Secure Agent Workspace MCP Server

@HrRodan

代码仓库

基本信息

分类

AI 与智能体

传输方式

stdio

作者

HrRodan

提交者

Martin

关于 Secure Agent Workspace MCP Server

A sandboxed, agentic workspace providing secure filesystem, bash, and uv-powered Python execution.

#python #uv #docker #coding

Secure Agent Workspace MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "agent-workspace-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--init",
        "--memory=2g",
        "--cpus=2.0",
        "--pids-limit=256",
        "--cap-drop=ALL",
        "--security-opt=no-new-privileges:true",
        "--read-only",
        "--tmpfs",
        "/tmp:size=64m",
        "--tmpfs",
        "/home/mcpuser/.cache:size=512m",
        "--user",
        "1000:1000",
        "-v",
        "/path/to/your/projects:/workspace",
        "ghcr.io/hrrodan/agent-workspace-mcp:latest"
      ]
    }
  }
}

Secure Agent Workspace MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Secure Agent Workspace?

Secure Agent Workspace is a Model Context Protocol (MCP) server that provides a highly secure, containerized workspace for LLM agents. It allows agents to autonomously code, test, and debug in an isolated Docker sandbox, protecting the host machine.

How to use Secure Agent Workspace?

Pull or build the Docker image, then configure your MCP client (e.g., Claude Desktop) with a docker run command that includes resource limits, security options, and a volume mount to your project directory. Alternatively, use the OpenAI Agents SDK with an MCPServerStdio to invoke the server programmatically. Environment variables such as COMMAND_TIMEOUT and LOG_LEVEL can be set via Docker --env.

Key features of Secure Agent Workspace

Full project lifecycle (uv init, add, run)
Secure bash execution with timeouts
Token-optimized output via RTK (60–90% savings)
Path-traversal protected filesystem operations
Multi-layer security (non-root, dropped capabilities, read-only)
Precision editing with fuzzy matching and syntax validation

Use cases of Secure Agent Workspace

Agents autonomously create, test, and debug code in a sandboxed environment
Manage project dependencies using uv add and uv run
Perform precise file edits with syntax validation to prevent broken code
Search workspace for files using glob patterns, excluding high-noise directories

常见问题

What runtime environment does Secure Agent Workspace require?

The server runs inside a Docker container. The host needs Docker Engine, and the container image can be pulled from GHCR or built locally.

AI 与智能体分类下的更多 MCP 服务器

Heterogent

Hire AI agents and lock USDC in trustless on-chain escrow on Solana all from your AI assistant. Browse agents by skill or protocol, prepare a hire, and track escrow status without leaving your chat.

TruVerifAI Panel-review

TruVerifAI

TruVerifAI's Panel Review is the guardian agent for AI's highest-stakes coding decisions: four frontier models argue over an AI coding agent's riskiest designs, diffs, and commits before they execute, with local review g

KissCode

NickSF189

KissCode is the world's first relationship network where AI agents and people meet. Connect your agent over MCP: it gets a profile, meets other agents and real people, chats, sends virtual gifts, goes on dinner and movie

早

早起鸟儿喊真人验真

shenshaoyin

早起鸟儿喊真人验真 is a remote MCP server available at http://121.40.18.232.

Gamedev Tavern

Gamedev Tavern is MCP for the game industry: studios, people, games and open quests. Have a goal — your AI agent writes a quest in your words and Tavern agents look for people and studios that fit. No goal — your agent i