Install
$ agentstack add mcp-l1ch404-jolink-runtime Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.
Security review
⚠ Flagged1 finding(s); flagged for manual review. · v0.1.0 How review works →
- • Prompt-injection patterns
- • Secret / credential exfiltration
- • Dangerous shell & filesystem operations
- • Untrusted network calls
- • Known-malicious package signatures
- high Pipes remote content directly into a shell (remote code execution).
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ● Shell / process execution Used
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
joLink Runtime
Run, observe, and debug local Java applications with coding agents.
> Design principle: Everything exists to reduce uncertainty for the LLM.
joLink gives coding agents access to real Java runtime behavior instead of forcing them to rely only on source code, naming conventions, and assumptions.
It can start or restart a local Java application, inspect its status and logs, and provide runtime evidence for verifying code changes. When surface-level evidence is not enough, the agent can continue with breakpoints, exception events, stack frames, and variables.
Free and local. It does not require a joLink account, model API key, inference provider, or separate agent application.
Why joLink
Coding agents are good at reading and changing code, but they can become stuck in a loop of static assumptions:
analyze
-> patch
-> assume the patch works
-> patch again
joLink adds the missing runtime feedback loop:
analyze
-> change
-> run
-> observe
-> update the hypothesis
-> change again if necessary
This is useful when:
- the Java application is not running yet;
- a code change needs to be verified against real behavior;
- repeated patches have not solved the problem;
- endpoint results do not match the source-code interpretation;
- logs or tests are insufficient to explain the executed path;
- business naming is inconsistent and static search cannot find the relevant
code;
- deeper runtime evidence such as breakpoints, stacks, or variables is needed.
The goal is not to use a debugger for every problem.
Start with the cheapest useful evidence:
application status
-> logs and actual outputs
-> exception events
-> executed path
-> breakpoints, stack frames, and variables
Debug deeper only when necessary.
What it can do
joLink currently exposes two MCP tools:
java_runtime— run, operate, observe, and debug one local Java application;java_processes— discover an already-running local JVM when attach is
needed.
The Java Runtime currently provides 15 public actions:
run
stop
restart
attach
detach
status
logs
breakpoint
exception
wait_event
threads
stack
variables
resume
cleanup_debug_state
These actions support:
- launching a Java application as an owned JVM process;
- stopping or restarting an application after code changes;
- inspecting application status and logs;
- attaching to an already-running local JVM;
- setting semantic breakpoints and exception watches;
- waiting for runtime events;
- inspecting threads, stack frames, and variables;
- resuming suspended execution;
- cleaning up debug state safely.
Current status
Current package version:
0.1.0a3
Status:
Alpha / controlled dogfood
The first adapter targets local Java applications through JDWP.
The current MCP implementation includes:
- stdio transport;
- stdout reserved exclusively for MCP protocol messages;
- JSON
TextContentwith matchingstructuredContent; - Runtime
ok=falsemapped to MCPisError=true; - cancellable
wait_event; - optional two-phase waiting with
armandawait; - an optional loopback HTTP trigger started only after
armis ready; - wait-scoped JDWP requests;
- ownership-aware shutdown;
- automatic cleanup and resume paths;
- persistent JDWP packet framing across short polling timeouts.
The current two-phase implementation is intended for controlled dogfood. Known cancellation, cleanup-preemption, handle-publication, and response delivery limitations are tracked in:
[docs/stage-2.1.2-lifecycle-backlog.md](docs/stage-2.1.2-lifecycle-backlog.md)
Do not use this alpha release for unattended production JVM debugging.
Requirements
- JDK 8 or newer
- uv
uv manages the Python environment automatically. A separate Python installation is normally not required.
Confirm the requirements with:
java -version
uv --version
Install
1. Install uv
Install uv once if it is not already available.
Windows PowerShell:
powershell -ExecutionPolicy ByPass -c "irm https://astral.sh/uv/install.ps1 | iex"
macOS or Linux:
curl -LsSf https://astral.sh/uv/install.sh | sh
2. Add joLink to the MCP client
Many MCP clients support a stdio server configuration similar to the following:
{
"mcpServers": {
"jolink-runtime": {
"command": "uvx",
"args": ["jolink-runtime@0.1.0a3"]
}
}
}
uvx downloads the package into an isolated environment and caches it automatically. No repository clone, virtual environment, or source checkout is required.
The exact configuration file varies by MCP client.
Restart the MCP client after changing its configuration.
Quick start
After the MCP server is connected, confirm that these tools are available:
java_runtime
java_processes
Open a local Java project and ask the coding agent:
Use joLink to start this Java application, inspect its status and logs,
and verify the latest code changes against real runtime behavior.
For a problem that has already survived multiple attempted fixes:
Do not apply another speculative patch yet.
Use joLink to run the current Java application and collect actual runtime
evidence. Start with status, logs, tests, and actual outputs. Re-evaluate the
root-cause hypothesis before changing the code again.
For deeper investigation:
Use joLink to reproduce this issue.
Start with actual outputs and logs. If that evidence is insufficient, use a
breakpoint or exception watch, inspect the relevant stack frames and variables,
then resume or clean up the suspended JVM.
joLink starts and observes the Java application. The coding agent may use its normal HTTP, terminal, browser, or testing tools to trigger the scenario.
Typical workflow
A normal verification flow looks like this:
read the code
-> change the code
-> java_runtime(run or restart)
-> java_runtime(status)
-> java_runtime(logs)
-> trigger a test or endpoint
-> inspect the actual result
-> update the diagnosis
A deeper debugging flow looks like this:
run or attach
-> configure a breakpoint or exception watch
-> wait_event(wait_mode=arm)
-> trigger the scenario after status=armed
-> wait_event(wait_mode=await, wait_handle=...)
-> inspect stack frames and variables
-> resume or cleanup_debug_state
Blocking wait_event mode remains available, but two-phase waiting is useful when an external action must occur only after JDWP requests are installed. For a local HTTP endpoint, arm can perform that trigger without making the agent synchronously wait for a request that may pause at the breakpoint:
{
"action": "wait_event",
"wait_mode": "arm",
"timeout": 30,
"http_trigger": {
"method": "POST",
"url": "http://127.0.0.1:8080/example",
"json_body": {"id": 1},
"timeout_seconds": 30
}
}
After the armed result, call await with its wait_handle; do not send the same request again. External background triggers remain supported when the scenario is not a simple local HTTP request.
Runtime safety
joLink 0.1.0a3 is designed for local, trusted development environments.
Current safety boundaries:
- MCP transport is stdio;
- JDWP access is limited to local JVMs;
- one joLink server controls one Java target at a time;
- a JVM launched by joLink is treated as an owned process;
- an owned JVM may be stopped by joLink;
- an externally started JVM is attached, resumed, and detached;
- an attached JVM is never intentionally terminated;
- raw JDWP requests are armed only while a waiter owns them; logical
breakpoint and exception definitions persist until removed or cleaned up;
- built-in HTTP triggers accept only
http://127.0.0.1, do not use environment
proxies or redirects, and never return the request URL, headers, body, or their raw values in validation errors;
response_headers_receivedreports only the HTTP status/response headers;
joLink does not read or return the response body;
- cancelling an HTTP client wait closes joLink's side of the connection but
cannot guarantee that server-side business work has been undone;
- successful
cleanup_debug_stateincludes its own debug-state verification;
a separate HTTP cleanup state may remain settling without delaying JVM cleanup;
- after receiving a
suspension_id, the agent must callresumeor
cleanup_debug_state.
Do not expose the JDWP port to an untrusted network.
Do not use the current alpha release for remote or production debugging.
Client notes
CodeBuddy
Some current CodeBuddy environments may initially display:
Description: No description
The full joLink tool description and action schema remain available after the tool definition is loaded. This is a client-side discovery limitation rather than a joLink runtime failure.
A project-level agent rule can improve discovery:
## joLink Java Runtime
For local Java application tasks, use the `jolink-runtime` MCP to start or
restart the application, inspect status and logs, and verify code changes
against real runtime behavior.
When actual outputs and logs are insufficient, use its breakpoints, exception
events, stack frames, and variables for deeper investigation.
After inspecting a suspended JVM, always call `resume` or
`cleanup_debug_state`.
Development
Clone the repository and install development dependencies:
uv sync --extra dev --locked
Run the default test suite:
uv run pytest
Run the stdio server from the source checkout:
uv run jolink-runtime
Equivalent module entry point:
uv run python -m jolink_runtime.transport.stdio
A generic MCP client configuration can launch it directly from a checkout:
{
"mcpServers": {
"jolink-runtime": {
"command": "uv",
"args": [
"--directory",
"/absolute/path/to/jolink-runtime",
"run",
"jolink-runtime"
]
}
}
}
Tests
The real subprocess acceptance test exercises the MCP stdio boundary:
uv run pytest -q tests/e2e/test_stdio_mcp.py
It performs:
initialize
-> tools/list
-> java_runtime(status)
-> close the stdio client
-> wait for the server process to exit
The heavier real MCP/JVM suite is opt-in locally:
JOLINK_RUN_MCP_JAVA_E2E=1 \
uv run pytest -q -m mcp_java_e2e tests/e2e/test_stdio_mcp_java.py
The canonical CI environment for the heavier suite is:
Linux
Python 3.11
JDK 17
Contracts
- MCP v0.1:
[docs/mcp-contract-v0.1.md](docs/mcp-contract-v0.1.md)
- Runtime lineage 2.4.0:
[docs/runtime-lineage-contract-2.4.0.md](docs/runtime-lineage-contract-2.4.0.md)
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: L1ch404
- Source: L1ch404/jolink-runtime
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.