What languages can I run in the sandbox?
TypeScript, JavaScript, and Python. Python runs via Pyodide inside the Deno environment.
@bewt85
Basic information
An MCP server that allows you to run TypeScript, JavaScript, and Python code in a sandbox on your local machine using the Deno® sandbox. This server provides a controlled environment for executing code with explicit permission controls.
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"mcp-deno-sandbox": {
"command": "npx",
"args": [
"@modelcontextprotocol/inspector",
"./node_modules/.bin/ts-node",
"src/index.ts"
]
}
}
}Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
Fetch the live tool list by running this server in a temporary sandbox using the button above.
An MCP server that allows you to run TypeScript, JavaScript, and Python code in a local sandbox using the Deno® runtime. It enforces explicit permission controls (e.g., which websites to visit, which files to read/write) to protect your machine from untrusted code, especially when code is generated by LLMs.
Install Node.js or Deno. Add the server to your client’s configuration (e.g., claude_desktop_config.json) using either deno run npm:mcp-deno-sandbox or npx mcp-deno-sandbox, passing permission flags like --allow-net=icanhazip.com,example.com at startup. Permissions are static and require a server restart to change.
/tmp) with limited permissions.TypeScript, JavaScript, and Python. Python runs via Pyodide inside the Deno environment.
Permissions are passed as command-line arguments when starting the server (e.g., `--allow-read=/tmp`, `--allow-net=example.com`). They are the same as Deno permissions; you cannot change them without restarting the server.
No. “Deno” is a registered trademark of Deno Land LLC. This project is an independent fan creation.
Writing files with `open(PATH, 'w')` does not work; use `import js; js.fs.writeFileSync(PATH, CONTENT)` instead. When using `--allow-read` broadly, the server guesses which directories to mount into Pyodide (home and /tmp). Windows mounting may have issues.
It uses Deno’s sandbox, which relies on Chrome’s isolation technology. You control file, network, and execution permissions. Granting write access to the server’s config file or blanket FFI/execution permissions can completely undermine the sandbox.
A Node.js–based Model Context Protocol server that spins up disposable Docker containers to execute arbitrary JavaScript.
A Model Context Protocol (MCP) server that enables LLMs to run ANY code safely in isolated Docker containers.
An MCP (Model Context Protocol) server that helps AI assistants (like Claude) break down complex tasks into manageable steps, track progress, and manage a hierarchical task list.
This repository contains hands-on projects, code examples, and deployment workflows. Explore multi-agent systems, LangChain, LangGraph, AutoGen, CrewAI, RAG, MCP, automation with n8n, and scalable agent deployment using Docker, AWS, and BentoML.
Agentic SWMM is an automated, auditable, and memory-informed framework for reproducible stormwater modelling, integrating QGIS and EPA SWMM through the aiswmm runtime, reusable Skills, and MCP interfaces, with QA verification, provenance tracking, calibration support, and Codex,
Comments