#1414th of 23 in MCP servers for developers

aos-ce

Local runtime that runs agent tools as permissioned WebAssembly capsules

Stars: 8.5k
License: Apache-2.0
Last commit: Oct 2026
Last release: Oct 2026
Language: Rust

Missed the latest GitHub check; these facts may be older.

Overview

AOS is a Rust CLI and runtime that gives agents such as Claude, Codex and Grok a shared local environment. Tools run as isolated WebAssembly capsules with explicit permissions, approval prompts and an audit trail, exposed through `aos mcp serve`. Community Edition bundles 22 first-party capsules, a Command Center app and Forge tooling for building new capsules.

Who it is for: Engineers wanting audited, permission-scoped local tools for coding agents

Strengths

Capsules run in WebAssembly isolation with explicit permissions and an audit trail
Releases ship checksums, Sigstore bundles and build-provenance attestations
Per-principal environments keep agents separate from the operator's installation
Local approval UI on macOS, Windows and Linux when the client lacks MCP elicitation

Weaknesses

Fresh install of all 22 capsules waits about two minutes on rate-limit windows
Native execution on macOS 11–15 is untested
Linux install fails unless the host setup check passes
Community Edition distro is fixed; other distributions need a standalone astrid install

What it needs

no GPU
Needs Astrid runtime (bundled), Pinentry (Linux approval prompts)
Models: Claude, Codex, Grok

Also in MCP servers for developers

See all 23

Also in MCP servers for developers
Rank	Project	Score
1	gitnexusCode knowledge graph exposed to coding agents through MCP tools Live demo ↗ (opens in a new tab)47.9k starscustom license	90 out of 100
2	codegraphLocal code knowledge graph served to coding agents over MCP74.1k starsMIT	81 out of 100
3	serenaMCP server giving coding agents symbol-level code search, editing and refactoring30.3k starscustom license	71 out of 100
#4	chrome-devtools-mcpMCP server that lets coding agents drive and debug a live Chrome53.6k starsApache-2.0	70 out of 100
#5	codebase-memory-mcpLocal MCP server that indexes a codebase into a queryable code knowledge graph46.6k starsMIT	70 out of 100

How to choose

Check what it can change (push, delete, run) and how that is scoped.
Prefer servers that run locally over ones that send your code to a third party.
Look at how many tool calls a task takes; chatty servers burn context.

Health

Releases: Not checked
Top contributor: Not checked
Security advisories: Not checked
Package advisories: Not checked
OpenSSF Scorecard: Not checked

Not read for this project yet: each refresh reads the facts of a few projects. Bots and coding-agent accounts are left out of the commit counts. Not part of the score: how we check.

License in plain words

Apache-2.0 Permissive

Use it at work: Yes
Change it and rebrand it: Yes
Sell it or host it for others: Yes

Your part: Keep the notices and mark the files you change. It also grants you the contributors’ patent rights.

A plain summary, not legal advice. Read the license on GitHub ↗ (opens in a new tab)

#14 of 23 in MCP servers for developers on Archestack, as of 15 Oct 2026.

In your README

The badge updates twice a day.

[![Archestack](https://archestack.com/badge/unicity-aos/aos-ce.svg)](https://archestack.com/best-of-vibe-coding/projects/aos-ce/)

How badges work

On your site or blog

A card with the rank, score and signals, in light or dark to match the reader.

<iframe src="https://archestack.com/embed/best-of-vibe-coding/aos-ce/" title="aos-ce on Archestack" width="400" height="270" style="border:0;max-width:100%" loading="lazy"></iframe>

Preview the card

Best of Vibe Coding on GitHub

Each review comes from the project's README and facts we check on GitHub. The fix form opens with aos-ce filled in.