Give an agent a real Linux VM: run commands, move files, expose a preview URL, destroy it.
AAS_API_KEYAPI keyrequiredAPI key from https://sandbox-as-a-service.com/dashboard/keys
Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.
Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.
Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.
create_sandboxCreate an isolated cloud sandbox — a dedicated virtual machine you can run commands in.Create an isolated cloud sandbox — a dedicated virtual machine you can run commands in.
No input schema was published for this tool.
run_commandprivilegedRun a shell command inside a sandbox and wait for it to finish. Returns stdout, stderr and the exit code.Run a shell command inside a sandbox and wait for it to finish. Returns stdout, stderr and the exit code.
No input schema was published for this tool.
write_fileprivilegedWrite a file inside a sandbox. Use this to place a script or input data before running it.Write a file inside a sandbox. Use this to place a script or input data before running it.
No input schema was published for this tool.
read_fileRead a file back out of a sandbox — an artifact your code produced, a log, a generated report.Read a file back out of a sandbox — an artifact your code produced, a log, a generated report.
No input schema was published for this tool.
list_filesList the contents of a directory in a sandbox, with the type and size of each entry.List the contents of a directory in a sandbox, with the type and size of each entry.
No input schema was published for this tool.
expose_portGive a server running inside the sandbox a public https URL, so a person can open it in a browser.Give a server running inside the sandbox a public https URL, so a person can open it in a browser.
No input schema was published for this tool.
get_sandboxGet the current status and details of one sandbox, including when it expires.Get the current status and details of one sandbox, including when it expires.
No input schema was published for this tool.
list_sandboxesList the sandboxes on this account, newest first. Use it to find sandboxes you created earlier.List the sandboxes on this account, newest first. Use it to find sandboxes you created earlier.
No input schema was published for this tool.
extend_sandboxPush a sandbox’s expiry further out so long-running work is not cut off.Push a sandbox’s expiry further out so long-running work is not cut off.
No input schema was published for this tool.
destroy_sandboxprivilegedDestroy a sandbox and stop billing for it. Everything inside is lost.Destroy a sandbox and stop billing for it. Everything inside is lost.
No input schema was published for this tool.
get_usageShow the account’s remaining credit balance and recent sandbox usage.Show the account’s remaining credit balance and recent sandbox usage.
No input schema was published for this tool.
11 of 11 tools published a description.
Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.
Give an agent a real Linux VM: run commands, move files, expose a preview URL, destroy it.
Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.
This entry publishes no npm package, so Forge has no dependency tree for it. That is a gap in coverage — not a statement that it has no dependencies.