1. Conduid
  2. Developer Tools
  3. ipybox
MCP server · Developer Tools

ipybox

by · github.com/gradion-ai/ipybox

Python code execution sandbox with programmatic MCP tool calling (PTC)

Unclaimed Apache-2.0 last commit 6 months ago devtoolscode-executioncode-sandboxclaude-code-plugincode-modemcp-clientipythonmcpcode-interpreter
InstallView source
77Good

Scored 4 days ago · breakdown

About ipybox

ipybox is an MCP server published by gradion-ai in the Developer Tools category: python code execution sandbox with programmatic MCP tool calling (PTC). It has been installed 0 times through Conduid.

The repository has 69 stars and 18 forks, with the last commit 6 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues (0) before depending on it in production.

Install

Install
npx ipybox

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about ipybox

Powered by Claude · Grounded in docs

I know everything about ipybox. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

  • ·README presentNot checked yet.
  • ·License declaredNot checked yet.
  • ·Tests presentNot checked yet.
  • ·Dependencies pinnedNot checked yet.
  • ·No dynamic code executionNot checked yet.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

0.9.20.9.2 · 1 Jun 2026What's Changed Make kernel-init timeout configurable (#55) by @krasserm in https://github.com/gradion-ai/ipybox/pull/56 Full Changelog**: https://github.com/gradion-ai/ipybox/compare/0.9.1...0.9.2
0.9.10.9.1 · 24 Mar 2026What's Changed Add %%bash/%%sh cell magic approval support by @krasserm in https://github.com/gradion-ai/ipybox/pull/52 Use shell_magic tool_name for %%bash/%%sh approval requests by @krasserm in…
0.9.00.9.0 · 21 Mar 2026What's Changed Add runtime approval for shell commands via interception by @krasserm in https://github.com/gradion-ai/ipybox/pull/51 Full Changelog**: https://github.com/gradion-ai/ipybox/compare/0.8.2...0.9.0
0.8.20.8.2 · 15 Mar 2026What's Changed Add configurable kernel working directory behavior by @krasserm in https://github.com/gradion-ai/ipybox/pull/49 Full Changelog**: https://github.com/gradion-ai/ipybox/compare/0.8.1...0.8.2
0.8.10.8.1 · 13 Mar 2026Fix KernelGateway stderr leak: redirect both stdout and stderr to DEVNULL when `log_to_stderr` is disabled Bump mcpygen to 0.1.3 Full Changelog**: https://github.com/gradion-ai/ipybox/compare/0.8.0...0.8.1

README

ipybox

mcp-name: io.github.gradion-ai/ipybox

ipybox is a unified execution environment for Python code, shell commands, and programmatic MCP tool calls.

Overview

ipybox executes code blocks in a stateful IPython kernel. A code block can contain any combination of Python code, shell commands, and programmatic MCP tool calls. Kernels can be sandboxed with sandbox-runtime, enforcing filesystem and network restrictions at OS level.

It generates Python APIs for MCP server tools via mcpygen, and supports application-level approval of individual tool calls and shell commands during code execution. ipybox runs locally on your computer, enabling protected access to your local data and tools.

[!NOTE] Next generation ipybox

This is the next generation of ipybox, a complete rewrite. Older versions are maintained on the 0.6.x branch and can be obtained with pip install ipybox<0.7.

Documentation:

Capabilities

Capability Description
Stateful execution State persists across executions in IPython kernels
Unified execution Combine Python code, shell commands, and programmatic MCP tool calls in a code block
Shell command execution Run shell commands via !cmd syntax, capture output into Python variables
Programmatic MCP tool calls MCP tools called via generated Python API ("code mode"), not JSON directly
Python tool API generation Typed functions and Pydantic models generated from MCP tool schemas via mcpygen
Application-level approval Individual approval of tool calls and shell commands during code execution
Lightweight sandboxing Optional kernel isolation via Anthropic's sandbox-runtime
Local execution No cloud dependencies, everything runs locally on your machine

Usage

Component Description
Python SDK Python API for building applications on ipybox
MCP server ipybox as MCP server for code actions and programmatic tool calling
Claude Code plugin Plugin that bundles the ipybox MCP server and a code action skill

[!TIP] Freeact agent

Freeact is a general-purpose agent built on ipybox.

README mirrored from the source repository 4 days ago. The original is authoritative.

Questions

About ipybox

How do I install ipybox?

Run npx ipybox, then add the server to your MCP client's configuration. Conduid has recorded 0 installs, so the command is known to work with current clients.

Is ipybox safe to use with an AI agent?

Its trust score is 77 out of 100 (good). It passes 0 of 1 static security checks; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is ipybox still maintained?

Yes — the latest release is 0.9.2 (1 Jun 2026), and the last commit was 6 months ago. The repository has 69 stars and 0 open issues.