What sandbox isolation methods are used?
Bubblewrap is used on Linux and Docker on macOS to prevent host filesystem access.
@lu-zhengda
Basic information
Sandboxed Python execution for AI agents. Scripts run in ephemeral, isolated environments (bubblewrap on Linux, Docker on macOS) with PEP 723 inline dependencies — zero host pollution, zero leftover venvs, zero package conflicts. Supports multi-version Python (3.13–3.15), configu
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"python-sandbox": {
"command": "uvx",
"args": [
"mcp-python-exec-sandbox"
]
}
}
}Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
Fetch the live tool list by running this server in a temporary sandbox using the button above.
Python Exec Sandbox is an MCP server that provides sandboxed execution of Python scripts with automatic dependency management. It uses platform-specific isolation (bubblewrap on Linux, Docker on macOS) and the uv package manager to resolve PEP 723 inline metadata, making it ideal for safely running untrusted or third-party code in agent workflows.
Install the server via uvx and add it to Claude: claude mcp add python-sandbox -- uvx mcp-python-exec-sandbox. Then use the three provided tools: execute_python to run a script, check_environment to inspect the runtime, and validate_script to verify dependencies without execution.
Bubblewrap is used on Linux and Docker on macOS to prevent host filesystem access.
Yes, the server supports configurable per-execution timeouts ranging from 1 to 300 seconds.
Dependencies are declared inline using PEP 723 `# /// script` blocks and are automatically resolved by uv into ephemeral environments. Package caching via uv makes repeat installs near-instant.
Python Exec Sandbox supports scripts on Python 3.13, 3.14, and 3.15. The correct version is downloaded automatically by uv.
Three tools are available: `execute_python` (run a script with dependency management), `check_environment` (report runtime details), and `validate_script` (validate metadata without execution).
A Node.js–based Model Context Protocol server that spins up disposable Docker containers to execute arbitrary JavaScript.
Search, understand, reproduce, and improve an idea with ease
Multi-Agent AI Orchestration Workshop
A standalone agent runner that executes tasks using MCP (Model Context Protocol) tools via Anthropic Claude, AWS BedRock and OpenAI APIs. It enables AI agents to run autonomously in cloud environments and interact with various systems securely.
Agentic SWMM is an automated, auditable, and memory-informed framework for reproducible stormwater modelling, integrating QGIS and EPA SWMM through the aiswmm runtime, reusable Skills, and MCP interfaces, with QA verification, provenance tracking, calibration support, and Codex,
Comments