feat(mcp): add OpenShell-managed MCP servers

Dockerfile

@@ -38,6 +38,7 @@ RUN ln -s /opt/nemoclaw/node_modules /opt/nemoclaw-root/node_modules \
 FROM ${BASE_IMAGE}
 ARG OPENCLAW_VERSION=2026.5.27
 ARG OPENCLAW_2026_5_27_INTEGRITY=sha512-2N93zhdAo88KAbHt6T7KvYXf4s7XIkYXBgv1npYpn7e1Y9FvrtgtpsA38my9rtFW+70uXEojRPX5/OqnuDqJPw==
+ARG MCPORTER_VERSION=0.7.3
 
 # OpenClaw 2026.5.27 loads some generated source through jiti. Disable its
 # filesystem transform cache so source fragments that mention provider marker
@@ -145,6 +146,11 @@ RUN set -eu; \
         rm -rf /usr/local/lib/node_modules/openclaw /usr/local/bin/openclaw; \
         npm install -g --no-audit --no-fund --no-progress "openclaw@${OPENCLAW_VERSION}"; \
     fi; \
+    MCPORTER_CUR_VER=$(mcporter --version 2>/dev/null | awk '{print $NF}' || echo "0.0.0"); \
+    if [ "$MCPORTER_CUR_VER" != "$MCPORTER_VERSION" ]; then \
+        echo "INFO: Installing mcporter $MCPORTER_VERSION"; \
+        npm install -g --no-audit --no-fund --no-progress "mcporter@${MCPORTER_VERSION}"; \
+    fi; \
     # Pre-install the codex-acp package so the embedded ACPx runtime can
     # call the local binary instead of `npx @zed-industries/codex-acp`.
     # The sandbox's L7 proxy denies @zed-industries/* package URLs

Dockerfile.base

@@ -192,6 +192,7 @@ RUN chmod 444 /usr/local/lib/nemoclaw/sandbox-rlimits.sh \
 # with the openclaw_version input for a one-off build without editing this file.
 ARG OPENCLAW_VERSION=2026.5.27
 ARG OPENCLAW_2026_5_27_INTEGRITY=sha512-2N93zhdAo88KAbHt6T7KvYXf4s7XIkYXBgv1npYpn7e1Y9FvrtgtpsA38my9rtFW+70uXEojRPX5/OqnuDqJPw==
+ARG MCPORTER_VERSION=0.7.3
 
 # Keep OpenClaw's jiti-generated source cache out of /tmp so provider marker
 # names do not persist in runtime snapshots or leak-scan inputs.
@@ -226,7 +227,7 @@ RUN --mount=type=bind,source=nemoclaw-blueprint/blueprint.yaml,target=/tmp/bluep
             echo "Actual:   ${REGISTRY_INTEGRITY}"; exit 1; \
         fi; \
     fi; \
-    npm install -g "openclaw@${OPENCLAW_VERSION}" \
+    npm install -g "openclaw@${OPENCLAW_VERSION}" "mcporter@${MCPORTER_VERSION}" \
     && pip3 install --no-cache-dir --break-system-packages "pyyaml==6.0.3"
 
 

agents/hermes/manifest.yaml

@@ -115,6 +115,11 @@ inference:
   provider_options:
     - hermesProvider
 
+# ── MCP bridge support ───────────────────────────────────────────
+mcp:
+  support: disabled
+  reason: "Hermes MCP bridge design is tracked by NVIDIA/NemoClaw#566."
+
 # ── Phone-home hosts ───────────────────────────────────────────
 # Agent-specific egress endpoints needed for updates, auth, etc.
 phone_home_hosts:

agents/langchain-deepagents-code/manifest.yaml

@@ -67,6 +67,11 @@ inference:
   model_config_key: "models.default"
   proxy_support: implicit
 
+# ── MCP bridge support ───────────────────────────────────────────
+mcp:
+  support: disabled
+  reason: "The managed Deep Agents Code wrapper intentionally forces MCP off; NVIDIA/NemoClaw#566 tracks future design."
+
 package_registry:
   hosts:
     - pypi.org

agents/openclaw/manifest.yaml

@@ -80,6 +80,10 @@ inference:
   provider_type: gateway_managed
   proxy_support: explicit  # configured in openclaw.json providers block
 
+# ── MCP bridge support ───────────────────────────────────────────
+mcp:
+  support: bridge
+
 # ── Phone-home hosts ───────────────────────────────────────────
 phone_home_hosts:
   - openclaw.ai

src/commands/sandbox/mcp.ts

@@ -0,0 +1,38 @@
+// SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
+// SPDX-License-Identifier: Apache-2.0
+
+import { dispatchMcpBridgeCommand } from "../../lib/actions/sandbox/mcp-bridge";
+import { NemoClawCommand } from "../../lib/cli/nemoclaw-oclif-command";
+
+export default class SandboxMcpCommand extends NemoClawCommand {
+  static id = "sandbox:mcp";
+  static strict = false;
+  static summary = "Manage MCP bridges for a sandbox";
+  static description =
+    "Manage host-side stdio MCP server bridges for a sandbox. The proxy runs on the host with host environment credentials; the sandbox reaches it through a generated network policy and a bearer-authenticated local bridge.";
+  static usage = ["<name> <add|list|status|restart|remove> [args...]"];
+  static examples = [
+    "<%= config.bin %> sandbox mcp alpha list",
+    "<%= config.bin %> sandbox mcp alpha add github --env GITHUB_TOKEN -- npx -y @modelcontextprotocol/server-github",
+    "<%= config.bin %> sandbox mcp alpha status github --json",
+    "<%= config.bin %> sandbox mcp alpha remove github",
+  ];
+
+  public async run(): Promise<void> {
+    this.parsed = true;
+    const [sandboxName, ...actionArgs] = this.argv;
+    if (
+      !sandboxName ||
+      sandboxName.trim() === "" ||
+      sandboxName === "--help" ||
+      sandboxName === "-h"
+    ) {
+      this.failWithLines(
+        ["Usage: nemoclaw <sandbox> mcp <add|list|status|restart|remove> [args...]"],
+        2,
+      );
+      return;
+    }
+    await dispatchMcpBridgeCommand(sandboxName, actionArgs);
+  }
+}