Nehemiah MCP
Nehemiah gives agents Firecracker Linux microVMs over MCP: launch, run commands, preview URLs, fork and templates.
- 346 ★ on the repository
- Last commit
- Apache-2.0
Broad access
Why this level
- The agent runs arbitrary code on virtual machines and opens preview links to running services.
- An API key for the cloud or an own bare-metal host is required.
Install
- Works in
Manual install
NEHEMIAH_API_KEY=bc_... NEHEMIAH_PROJECT=your-project-id npx nehemiah-mcp@betaRuns against Boring Computers Cloud; for a local host set `NEHEMIAH_URL` instead.
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The agent runs arbitrary code on virtual machines and opens preview links to running services.
- An API key for the cloud or an own bare-metal host is required.
This is third-party code. Review the repository files before installing.
What it does
Nehemiah is a platform of ephemeral Linux computers on Firecracker microVMs, and `nehemiah-mcp` is its MCP server. Claude Desktop, Cursor and other agents use it to launch a machine, run deterministic commands, get short-lived preview URLs, extend the TTL and fork a running machine. Local and self-hosted setups add volumes, host-local agent tasks, screenshots, publishing and machine save and restore. The code is Apache-2.0, and hosts are provisioned from signed releases.
Who it is for. Developers who need an isolated machine for agent code, a browser and a temporary service with a live link instead of running on a laptop.
Good fit when
- An agent builds and runs a web app and the result must open from a link.
- An untrusted script runs on a separate machine with its own kernel.
- A machine state is cloned to test two variants of a change.
- Commands run on a clean Linux environment with no leftovers.
Not a fit when
- You want a ready cloud service with no own infrastructure or keys.
- There is no Linux server with virtualisation support; the host needs bare metal.
- You need persistent volumes in the managed cloud, where volume creation is disabled.
Example request
Launch a machine, build a web app on it, run the tests with a command and give a short-lived preview link.MCP
- Transport
- stdio
- Authentication
- API key
Environment variables
`NEHEMIAH_API_KEY`required, secret- API key for Boring Computers Cloud.
`NEHEMIAH_PROJECT`required- Project identifier in the cloud.
`NEHEMIAH_URL`- API address: cloud by default, local for a self-hosted host.
Limitations
Hosts are installed from signed releases under a managed scheme, and the old one-command installers are no longer supported. The Boring Computers Cloud needs `NEHEMIAH_API_KEY` and `NEHEMIAH_PROJECT`; guest network egress is off in the private beta, and volumes and `run_task` are absent from the managed catalog. The package ships under the `beta` tag. The latest repository commit is from September 2026.
How to disable. Remove the `nehemiah` entry from the MCP configuration, stop the machines and revoke the API key in the console. A self-hosted host is torn down with `infra/latitude/teardown.sh`.
FAQ
Which variables are needed?
For Boring Computers Cloud: `NEHEMIAH_API_KEY` and `NEHEMIAH_PROJECT`; `NEHEMIAH_URL` and `NEHEMIAH_REGION` are optional. A self-hosted setup sets `NEHEMIAH_URL`, and `NEHEMIAH_TARGET=self-hosted` is needed when it also uses an API key.
What does the managed cloud offer?
Machine launch, list and stop, deterministic commands, preview URLs, TTL extension, fork and templates.
How is a machine different from a container?
It is a Firecracker microVM with its own kernel rather than a shared container; it is resource-capped and self-destructs on a TTL.
Does the server print keys?
No. The README states the MCP server never prints API keys, authorization headers or capability-bearing URLs.
What license is the code under?
Apache-2.0. Hosts are brought up from signed releases following `infra/latitude/README.md`.
Discussion
No questions or reviews yet.
Related
MCP serversContainarium: isolated boxes for AI agents
Containarium
A platform on your own server that gives each agent its own Linux box with SSH and MCP tools for commands and files
Your machine's terminal, windows and desktop in a browser, plus an MCP server for agents to read and type into other sessions
A WebSSH console for VPS with an MCP server: the agent works across several servers while ACL tokens limit tools and hosts.
The remote MCP server of Devopness, a platform that builds infrastructure and deploys apps in your own cloud accounts
A secure MCP runtime through which an agent operates local machines, servers and containers
An agent runs servers through a catalog of declared actions: policy decides what runs and what waits for a person
README in short
The repository is a monorepo: a SvelteKit site, the Go host daemon `nehemiahd`, `nehemiah-sdk` and `nehemiah-mcp`. Guests are isolated by an egress firewall.