Code execution sandboxes MCP servers

A server here runs code or commands in an isolated sandbox or container for an AI agent.

Not here: deploying apps to production.

307servers
107 remote200 localTagged by Odel's AI, which can make mistakes

Best fit

182 made for this, ranked by starsRemoteLocal
  1. devcontainer-mcp @aniongithub/devcontainer-mcpManage dev container environments via MCP (Docker, DevPod, Codespaces).9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.27 GitHub stars.
  2. Codex Tool @x51xxx/codex-mcp-toolMCP server bridging AI assistants to OpenAI Codex CLI for code analysis and review6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.24 GitHub stars.
  3. ArcGIS MCP Bridge @muend/arcgis-mcp-bridgeSecure local-first MCP server for licensed ArcGIS Pro and ArcPy on Windows.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.22 GitHub stars.
  4. Memory Journal @neverinfamous/memory-journal-mcpDeveloper journal with knowledge graphs, relationships, Git context, and semantic search4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.20 GitHub stars.
  5. Codex Octopus @xiaolai/codex-octopusSpawn multiple specialized Codex agents as MCP servers, each independently configured.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.20 GitHub stars.
  6. Ironclaw @ironsecco/ironclawSandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.19 GitHub stars.
  7. SageMath @xbp-europe/sagemath-mcpStateful SageMath MCP server with 40 tools and a sandboxed Sage session per client.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.16 GitHub stars.
  8. Orbit @constellation-works/orbitOrbit's local-first task and workflow registry for coding agents.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.14 GitHub stars.
  9. BioMCP-TS @yeyuan98/biomcp-tsBiomedical MCP server: genes, variants, trials, literature, patents, optional SQL/R/biowasm tools.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.12 GitHub stars.
  10. PostgreSQL MCP Server @neverinfamous/postgres-mcp-serverEnterprise PostgreSQL MCP server with 63 tools, 10 resources, 10 prompts for AI-native operations7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.12 GitHub stars.
  11. Edict @sowiedu/edictAI-agent programming language. JSON AST in, WASM out. Typed, effect-tracked, Z3-verified.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.12 GitHub stars.
  12. Interactive LeetCode @sperekrestova/interactive-leetcode-mcpInteractive LeetCode MCP server with authorization and solution submission capabilities14% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.12 GitHub stars.
  13. Colab Exec @pdwi2020/mcp-server-colab-execExecute Python code on Google Colab GPU runtimes (T4/L4) from any MCP client9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.9 GitHub stars.
  14. Covenant Guard @opencovenant/guardHard spend cap, OS sandbox, and signed receipts for unattended coding agents like Claude Code.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.8 GitHub stars.
  15. RLM Tools @stefanoshea/rlm-toolsPersistent Python sandbox for token-efficient codebase exploration in MCP clients4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.8 GitHub stars.
  16. PineForge — offline PineScript v6 backtest MCP @pineforge-4pass/pineforge-codegen-mcpOffline PineScript v6 → C++ backtests at deterministic TradingView parity, run locally via MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.8 GitHub stars.
  17. OpenGrok MCP Server @icyhot09/opengrok-mcp-serverMCP server bridging OpenGrok search engine with AI for instant context across massive codebases.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.8 GitHub stars.
  18. PineForge — offline PineScript v6 backtest MCP @pineforge-4pass/pineforge-backtest-mcpOffline PineScript v6 → C++ backtests at deterministic TradingView parity, run locally via MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.7 GitHub stars.
  19. AccInt @maxbaluev/accintLocal Work Model MCP server for agent work that learns from real outcomes.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.7 GitHub stars.
  20. Tidesman @tidesman/tidesmanA free native MCP server for running and debugging Linux containers with Apple's container tool.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.7 GitHub stars.
  21. Telleroutlook MCP @telleroutlook/mcp-serverWasmAgent MCP server — WASM-sandboxed code execution with capability manifests and Tasks API.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
  22. Xahau MCP @hugegreencandle/xahau-mcpMCP server for the Xahau network — offline Hook WASM VM + static analyzer, read-only ledger tools.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
  23. Kubeview @mikhae1/kubeviewRead-only Model Context Protocol MCP server enabling code-driven AI analysis of Kubernetes clusters.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
  24. GitHub @crypto-ninja/github-mcp-serverAI-optimized GitHub MCP server: 112 tools, 98% token reduction, compact responses.14% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.5 GitHub stars.