Exec Sandbox MCP Server

io.github.inhuman/mcp-exec

Repository Registry

What is the Exec Sandbox MCP server?

Single exec tool running caller Python in a network-isolated locked-down sandbox.

How to install Exec Sandbox

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

MCP_EXEC_TRANSPORT
MCP transport. Must be 'stdio' for direct docker/stdio use.
MCP_EXEC_DEFAULT_TIMEOUT_S
Default wall-clock timeout per exec, seconds.
MCP_EXEC_MAX_TIMEOUT_S
Maximum wall-clock timeout a caller may request, seconds.
MCP_EXEC_MAX_OUTPUT_BYTES
Cap on combined stdout/stderr before truncation.
MCP_EXEC_MAX_STDIN_BYTES
Cap on stdin passed to the sandboxed code.
MCP_EXEC_AUTH_TOKEN
secret
Optional X-MCP-AUTH token (http/sse transports only).

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "mcp-exec": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "docker.io/idconstruct/mcp-exec:v0.5.4",
        "--network",
        "none",
        "--read-only",
        "--cap-drop",
        "ALL",
        "--security-opt",
        "no-new-privileges",
        "--user",
        "65532:65532",
        "--tmpfs",
        "/tmp:rw,noexec,nosuid,size=64m",
        "--memory",
        "256m",
        "--pids-limit",
        "128",
        "--cpus",
        "1"
      ],
      "env": {
        "MCP_EXEC_TRANSPORT": "<YOUR_MCP_EXEC_TRANSPORT>",
        "MCP_EXEC_DEFAULT_TIMEOUT_S": "<YOUR_MCP_EXEC_DEFAULT_TIMEOUT_S>",
        "MCP_EXEC_MAX_TIMEOUT_S": "<YOUR_MCP_EXEC_MAX_TIMEOUT_S>",
        "MCP_EXEC_MAX_OUTPUT_BYTES": "<YOUR_MCP_EXEC_MAX_OUTPUT_BYTES>",
        "MCP_EXEC_MAX_STDIN_BYTES": "<YOUR_MCP_EXEC_MAX_STDIN_BYTES>",
        "MCP_EXEC_AUTH_TOKEN": "<YOUR_MCP_EXEC_AUTH_TOKEN>"
      }
    }
  }
}

Related MCP servers

Kubernetes Ephemeral Job

Maintained

Runs a command in a throwaway Kubernetes pod and returns exit code, output and artifacts.

MIT

View repository →

SSH Fleet

Maintained

Curated ssh_probe diagnostics and single-host ssh_exec over an allowlisted SSH fleet.

MIT

View repository →

Inite Brain

Active

Open-source bitemporal memory layer for LLM agents with knowledge graphs and conflict resolution.

TypeScript

AGPL-3.0

View repository →

io.github.inity13/agentstack-mcp

Active

Deterministic reasoning stack for AI agents: simulate, decide & compute, plus cross-domain tools.

JavaScript

MIT

View repository →

io.github.inity13/decisionmatrix-mcp

Active

Deterministic multi-criteria decision analysis for AI agents — score, rank & explain options.

JavaScript

MIT

View repository →

io.github.inity13/precisioncalc-mcp

Active

High-precision finance & business calculations for AI agents — exact decimals, never floats.

Python

MIT

View repository →