> My prediction is that one of the many sandbox providers will come up with a nice API on top of this that lets you do something like ... No worrying about FUSE, the sandbox, where things are executed, etc. This will be a huge differentiator and make virtual filesystems easily accessible to everyone.

I've done exactly that with Filestash [1] using its virtual filesystem plugin [2], which exposes arbitrary systems as a filesystem. It turns out the filesystem abstraction works extremely well even for systems that are not filesystems at all. This includes SFTP, S3, GDrive, Dropbox, and FTP, but also MySQL and Postgres, where the first level is databases, the second level is tables, and each row is represented as a structured file generated from the schema.

The whole filesystem is available to agents via MCP [4] and has been published to the OpenAI marketplace since around Christmas, currently pending review.

I did a demo a few days ago showing RBAC with roles coming from AD, where devs saw /dev, /test, and /prd, and compliance had read only access to additional folders. It took under 5 minutes to configure everything.

ref:

[1]: https://github.com/mickael-kerjean/filestash

[2]: https://www.filestash.app/docs/guide/virtual-filesystem.html

[3]: https://www.filestash.app/docs/guide/mcp-gateway.html https://github.com/mickael-kerjean/filestash/tree/master/ser...