A full-featured filesystem and shell bridge that gives Claude agents direct control over your machine. Exposes read, write, and edit operations alongside bash command execution, glob pattern matching, ripgrep integration, and a persistent JavaScript VM. Ships as standalone binaries compiled from Bun, supports both stdio and HTTP transports with OAuth 2.1 PKCE authentication. You can lock it down with path restrictions, command allowlists, and tool selection if you're nervous about handing over shell access. The js tool runs in a Node vm context that persists state across calls and can pull packages from unpkg. Built specifically for browser-based agents like Hadrian but works with any MCP client that needs low-level system access.