Code execution sandboxes MCP servers

A server here runs code or commands in an isolated sandbox or container for an AI agent.

Not here: deploying apps to production.

307servers
107 remote200 localTagged by Odel's AI, which can make mistakes

Best fit

182 made for this, ranked by starsRemoteLocal
  1. PineForge — offline PineScript v6 backtest MCP @pineforge-4pass/pineforge-backtest-mcpOffline PineScript v6 → C++ backtests at deterministic TradingView parity, run locally via MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.7 GitHub stars.
  2. AccInt @maxbaluev/accintLocal Work Model MCP server for agent work that learns from real outcomes.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.7 GitHub stars.
  3. Tidesman @tidesman/tidesmanA free native MCP server for running and debugging Linux containers with Apple's container tool.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.7 GitHub stars.
  4. Telleroutlook MCP @telleroutlook/mcp-serverWasmAgent MCP server — WASM-sandboxed code execution with capability manifests and Tasks API.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
  5. Xahau MCP @hugegreencandle/xahau-mcpMCP server for the Xahau network — offline Hook WASM VM + static analyzer, read-only ledger tools.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.6 GitHub stars.
  6. Kubeview @mikhae1/kubeviewRead-only Model Context Protocol MCP server enabling code-driven AI analysis of Kubernetes clusters.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.5 GitHub stars.
  7. GitHub @crypto-ninja/github-mcp-serverAI-optimized GitHub MCP server: 112 tools, 98% token reduction, compact responses.14% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.5 GitHub stars.
  8. nomArmy @rayson-tech/nomarmySandboxed coding workers, verified: tests rerun fresh and must fail with the change reverted.Not assessed yet.Runs on your machine, installed from npm.4 GitHub stars.
  9. Sabline @gowrishankar-infra/sablineRun code an AI wrote without handing it everything you can reach.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
  10. Velaris @gowrishankar-infra/velarisWrite Velaris, audit what it can touch, and run it under an effect budget.Not assessed yet.Runs on your machine, installed from PyPI.4 GitHub stars.
  11. codecalc @the-40-thieves/codecalcCode & logic calculator for AI agents: 31 languages, symbolic math, SMT/logic solving, Big-O.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
  12. Workflow MCP @juliusolsson05/workflow-mcpSession-bound Docker workflow server through Codex. State is discarded with the container.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.4 GitHub stars.
  13. Helmdeck @tosin2013/helmdeckSelf-hosted MCP server: sandboxed browser, desktop, vision, code-edit packs for any agent.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.4 GitHub stars.
  14. Nexus @j7an/nexus-mcpDelegate tasks to coding agents (Claude, Codex, Antigravity) from any MCP client9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.4 GitHub stars.
  15. Blinkbox @blinkboxhq/blinkboxOpen-source Zapier/n8n alternative as an MCP server: agents build, run and debug your workflows.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.3 GitHub stars.
  16. MCP Virtual Computer @flujo-app/mcp-virtual-computerA persistent Docker or Fly computer with a Three.js interface and optional live Xfce desktop.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  17. Parselbox @thesanjeetc/parselboxSecure Python sandbox — MCP servers, APIs, shells and host functions as native Python objects.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  18. MCP Sandbox Computer VM for AI @flujo-app/mcp-sandbox-computer-vm-for-aiNamed Docker and Fly Machine sandbox computers with an interactive MCP App dashboard.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  19. Pibox @psyb0t/piboxSelf-hosted MCP server: pi-coding-agent tools (run_prompt, file ops) over streamable HTTP.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.3 GitHub stars.
  20. Signalfuse @hypeprinter007-stack/signalfuse11 tools: crypto signals, sentiment, macro regime, arena, search, exec. x402 pay-per-call.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  21. Codex Bridge @hampsterx/codex-mcp-bridgeWraps Codex CLI as MCP tools: codex, review, query, search, structured, ping, listSessions.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.3 GitHub stars.
  22. ACMS @gattjoe/acmsApple Container MCP Server (ACMS) provides access to Apple's container CLI tool on macOS6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.
  23. OVH @davidlandais/ovh-api-mcpMCP server for the OVH API. Explore and call any OVH endpoint via sandboxed JS.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.3 GitHub stars.
  24. LaTeX @sepinetam/latex-mcpEnable AI agents to compile TeX files with LaTeX inside a Docker container.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.3 GitHub stars.