Rhys @RhysSullivan

my mind is blown at how cool this is, there's no world CLIs are better than this:

- you can bring any MCP, API, tool and it becomes callable from typescript
- the only thing that is in context for the agent is the tool `run_code`
- for APIs, all GETs are allowed by default - other operations require approval
- it has a discover function it can call to get LSP information about input / output types
- you can use the input type information to dynamically generate approval rules that match the shape of the function
- it runs in a sandbox, so you can allowlist hosts

in this demo it's deleting all domains from a project of mine except one, and it literally can't go off the rails due to the approval model

Feb 6, 2026 View on X →

https://x.com/RhysSullivan/status/2019819177473933404