DOOM MCP vs smolvm

Chris Nager built a fully playable DOOM that runs as an MCP (Model Context Protocol) app, rendering inline inside Claude and ChatGPT without a separate browser tab. The architecture uses two MCP tools — create_doom_session for inline-capable hosts and get_doom_launch_url as a browser fallback — combined with cloudflare/doom-wasm for the game runtime and a signed token system that maintains session state across both surfaces. The result is the same session whether you're playing inline or in a tab. The key technical challenge was avoiding iframe and CSP (Content Security Policy) issues. Rather than embedding a browser page inside the MCP iframe, the DOOM canvas runs directly inside the host's iframe — a subtle but critical distinction that resolved a class of rendering and input-handling bugs. The final implementation is intentionally stripped down: no save/load, no persistence adapters, just stable playable DOOM. Beyond the novelty, this project is a concrete demonstration that MCP apps are interactive surfaces, not just tool-calling JSON endpoints. The progressive enhancement pattern — same signed-token foundation serving both inline and browser modes — is a reusable architecture for any game or interactive experience that wants to live inside an AI assistant. Nager open-sourced the implementation and the blog post is a detailed technical breakdown.

smolvm is a Rust-based CLI tool for building, running, and distributing lightweight Linux virtual machines with sub-second cold starts. Born from the smol-machines project, it addresses a gap in the developer toolchain: running untrusted code or reproducible environments without the overhead of Docker daemons or full hypervisors. A single "Smolfile" TOML config declares your VM, and state packs into a portable .smolmachine file you can share across macOS and Linux. Under the hood, smolvm uses libkrun VMM with Hypervisor.framework on macOS and KVM on Linux. Memory is elastic via virtio balloon, so the host reclaims unused RAM. Network is off by default — a deliberate security stance. SSH agent forwarding works without exposing private keys to guest VMs. OCI image compatibility means you can pull from Docker Hub or ghcr.io without modification. The key use case shaping community interest is sandboxing AI agent workloads: give agents a hardware-isolated VM that boots in under 200ms with configurable filesystem and egress constraints. With AI coding tools increasingly executing arbitrary code, smolvm fills a meaningful gap between "run it on bare metal" and "stand up a full Kubernetes pod." At 2.2k GitHub stars and 487 HN upvotes on the day of its Show HN post, developer traction is real.