Flyto Core MCP Server

AI said it finished. Flyto2 shows the proof. A Python execution engine for AI agents. It runs browser and API work as explicit steps, records what every step did, and replays from the step that failed - instead of re-running the whole job. It runs locally over stdio via the published package.

People who work with browser automation, workflow engine and flyto2 and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-09-07 · ★ 481 · #17 OF 255 MAINTAINED BROWSER AUTOMATION · VERIFIED 2026-09-18

Apache-2.0 · Python servers · how we verify → /methodology

01 · Install Flyto Core

Claude Code

claude mcp add flytohub-flyto-core -- uvx flyto-core

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "flytohub-flyto-core": {
      "command": "uvx",
      "args": [
        "flyto-core"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license Apache-2.0 - declared in the repository

pypi package flyto-core - check the name against the project README before installing (PyPI has no namespace ownership)

registry namespace io.github.flytohub is GitHub-verified and matches the repo owner

03 · What Flyto Core can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v2.28.1 · 2026-08-14

Security patch release closing four High-severity reports: · GHSA-jpmx-7xh3-vq6v: confine local image reads in vision modules. · GHSA-675h-j4qg-m52x: enforce dangerous permissions in nested Warroom/test steps.…

v2.28.0 · 2026-08-13

Security · Fixes an SSRF guard bypass in which the IPv6 unspecified address :: could reach services listening on IPv6 loopback. IPv4 and IPv6 unspecified addresses, including expanded IPv6 spellings, are now rejected…

v2.27.0 · 2026-08-08

Registry-wide filesystem and outbound boundary coverage, enforced by tests rather than convention. · This is a minor, not a patch. Two changes refuse inputs earlier releases accepted: · Paths outside FLYTO_SANDBOX_DIR…

04 · Who maintains Flyto Core

Flyto Core is maintained by flytohub. It's the only MCP server we track from this author; the repo dates to Dec 2025.

05 · Facts

category
browser automation - ranked #17 of 255 actively-maintained browser automation servers as of 2026-09-18.
release cadence
8 releases in the last 90 days (latest 2026-08-14)
registry
io.github.flytohub/flyto-core (active, first published 2026-02-12 · 2 versions)
packages
pypi:flyto-core

06 · Flyto Core FAQ

What is Flyto Core?

AI said it finished. Flyto2 shows the proof. A Python execution engine for AI agents. It runs browser and API work as explicit steps, records what every step did, and replays from the step that failed - instead of re-running the whole job. It runs locally over stdio via the published package.

Is Flyto Core still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-07 and it shipped 8 releases in the last 90 days. We re-verify nightly.

How do I install Flyto Core?

Run `uvx flyto-core`. You can also paste the ready-made client config above.

Does Flyto Core run locally?

Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Flyto Core