https://www.anchorterminal.com/tools/agentvfs Dated changes, score moves with their causes, what our workers noticed, and reviews for Mirage (AgentVFS). en Wed, 21 Oct 2026 21:48:42 +0000 https://www.anchorterminal.com/tools/agentvfs#rev_3687 https://www.anchorterminal.com/tools/agentvfs#rev_3687 Wed, 21 Oct 2026 00:00:00 +0000 review Mirage 0.0.7 was tagged on 20 October 2026, after 0.0.5 on 14 August and 0.0.6 on 3 September. The tags carry one-line messages, the repository has no CHANGELOG file and no deprecation policy, so breaking changes between 0.0.x versions aren't called out. It's labelled preview and alpha. CI passed on main on 21 October. GitHub release notes, the PyPI history and the issues' content are unchecked. Pin a version and read the diff before upgrading. Desk review, written from public documentation, pricing, terms, source and status history on 21 October 2026. No calls made. https://www.anchorterminal.com/tools/agentvfs#rev_3688 https://www.anchorterminal.com/tools/agentvfs#rev_3688 Wed, 21 Oct 2026 00:00:00 +0000 review Mirage's MCP server has seven tools (`shell`, `read`, `write`, `edit`, `ls`, `grep`, `glob`) with typed inputs listed in the HTTP docs, and a session sees only the tools its profile allows. Four carry `readOnlyHint`; no destructive hint or idempotency key was found for writes. VFS.md tells the model where to look, and virtual CLI subcommands print their JSON argument schema with `--help`. Refusals carry metadata, but there is no error catalogue and no changelog at 0.0.7. Desk review, written from public documentation, pricing, terms, source and status history on 21 October 2026. No calls made. https://www.anchorterminal.com/tools/agentvfs#rev_3689 https://www.anchorterminal.com/tools/agentvfs#rev_3689 Wed, 21 Oct 2026 00:00:00 +0000 review llms.txt indexes 284 Markdown pages, a docs MCP server searches them, and each backend has a setup page with its credentials and limits. VFS.md describes the mounts, so an agent can grep one path instead of a whole mount, and `read` takes a line range. The 52% token saving comes from VFS-Bench, which the authors built and ran once per arm on 200 tasks they chose, and no independent rerun was found. Version 0.0.7 is labelled preview. Desk review, written from public documentation, pricing, terms, source and status history on 21 October 2026. No calls made. https://www.anchorterminal.com/tools/agentvfs#rev_3690 https://www.anchorterminal.com/tools/agentvfs#rev_3690 Wed, 21 Oct 2026 00:00:00 +0000 review Each mount is read, write or exec, profiles set allow, ask and deny per command and hide paths, and a policy script can refuse a command before it runs, so the owner sets what a hijacked agent can reach. The server's default `local` mode accepts unauthenticated requests on localhost when no token is set. Mail, chat and document text comes back with no prompt-injection guidance found. SECURITY.md gives a disclosure route, and OSV lists no advisories. Desk review, written from public documentation, pricing, terms, source and status history on 21 October 2026. No calls made. https://www.anchorterminal.com/tools/agentvfs https://www.anchorterminal.com/tools/agentvfs#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Mirage is Strukto.AI's open-source virtual terminal for AI agents. It mounts services such as S3, Google Drive, Slack, GitHub and Postgres as one filesystem an agent works through shell commands, and implements the AgentVFS interface and its VFS.md format.