Indie dev adds MCP server to $49 Mac VM app so agents break throwaway clones, not your Mac

ScholarBackground836 · reddit · 2026-10-16

The developer of Kyvenza, a $49 Apple Silicon VM app, built in an MCP server (off by default, localhost-only) so AI agents can work in copy-on-write VM clones instead of your real machine. Key design choices: near-instant clones that auto-expire in a day; deletevm refuses non-clones; dangerous tools hidden from tools/list so models never call them; automatic snapshots on agent-started VMs since agents forget to checkpoint; mandatory token auth because QEMU user networking exposes host localhost to guests; host-side screenshots over VNC. Per-tool permissions are next.

Original post →

More from coding & agent

coding & agent channel →