kindling runs every MCP server in its own Firecracker microVM, frozen at 0 RAM until called
Ascci52 · reddit · 2026-09-28
A Reddit developer open-sourced kindling (Apache-2.0) to fix the risk of running unaudited third-party MCP servers via npx -y with full access to your files, env vars, and network.
Key details:
- Any npm/PyPI server (stdio or Streamable HTTP) runs in its own Firecracker microVM for kernel-level isolation
- Idle VMs are frozen on disk at 0 RAM; 30 ms thaw, 9 ms hot calls
- Parallel sessions get copy-on-write replicas from the same snapshot
- Ephemeral mode: one microVM per tool call, 19 ms end-to-end
- Secrets injected per session into live VMs, never written to snapshots
- Egress denied by default, with optional domain allowlist
Repo: https://github.com/juan52878911/kindling
More from coding & agent
- Open-source Mailflare adds MCP and AI agent to self-hosted Cloudflare email — alexcovo_eth · 2026-09-28
- User lets AI agent Muse handle $3K in travel bookings after a month of building trust — armand_ruiz · 2026-09-28
- Laya replaces LLM-as-a-judge with a 322M decision engine — 26,639 stars in 9 days — AIFrontierReads · 2026-09-28
- Spawnimator Released: A Keyframe Animation Mod Aiming to Fix AI Games' Animation Bottleneck — TAbrodi · 2026-09-28
- Ramp exec: once AI solves coding, the bottleneck just moves, like losing an F1 race in the pits — lennysan · 2026-09-28
- After an agent deleted our CRM leads: give every agent its own database branch — Antique-Willow-5841 · 2026-09-28