DevExSAFE
⚡️ Devex — A Fast, Secure, and Scalable Repl-as-a-Service Platform built for Developers 🚀
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
⚡ DevEx – The Open Cloud IDE Platform
Run full-featured, containerized dev environments in the cloud — with AI assistance and secure sandboxing. Scalable REPL sessions powered by Kubernetes, WebSockets, and GoLang.
DevEx is an open-source platform to spin up cloud-based development environments (REPLs) that work like your local setup — but in the browser, anywhere, anytime.
Built for flexibility, you can code in your preferred stack, connect over SSH, or run sessions with AI agents via our MCP server. We also support sandboxing AI-generated code securely, letting you test real changes in isolated environments.
Unlike Gitpod or E2B, DevEx is lightweight, self-hostable, and production-grade out of the box — with a developer-first CLI, seamless AI integration, and Kubernetes-native design for infinite scale.
📣 Want to add your own REPL template? It's easy! 👉 Read the Contributing Guide to get started.
🚀 MCP Server is now live at glama.ai – enabling AI ag
271448f6ebb0OBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add node-template --env PRODUCTHUNT_TOKEN=${PRODUCTHUNT_TOKEN} -- npx -y [email protected]{
"mcpServers": {
"node-template": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"PRODUCTHUNT_TOKEN": "${PRODUCTHUNT_TOKEN}"
}
}
}
}Exposed tools (30)
24 read · 3 write · 3 destructive. Blast radius: 3 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
Authentication | read | Session lifecycle. GitHub OAuth and email magic links. |
Health | read | Liveness of the control plane and its dependencies. |
Node.js | read | JavaScript and TypeScript, npm on the path |
Python | read | CPython 3 with pip and a virtualenv ready |
Runner | read | Called by a runner pod to retire its own session. Not for general use. |
Workspaces | destructive | Create, list, start, stop and delete workspaces. |
activate | read | Activate an existing repl |
check-platform-health | read | Read whether the DevEx control plane, its Kubernetes cluster, its object store and its Redis are reachable. |
clear | destructive | Clears the terminal screen for a fresh start |
command | read | Specific command to get help for |
compare-pricing | read | Read the plans, their Kubernetes resource limits and their prices as a markdown table. |
create | write | Create a new repl |
deactivate | read | Deactivate a repl |
help | read | Show available commands and getting started guide |
list | read | List all repls |
ls | read | Lists your created repls, showing you all the amazing projects you |
manage-workspaces | destructive | Create, list, start, stop and delete containerised development workspaces. |
name | read | Name for the new repl |
neofetch | read | Displays a sleek, aesthetic system information script that proudly showcases your operating system and hardware details ✨ |
oauth-session | write | Signed session cookie set by GitHub OAuth or a magic link. HttpOnly, SameSite=Lax, seven days. Set on the API origin, so a browser client must send credentials and be listed in the CORS allowlist. |
query | read | Search query to match repl names |
read-documentation | read | Fetch any DevEx documentation page as markdown — append |
repl | read | Launches an interactive Read-Eval-Print Loop (REPL) environment for quick code execution and testing |
run-code-in-a-workspace | write | Read files inside a live workspace over the Model Context Protocol. Writing files and running commands are planned. |
search | read | Search repls by name |
status | read | Shows the current operational status of the system |
template | read | Template to use for the repl |
templates | read | Gives a list of all available project templates to kickstart your coding journey 🚀 |
version | read | Displays the current version of the application |
whoami | read | Reveals your current user identity – because even machines need to know who |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (7 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (9)
Workspaces, clear, manage-workspaces
source.ts
.air.toml
.air.toml
.air.toml
.hextaui
@fontsource/commit-mono, @mdx-js/loader, @mdx-js/react, @monaco-editor/react, @next/mdx, @number-flow/react, @radix-ui/react-context-menu, @radix-ui/react-dialog
assets/devx.png
RUN curl -sS https://starship.rs/install.sh | sh -s -- -y && \
Gates applied: no_behavioural_pass.
271448f6ebb0full audit observations/trust-audit/mcp-server/parthkapoor-dev__devex.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 271448f6ebb0 | SAFE | B | 89 | first audit |
Questions
What is the DevEx MCP server?
⚡️ Devex — A Fast, Secure, and Scalable Repl-as-a-Service Platform built for Developers 🚀
What tools does DevEx expose?
30 in total: 24 read-only, 3 that write, and 3 that can delete or overwrite (Workspaces, clear, manage-workspaces). Every one is listed on this page with its risk.
Is DevEx safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B. Separately from the audit: 3 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does DevEx need?
It reads PRODUCTHUNT_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does DevEx run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as node-template at 1.0.0.
How current is this page?
The grade is for one exact copy of the source (271448f6ebb0), read on 2026-10-07. The repository is watched and re-audited when it changes.