Python Exec Sandbox MCP Server

@lu-zhengda

代码仓库

基本信息

分类

推理

传输方式

stdio

作者

lu-zhengda

提交者

Zhengda Lu

关于 Python Exec Sandbox MCP Server

Sandboxed Python execution for AI agents. Scripts run in ephemeral, isolated environments (bubblewrap on Linux, Docker on macOS) with PEP 723 inline dependencies — zero host pollution, zero leftover venvs, zero package conflicts. Supports multi-version Python (3.13–3.15), configu

#python #sandbox #execution #security#pep723#docker#bubblewrap#uv

Python Exec Sandbox MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "python-sandbox": {
      "command": "uvx",
      "args": [
        "mcp-python-exec-sandbox"
      ]
    }
  }
}

Python Exec Sandbox MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is Python Exec Sandbox?

Python Exec Sandbox is an MCP server that provides sandboxed execution of Python scripts with automatic dependency management. It uses platform-specific isolation (bubblewrap on Linux, Docker on macOS) and the uv package manager to resolve PEP 723 inline metadata, making it ideal for safely running untrusted or third-party code in agent workflows.

How to use Python Exec Sandbox?

Install the server via uvx and add it to Claude: claude mcp add python-sandbox -- uvx mcp-python-exec-sandbox. Then use the three provided tools: execute_python to run a script, check_environment to inspect the runtime, and validate_script to verify dependencies without execution.

Key features of Python Exec Sandbox

Sandboxed execution with platform-specific isolation (bubblewrap, Docker)
PEP 723 inline metadata for declaring dependencies in scripts
Multi-version Python support (3.13, 3.14, 3.15) via automatic uv downloads
Ephemeral environments with per-execution dependency resolution
Configurable timeouts (1–300s) and output truncation

Use cases of Python Exec Sandbox

Running untrusted Python scripts safely in an AI agent pipeline
Testing scripts with complex dependencies without permanent installation
Executing code in CI/CD workflows with guaranteed isolation
Providing a sandboxed Python environment for educational or exploration tools

常见问题

What sandbox isolation methods are used?

Bubblewrap is used on Linux and Docker on macOS to prevent host filesystem access.

Can I configure the execution timeout?

Yes, the server supports configurable per-execution timeouts ranging from 1 to 300 seconds.

How are dependencies managed?

Dependencies are declared inline using PEP 723 `# /// script` blocks and are automatically resolved by uv into ephemeral environments. Package caching via uv makes repeat installs near-instant.

What Python versions are supported?

Python Exec Sandbox supports scripts on Python 3.13, 3.14, and 3.15. The correct version is downloaded automatically by uv.

What tools does the server expose?

Three tools are available: `execute_python` (run a script with dependency management), `check_environment` (report runtime details), and `validate_script` (validate metadata without execution).

推理分类下的更多 MCP 服务器

quarkus-langchain4j-workshop

quarkusio

Quarkus LangChain4J Workshop that demonstrates both single AI service capabilities and Agentic AI orchestration

mcp-agentic-rag

rukshannet

MCP Server for Agentic RAG applications

AWorld: Advancing Agentic AI

inclusionAI

Search, understand, reproduce, and improve an idea with ease

1.2K

iFlytek Workflow MCP Server

iflytek

This a simple implementation of an MCP server using iFlytek. It enables calling iFlytek workflows through MCP tools.

Agentic MCP Client

peakmojo

A standalone agent runner that executes tasks using MCP (Model Context Protocol) tools via Anthropic Claude, AWS BedRock and OpenAI APIs. It enables AI agents to run autonomously in cloud environments and interact with various systems securely.