Advertise
MCP.so
Sign In

Secure Agent Workspace MCP Server

@HrRodan

Repository

Basic information

Category

AI & Agents

Transports

stdio

Author

HrRodan

Submitted by

Martin

About Secure Agent Workspace MCP Server

A sandboxed, agentic workspace providing secure filesystem, bash, and uv-powered Python execution.

#python#uv#docker#coding

Secure Agent Workspace MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "agent-workspace-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--init",
        "--memory=2g",
        "--cpus=2.0",
        "--pids-limit=256",
        "--cap-drop=ALL",
        "--security-opt=no-new-privileges:true",
        "--read-only",
        "--tmpfs",
        "/tmp:size=64m",
        "--tmpfs",
        "/home/mcpuser/.cache:size=512m",
        "--user",
        "1000:1000",
        "-v",
        "/path/to/your/projects:/workspace",
        "ghcr.io/hrrodan/agent-workspace-mcp:latest"
      ]
    }
  }
}

Secure Agent Workspace MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is Secure Agent Workspace?

Secure Agent Workspace is a Model Context Protocol (MCP) server that provides a highly secure, containerized workspace for LLM agents. It allows agents to autonomously code, test, and debug in an isolated Docker sandbox, protecting the host machine.

How to use Secure Agent Workspace?

Pull or build the Docker image, then configure your MCP client (e.g., Claude Desktop) with a docker run command that includes resource limits, security options, and a volume mount to your project directory. Alternatively, use the OpenAI Agents SDK with an MCPServerStdio to invoke the server programmatically. Environment variables such as COMMAND_TIMEOUT and LOG_LEVEL can be set via Docker --env.

Key features of Secure Agent Workspace

  • Full project lifecycle (uv init, add, run)
  • Secure bash execution with timeouts
  • Token-optimized output via RTK (60–90% savings)
  • Path-traversal protected filesystem operations
  • Multi-layer security (non-root, dropped capabilities, read-only)
  • Precision editing with fuzzy matching and syntax validation

Use cases of Secure Agent Workspace

  • Agents autonomously create, test, and debug code in a sandboxed environment
  • Manage project dependencies using uv add and uv run
  • Perform precise file edits with syntax validation to prevent broken code
  • Search workspace for files using glob patterns, excluding high-noise directories

Frequently asked questions

1

What runtime environment does Secure Agent Workspace require?

The server runs inside a Docker container. The host needs Docker Engine, and the container image can be pulled from GHCR or built locally.

Comments

More AI & Agents MCP servers

strac-mcp-dlp

strac-io

Detect and redact PII, PHI, PCI and secrets — SSNs, credit cards, passports, API keys and cloud credentials — in text and in local files, using the Strac DLP API. Five tools: redact_text, detect_sensitive_data, detect_fi

3

AON — Agent Offer Network

AON

AON MCP connects AI agents to real, buyable products and services with live pricing and tracked links—enabling builders to earn developer revenue share from attributed clicks and conversions.

2

KissCode

NickSF189

KissCode is the world's first relationship network where AI agents and people meet. Connect your agent over MCP: it gets a profile, meets other agents and real people, chats, sends virtual gifts, goes on dinner and movie

早

早起鸟儿喊真人验真

shenshaoyin

早起鸟儿喊真人验真 is a remote MCP server available at http://121.40.18.232.

scvd.store

seancrecord

scvd.store is an evidence observatory for agentic commerce. Independent signed observation of what other people's endpoints, artifacts and payments actually did among other things. USDC on Base, Arbitrum One, World Chain

2
Advertise