exec_command

4 registry entries were observed exposing a tool named exec_command — 4 of them as a privileged capability (a name matching exec / write / delete keywords).

Every row is point-in-time scan output, dated below. Forge has an observed tool surface for 8,491 of 26,663 scannable entries (32%) — an entry that has not been scanned cannot appear here, so absence from this list is not evidence that an entry does not expose this tool.

1. @agentmetal/mcpprivileged
   trust 60/100 · BMCP serverobserved 2026-08-09 · static extraction
   MCP server for AgentMetal — an AI agent can discover, pay (USDC via x402 or card), provision, SSH into, and run commands on its own Linux VP
2. basicdeploy-mcpprivileged
   trust 60/100 · BMCP serverobserved 2026-08-17 · static extraction
   The runtime your agent deploys to — DB, storage, and a public URL in one MCP call.
3. com.onkernel/kernel-mcp-serverprivileged
   trust 60/100 · BMCP serverobserved 2026-06-14 · static extraction
   Access Kernel's cloud-based browsers and app actions via MCP (remote HTTP + OAuth).
4. io.github.ofershap/dockerprivileged
   trust 60/100 · BMCP serverobserved 2026-06-13 · static extraction
   MCP server for Docker — manage containers, images, volumes, and compose services from your IDE

All indexed toolsSearch the registry for exec_command