Back to Browse

Llm Sandbox MCP Server

by Vndee
Developer ToolsLow Risk10.0MCP RegistryLocal
Free

Server data from the Official MCP Registry

Securely run LLM-generated code in isolated containers across 7 languages and 4 backends.

About

Securely run LLM-generated code in isolated containers across 7 languages and 4 backends.

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (1 strong, 1 medium validity signals). No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry.

3 files analyzed · 1 issue found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Container backend to use. Must match the installed extra: mcp-docker, mcp-podman, or mcp-k8s.Optional

Environment variable: BACKEND

Docker or Podman socket URL, e.g. unix:///var/run/docker.sockOptional

Environment variable: DOCKER_HOST

Path to kubeconfig file when BACKEND=kubernetes.Optional

Environment variable: KUBECONFIG

Kubernetes namespace used for sandbox pods when BACKEND=kubernetes.Optional

Environment variable: NAMESPACE

Commit the container after a run so installed libraries persist between sessions.Optional

Environment variable: COMMIT_CONTAINER

Keep the base image after the session ends to avoid re-pulling it on the next run.Optional

Environment variable: KEEP_TEMPLATE

Network mode for the sandbox container. Set to 'none' for hardened isolation. Docker and Podman backends only.Optional

Environment variable: SANDBOX_NETWORK_MODE

Mount the sandbox root filesystem read-only. Recommended: true. Docker and Podman backends only.Optional

Environment variable: SANDBOX_READ_ONLY

Comma-separated Linux capabilities to drop. Recommended: ALL. Docker and Podman backends only.Optional

Environment variable: SANDBOX_CAP_DROP

Comma-separated container security options, e.g. no-new-privileges. Docker and Podman backends only.Optional

Environment variable: SANDBOX_SECURITY_OPT

Memory limit for the sandbox container, e.g. 4g. Docker and Podman backends only.Optional

Environment variable: SANDBOX_MEMORY

Fractional CPU allocation for the sandbox container, e.g. 1.5. Docker and Podman backends only.Optional

Environment variable: SANDBOX_CPUS

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-vndee-llm-sandbox": {
      "env": {
        "BACKEND": "your-backend-here",
        "NAMESPACE": "your-namespace-here",
        "KUBECONFIG": "your-kubeconfig-here",
        "DOCKER_HOST": "your-docker-host-here",
        "SANDBOX_CPUS": "your-sandbox-cpus-here",
        "KEEP_TEMPLATE": "your-keep-template-here",
        "SANDBOX_MEMORY": "your-sandbox-memory-here",
        "COMMIT_CONTAINER": "your-commit-container-here",
        "SANDBOX_CAP_DROP": "your-sandbox-cap-drop-here",
        "SANDBOX_READ_ONLY": "your-sandbox-read-only-here",
        "SANDBOX_NETWORK_MODE": "your-sandbox-network-mode-here",
        "SANDBOX_SECURITY_OPT": "your-sandbox-security-opt-here"
      },
      "args": [
        "llm-sandbox"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!