workspace into a new key (an independent copy of its committed state). Returns the fork operation and the new workspace (with wait: once finished, and its timing). Not for file-first workspaces.
No input schema was published for this tool.
workspace_upgradeKeep files, installed package files and home while moving to the supported current layout/base. One cold start ends memory and running processes. at next_resume schedules it without stopping the VM; now upgrades immediately. The operation reports whether it is scheduled or applied.Keep files, installed package files and home while moving to the supported current layout/base. One cold start ends memory and running processes. at next_resume schedules it without stopping the VM; now upgrades immediately. The operation reports whether it is scheduled or applied.
No input schema was published for this tool.
workspace_resizeNo description publishedThis tool published no description. Forge does not invent one.
operation_waitWait for a lifecycle operation (open, suspend, resume, fork, ...) to finish, up to timeout_ms. Returns the operation and the wait’s timing. With durable (a suspend or fork), also wait until its copy is in durable storage.Wait for a lifecycle operation (open, suspend, resume, fork, ...) to finish, up to timeout_ms. Returns the operation and the wait’s timing. With durable (a suspend or fork), also wait until its copy is in durable storage.
No input schema was published for this tool.
workspace_expose_portNo description publishedThis tool published no description. Forge does not invent one.
workspace_list_portsThe exposed ports of the workspace: {ports: [{port, url, created_at, callback}]}, ordered by port. callback is set when the port has a callback URL for webhooks. Every port is private; workspace_port_link gives a link that opens one in a browser.The exposed ports of the workspace: {ports: [{port, url, created_at, callback}]}, ordered by port. callback is set when the port has a callback URL for webhooks. Every port is private; workspace_port_link gives a link that opens one in a browser.
No input schema was published for this tool.
workspace_close_portStop serving an exposed port: its URL stops answering and every link to it stops working at once. Idempotent (also when the port is not exposed). Returns {port, closed: true}.Stop serving an exposed port: its URL stops answering and every link to it stops working at once. Idempotent (also when the port is not exposed). Returns {port, closed: true}.
No input schema was published for this tool.
workspace_port_linkA link that opens an exposed port in a browser: give it to the person you work for, or open it yourself. Returns {url, expires_at}. Opening it starts a browser session for the port until expires_at and lands on path. Anyone with the link can open the port until then, so treat it like a password. Ex…A link that opens an exposed port in a browser: give it to the person you work for, or open it yourself. Returns {url, expires_at}. Opening it starts a browser session for the port until expires_at and lands on path. Anyone with the link can open the port until then, so treat it like a password. Ex…
No input schema was published for this tool.
workspace_set_computer_useSwitch computer use on or off for a workspace (inherit follows its template). While it is on, the computer tool drives the workspace desktop, which starts on the first computer call. Returns {enabled, workspace, template, available}; available false means its template version cannot run a desktop (…Switch computer use on or off for a workspace (inherit follows its template). While it is on, the computer tool drives the workspace desktop, which starts on the first computer call. Returns {enabled, workspace, template, available}; available false means its template version cannot run a desktop (…
No input schema was published for this tool.
workspace_computer_streamA link to watch the workspace desktop live in a browser (view only unless interactive): give it to the person you work for. Returns {url, expires_at, port, interactive}. Anyone with the link can open it until expires_at, so treat it like a password. stop: true ends every view instead.A link to watch the workspace desktop live in a browser (view only unless interactive): give it to the person you work for. Returns {url, expires_at, port, interactive}. Anyone with the link can open it until expires_at, so treat it like a password. stop: true ends every view instead.
No input schema was published for this tool.
workspace_computer_desktopThe workspace desktop itself. status: whether it runs, its screen size and its viewers (never starts it). start: start it at a screen size (640x480 to 2560x1600, default 1280x800; a no-op while it runs); without it the first computer call starts it at the default size. stop: stop it (its windows cl…The workspace desktop itself. status: whether it runs, its screen size and its viewers (never starts it). start: start it at a screen size (640x480 to 2560x1600, default 1280x800; a no-op while it runs); without it the first computer call starts it at the default size. stop: stop it (its windows cl…
No input schema was published for this tool.
template_getA template this project can open: its versions (state, source, installed tools, immutable paths) and each version’s settings (env, open-time inputs, start commands, services, defaults). With version, also that version’s recipe in request form (the recipe v2 document template_build takes; null for v…A template this project can open: its versions (state, source, installed tools, immutable paths) and each version’s settings (env, open-time inputs, start commands, services, defaults). With version, also that version’s recipe in request form (the recipe v2 document template_build takes; null for v…
No input schema was published for this tool.
template_languagesThe languages (python, node, go, rust, java) and versions a base offers a recipe v2’s build.languages, e.g. base "ubuntu-24.04@1". included: the base already has that version (nothing is installed); default: what {id} without a version picks. A version the base has another version of is not offered.The languages (python, node, go, rust, java) and versions a base offers a recipe v2’s build.languages, e.g. base "ubuntu-24.04@1". included: the base already has that version (nothing is installed); default: what {id} without a version picks. A version the base has another version of is not offered.
No input schema was published for this tool.
template_buildNo description publishedThis tool published no description. Forge does not invent one.
usage_summaryNo description publishedThis tool published no description. Forge does not invent one.
send_feedbackNo description publishedThis tool published no description. Forge does not invent one.
shardfluxNo description publishedThis tool published no description. Forge does not invent one.
29 of 35 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Persistent cloud workspaces for AI agents: run commands, edit files, use git and a browser.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
The crawl stopped at the 60-package limit. The rest of the tree was never resolved.
36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)
57 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.
+45 more not listed. The counts by reason above cover all of them.
Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.