Agents using Claude in a remote sandbox should be able to call browser-fulfilled client tools such as request_connection. Today these tools work with Pi and with local Claude, but they are unavailable through the Daytona stdio MCP channel.
Until this capability is implemented, remote Claude runs omit client tools from the MCP tool list. Executable gateway and callback tools continue to work.
The desired behavior is:
- Claude calls a client tool through the in-sandbox MCP server.
- The current model turn pauses without returning a timeout or tool error.
- The frontend receives the client-tool interaction and renders the appropriate widget.
- The user completes or cancels the interaction.
- The same agent session resumes and returns the browser result to the pending tool call.
- A parked or restarted remote sandbox preserves the continuation correctly.
The implementation should cover:
- MCP request cancellation or pause signaling for an in-flight
tools/call.
- Relay cleanup so a paused call cannot emit a late timeout response.
- Browser interaction correlation with the original Claude tool-call ID.
- Resume after normal pause, reconnect, and sandbox restart.
- Multiple or repeated client-tool calls without consuming the wrong stored result.
- Clear behavior for denied, cancelled, abandoned, and timed-out interactions.
Related work: #5244 delivers executable gateway and callback tools to Claude on Daytona. Full client-tool continuation remains separate from that delivery path.
Agents using Claude in a remote sandbox should be able to call browser-fulfilled client tools such as
request_connection. Today these tools work with Pi and with local Claude, but they are unavailable through the Daytona stdio MCP channel.Until this capability is implemented, remote Claude runs omit client tools from the MCP tool list. Executable gateway and callback tools continue to work.
The desired behavior is:
The implementation should cover:
tools/call.Related work: #5244 delivers executable gateway and callback tools to Claude on Daytona. Full client-tool continuation remains separate from that delivery path.