1. Conduid
  2. AI
  3. Sandbox MCP
MCP server · AI

Sandbox MCP

A Model Context Protocol (MCP) server that enables LLMs to run ANY code safely in isolated Docker containers.

Unclaimed MIT last commit a year ago ai
67Good

Scored 7 days ago · breakdown

About Sandbox MCP

Sandbox MCP is an MCP server published by pottekkat in the AI category: a Model Context Protocol (MCP) server that enables LLMs to run ANY code safely in isolated Docker containers.

The repository has 122 stars and 26 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/pottekkat/sandbox-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Sandbox MCP

Powered by Claude · Grounded in docs

I know everything about Sandbox MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 11 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

v0.1.1v0.1.1 · 13 May 2025Fix linter issues. Full Changelog: https://github.com/pottekkat/sandbox-mcp/compare/v0.1.0...v0.1.1
v0.1.0v0.1.0 · 12 May 2025Upgrade to the latest MCP Go SDK version. Full Changelog: https://github.com/pottekkat/sandbox-mcp/compare/v0.0.6...v0.1.0
v0.0.6v0.0.6 · 11 May 2025Fixes a key bug with annotations in the sandbox configurations. Full Changelog: https://github.com/pottekkat/sandbox-mcp/compare/v0.0.5...v0.0.6
v0.0.5v0.0.5 · 10 May 2025What's Changed chore: add few tests by @pottekkat in https://github.com/pottekkat/sandbox-mcp/pull/8 ci: add more tests by @pottekkat in https://github.com/pottekkat/sandbox-mcp/pull/9 chore: support running tests for individual tools by…
v0.0.4v0.0.4 · 2 May 2025What's Changed feat: support "before" configuration and add APISIX sandbox by @pottekkat in https://github.com/pottekkat/sandbox-mcp/pull/1 Full Changelog: https://github.com/pottekkat/sandbox-mcp/compare/v0.0.3...v0.0.4

README

Sandbox MCP Logo

GitHub Actions Workflow Status GitHub Release GitHub commits since latest release GitHub License

Sandbox MCP is a Model Context Protocol (MCP) server that enables LLMs (MCP hosts/clients) to run code in secure, isolated Docker containers.

While LLMs are really good at generating code, most can't run the code they generate. You end up running this untested code directly on your machine, which could have drastic unintended consequences.

Giving LLMs the tools to test the code safely prevents such issues and helps you generate more accurate code in fewer iterations.

Sandbox MCP gives the LLMs an easy-to-use execution environment that anyone can create and configure through a simple, AI-native MCP server that runs locally.

Inspired by Codapi. Some sandboxes are the same as Codapi sandboxes.

Use Cases

Sandbox MCP can be used for many different tasks, including but not limited to:

  • Secure code execution: Run any code generated by an LLM in a secure, isolated environment, protecting your system from untrusted or potentially harmful code.
  • Code testing: Automatically test and validate code in various languages and or configurations in various environments before integrating it into larger projects or production systems.
  • User code validation: Safely execute and check user-submitted code or scripts, ensuring they behave as expected and do not perform malicious actions.
  • Network troubleshooting: Diagnose connectivity issues, test endpoints, and analyze network performance using isolated network tools, all without exposing your system.
  • Educational and interview coding: Instantly compile and run code snippets for learning, teaching, or technical interviews, providing immediate feedback in a safe, temporary environment.
  • Automated code review and feedback: Enable LLMs to execute, test, and review code automatically, offering actionable feedback or suggestions before code is merged or deployed.

Demo

This demo shows how Sandbox MCP works with Claude Desktop.

Sandbox MCP demo GIF

Try the video if the GIF isn't clear.

Installation

Download Binary

You can download the appropriate binary for your operating system (for example, Darwin) and processor architecture (arm64) from the Releases page (sandbox-mcp_Darwin_arm64.tar.gz).

Install via Go

Prerequisites:

  • Go 1.24 or higher
go install github.com/pottekkat/sandbox-mcp/cmd/sandbox-mcp@latest

Get the path to the sandbox-mcp binary:

which sandbox-mcp

Build from Source

See the Development section.

Usage

Initilization

Before you use sandbox-mcp with LLMs, you need to initialize its configuration:

# Create the configuration directory in
# $XDG_CONFIG_HOME/sandbox-mcp and pull
# the default sandboxes from GitHub
sandbox-mcp --pull

# Build the Docker images for the sandboxes
sandbox-mcp --build

[!NOTE] Make sure you have Docker installed and running.

With MCP Hosts/Clients

Add this to your claude_desktop_config.json for Claude Desktop or mcp.json for Cursor IDE:

{
    "mcpServers": {
        "sandbox-mcp": {
            "command": "path/to/sandbox-mcp",
            "args": [
                "--stdio"
            ]
        }
    }
}

[!NOTE] Make sure to replace path/to/sandbox-mcp with the actual path to the sandbox-mcp binary.

Available Sandboxes

Sandbox Description
shell A secure, isolated Linux environment for running lightweight commands that does not require network access.
python Safely execute Python code in a secure, isolated environment.
rust Compile and run Rust code in an isolated environment.
network-tools Use various network utilities in an isolated Linux sandbox. Perfect for network diagnostics and troubleshooting. See https://github.com/jonlabelle/docker-network-tools for a list of available tools.
go Run Go code securely in an isolated environment with network access.
javascript Run JavaScript code in an isolated environment using Node.js.
apisix Run a lightweight instance of Apache APISIX, which can be configured through a YAML file and can be interacted through the curl command provided in the main.sh file. For example, curl -sI http://127.0.0.1:9080/ip.
java Compile and run Java code in an isolated sandbox. Supports Java preview features.

[!IMPORTANT]

Your Own Sandbox

You can create and add your own sandboxes in $XDG_CONFIG_HOME/sandbox-mcp/sandboxes. A sandbox is essentially a Dockerfile and a JSON configuration. Check out the examples and the guide to learn more.

Development

Fork and clone the repository:

git clone https://github.com/username/sandbox-mcp.git

Change into the directory:

cd sandbox-mcp

Install dependencies:

make deps

Build the project:

make build

Update your MCP servers configuration to point to the local build:

{
    "mcpServers": {
        "sandbox-mcp": {
            "command": "/path/to/sandbox-mcp/dist/sandbox-mcp",
            "args": [
                "--stdio"
            ]
        }
    }
}

License

MIT License

README fetched from the repository 11 hours ago. The original is authoritative.

Questions

About Sandbox MCP

How do I install Sandbox MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Sandbox MCP safe to use with an AI agent?

Its trust score is 67 out of 100 (good). It passes 5 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Sandbox MCP still maintained?

The last commit was a year ago and 9 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.