wcgw

uvx --python 3.12 wcgw@latest

{
  "mcpServers": {
    "wcgw-mcp": {
      "command": "uvx",
      "args": [
        "--python",
        "3.12",
        "wcgw@latest"
      ]
    }
  }
}

What separates this from a plain command runner is that the shell is a single persistent interactive session both sides can steer — arrow keys, interrupts and ANSI escapes all work, background commands run alongside it, and an editor extension can attach the same terminal so you watch the agent work rather than reading a transcript. The editing side is deliberately defensive: a file must be read before it can be modified, large files are chunked to protect the context window, edits use aider-style search and replace with spacing-tolerant matching, and a syntax check runs afterwards so mistakes come back to the model instead of landing in the repository. It grants unrestricted access to shell and files, which the project states plainly.