forgemax

Overview

Forgermax implements a Code Mode approach inspired by Cloudflare's sandbox tool-calling pattern. Instead of dumping every tool schema into the LLM's context window, it exposes only two tools: `search` to discover capabilities and `execute` to run JavaScript against tool APIs in a sandboxed V8 isolate. This approach dramatically reduces token usage from potentially tens of thousands to just around 1,000 tokens regardless of the number of connected servers. The system includes sophisticated sandboxing with AST validation, isolation, and comprehensive security measures.

Try asking AI

After installing, here are 5 things you can ask your AI assistant:

• search

  Query a capability manifest to discover tools

  Try:Find all tools available on the narsil serverTry:Search for tools related to file operations
• execute

  Run JavaScript against the tool API in a sandboxed V8 isolate

  Try:Call narsil's symbols.find with pattern 'handle_*'Try:Parse the AST of main.rs using the narsil server

Comparable tools

Installation

npm install -g forgemax

brew tap postrv/forgemax && brew install forgemax

curl -fsSL https://raw.githubusercontent.com/postrv/forgemax/main/install.sh | bash

irm https://raw.githubusercontent.com/postrv/forgemax/main/install.ps1 | iex

{
  "mcpServers": {
    "forgemax": {
      "command": "forgemax"
    }
  }
}

FAQ

How does Forgemax reduce token usage?

Forgemax replaces hundreds of tool schemas with just 2 tools (~1,000 tokens) and lets LLMs write JavaScript to orchestrate tool calls instead of selecting from tool lists.

Is sandbox execution secure?

Yes, Forgemax uses V8 isolation with AST validation, no filesystem/network access, and opaque bindings that never expose credentials to the sandbox.

On Hacker News

Recent discussion from the developer community.

• Code Mode inspired local sandboxed MCP Gateway▲ 2
  Story by rcarmo · 2026-02-24

Compare forgemax with