- Conduid
- Marketplace
- #sandbox
MCP servers tagged sandbox
271 live MCP servers tagged "sandbox", ranked by trust score. Tags come from package metadata and repository topics, so this list covers servers across every category that work with sandbox.
Opensandbox
OpenSandbox is a general-purpose sandbox platform for AI applications, offering multi-language SDKs, unified sandbox APIs, and Docker/Kubernetes runtimes for scenarios like Coding…
Sandbox
All-in-One Sandbox for AI Agents that combines Browser, Shell, File, MCP and VSCode Server in a single Docker container.
Moltis
A secure persistent personal agent server in Rust. One binary, sandboxed execution, multi-provider LLMs, voice, memory, Telegram, WhatsApp, Discord, Teams, and MCP tools. Secure b…
Aenvironment
Standardized environment infrastructure for Agentic AI development.
Gru Sandbox
Cli and MCP for gbox. Enable AI agents to operate Android/Browser/Desktop like human.
Ironcurtain
A secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)
Kilntainers
MCP server to give every agent an ephemeral Linux sandboxes for executing shell commands.
Sandbox
Python sandboxes for llms
Astrid
Astrid is a portable, capability-secure operating system for composable software.
Scc
Governed runtime for AI coding agents with container sandboxes, network controls, and team-managed configuration.
Forkd
Fork() for AI agent microVMs. Spawn 100 children in ~100ms from a warm parent; BRANCH a live VM in ~150ms. KVM-isolated, snapshot CoW.
OpenRath
An open-source, PyTorch-like runtime for dynamic multi-agent and multi-session workflows.
ScienceClaw
ScienceClaw is a personal research assistant built with LangChain DeepAgents and AIO Sandbox infrastructure, adopting a completely new architecture beyond OpenClaw. It offers stro…
Open Cowork
Open-source AI agent desktop app for Windows & macOS. One-click install Claude Code, MCP tools, and Skills — with sandbox isolation, multi-model support, and Feishu/Slack integrat…
Sandbase Harness
Open-source CMA-compatible agent runtime for any model, with MCP tools, sandboxed sessions, audit, replay, and a local console. Includes a native DeepSeek Harness bundle over stdi…
Lexora
A self-evolved, sovereign desktop AI agent built for real-world action — beyond model wrappers and coding copilots. / 真实实践中自我演化的独立桌面 AI Agent。
Agentenv Framework
Creating realistic RL environments requires collaboration between researchers, engineers, and domain experts across many dimensions: artifacts, environments tools, dynamism of the…
OpenAgentCore
Open-source, self-hosted implementation of the OpenAI Agents API with multiple native harnesses.
mavdol/capsule/mcp-server
Run untrusted Python/JavaScript code in WebAssembly sandboxes.
Zerobox
Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential controls.
Wirken
The enterprise gateway for autonomous agents. Identity management, per-channel isolation, credential vault, per-session tamper-evident audit log.
Agentty
AI pair programming in your terminal — one static binary, sub-ms startup, any model
Nehemiah
On-demand Linux computers you can hand to an AI — real Firecracker microVMs with a browser, terminal, coding agents, and an AI that drives them.
Skrun
Policy-bound runtime execution and isolation engine for immutable AI agent skill artifacts
Noobot
Self-hosted AI agent workspace with tool calling, MCP, multi-model routing, sandboxed execution, multi-agent workflows, and LLM-authored 3D character animation rendered with Three…
Vigils
A local control plane for AI agents — see what they do, approve what matters, keep secrets out. Rust + Tauri + Chrome MV3.
Dsh Auto Review
Second-model AI auto-review for DeepSeek Harness approval requests: a read-only reviewer subagent returns structured allow/deny verdicts with reasons, fail-closed by default, full…
Intentic
An open-source workspace for coding agents, running on your own machine. More work. Less AI waste. Same subscriptions.
Pydantic AI Backend
File Storage & Sandbox Backends for Pydantic AI: console tools for file operations, Docker-isolated sandboxes for safe execution, and permission system with presets for access con…
Helm AI Kernel
Fail-closed execution firewall for AI agents: quarantine MCP tools, proxy OpenAI-compatible requests, emit signed receipts, and verify EvidencePacks offline.
Tupper
Open-source sandboxes for AI agents — run untrusted, AI-generated code safely on your own machine.
Ephemeral Sandbox
Open-source agent sandbox infrastructure for parallel coding agents: isolated workspaces, MCP/CLI control, observability, and atomic publication.
Zapcode
TypeScript interpreter for AI agents. Written in Rust. 2µs cold start. Sandboxed. Alternative to MCP tool calling.
Wuwe
A framework for building intelligent agents
Libre Webui
A local-first workspace for chat, private knowledge, artifacts, and isolated model-driven work. Self-hosted. Provider-flexible. Apache 2.0.
Mosoo Agent Driver
Runtime-neutral AI execution bridge for Claude Agent SDK, Codex app-server, and Agent Client Protocol (ACP).
Clampdown
Run AI coding agents in hardened container sandboxes.
Pikopod
A sandbox for the third-party APIs you depend on. Built from the provider's spec, it fails on purpose, and it replays the exact failure production hit.
Fence
Local-first security scanner, MCP protocol inspector, dynamic fuzzer, Docker sandbox, and report generator for Model Context Protocol servers.
Tap
Run your coding agent's repeated work as small sandboxed programs that borrow its tools and ask before changing anything. Includes tap discover, which finds those procedures in yo…
Claude Architect
Claude Code delegates coding to isolated CLI agents it doesn't trust (Codex, OpenCode, Pi, Pythinker), freezes what they produce, verifies it independently, and merges only what a…
Threads
Agents you can inspect, replay and trust. An agent framework for TypeScript and Python, built on an append-only event log.
Digital Twins
Test mode for your integrations, built for the way agents build.
CLI Bridge
MCP server for Claude Desktop and other Model Context Protocol clients — sandboxed filesystem access (read/write/edit/search) plus Dev Mode-gated shell command execution, scoped t…
Fountain
Run Claude Code, Codex and Gemini CLI as an HTTP API, each on its own sandbox.
Xbot
Extensible AI agent framework in Go — multi-channel (Feishu/Slack/CLI), sandboxed tool execution, MCP integration, multi-tenant sessions
Atoma
Intelligence is spent once, at the top; execution gets progressively compiled away
Abacusai Bot
100% free, open-source personal agents for your messaging apps, tools, and services
AgentVetter
Sandboxed multi-scanner security for AI skills, MCP servers, and package trees — coverage honesty, SIE judging, heatmap posture, guided triage and fix. Scan what agents install; f…
mcp-server-sigma
Open-source AI coding agent that survives interruptions, runs in a native sandbox, and proves its changes.