About Plimsoll
Plimsoll is an MCP server published by plimsollmark in the Blockchain category: a sandbox service for running untrusted, agent-authored code that reports the isolation boundary each run executed behind. Lessons, no clone needed: https://plimsollmark.github.io/plimsoll/trainers/.
The repository has 27 stars and 2 forks, with the last commit yesterday. Recent commit activity is the strongest signal that reported issues will get attention.
Install
From source
git clone https://github.com/plimsollmark/plimsollThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
✦
Ask AI about Plimsoll
Powered by Claude · Grounded in docs
I know everything about Plimsoll. Ask me about installation, configuration, usage, or troubleshooting.
Security checks
6 checks have not been run yet.
Releases
v0.21.0plimsoll v0.21.0 · 9 Oct 2026Every answer from the daemon is now tied to the request it answers, so a proxy that serves one request's answer for another can no longer make a call that ran read "nothing ran". The daemon also marks the refusals made before its own code…
v0.20.0plimsoll v0.20.0 · 9 Oct 2026plimsoll now plugs into six agent frameworks: Agno, CrewAI and Google ADK in the Python client, and the Vercel AI SDK, Trigger.dev and Mastra in the TypeScript client. Each hands the model's code to a plimsoll daemon you run, behind the…
v0.19.0plimsoll v0.19.0 · 4 Oct 2026The Docker Cloud provider can now also speak the REST API Docker documents, kept as a backup behind one setting while the pre-launch Connect API, the only one with grants and image evidence, stays the default. The TypeScript code tool…
v0.18.0plimsoll v0.18.0 · 4 Oct 2026Docker guests now run as a uid no host account uses, E2B and Docker Cloud runs can draw on a daily allowance of microVM seconds, a signed bundle of run records now proves it is the whole file its harness wrote, and the efficiency advisor…
v0.17.6plimsoll v0.17.6 · 3 Oct 2026A session pool's memory reservation is given back exactly once, whatever the order of a failed pool start and `Drain`, and the docs state the small-pool warm guarantee for the sessions it covers. Sessions The memory budget stays whole when…