Code execution sandboxes MCP servers

A server here runs code or commands in an isolated sandbox or container for an AI agent.

Not here: deploying apps to production.

307servers
107 remote200 localTagged by Odel's AI, which can make mistakes

Best fit

182 made for this, ranked by starsRemoteLocal
  1. Tenki Sandbox MCP @luxorlabs/tenki-mcpDisposable microVM sandboxes for AI agents: run code, read/write files, git, preview URLs.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  2. Keelen @jamie7893/keelenAutonomous dev team steered from chat: plain-English requests in, tested merged PRs out.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. Grok Build @nuruvala/grok-build-mcp-serverRun the Grok Build CLI as MCP tools: agent runs with live progress, code review, web research.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  4. tollbooth @chrzanowy/agent-tollboothStateful backend for AI agents: memory, watch, render, execute, and shared boards with digests.5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  5. Starwell: World Data & Statistics @starwell/world-data-statisticsStatistics from 28 agencies: FRED, Eurostat, ECB, World Bank, OECD. Cited values, computed answers.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  6. Python Code Validator @statemind/python-code-validatorProves AI-generated Python does what you asked: lint, types, security, sandbox run, exact fixes.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  7. Agentic Compute @codelad1304/agentic-computeSecure Python sandbox for data optimization and Matplotlib rendering via x402 microtransactions.37% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  8. ScratchRun @scratchrun/mcpEphemeral MicroVM-isolated code execution for AI agents. Fresh VM per call, hard-purged after.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  9. Codexbox @psyb0t/codexboxSelf-hosted MCP server: run OpenAI Codex CLI prompts and manage workspace files.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  10. Cinch @yusufkadry/cinchRun AI-generated code safely. gVisor-isolated Python/JS sandboxes for any MCP client. Pay per run.9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  11. Ghostlink @bgorzelic/ghostlinkSandboxed repo access for coding agents: search, read, patch, run, git -- confined to a repo root.3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  12. Kubernetes Ephemeral Job @inhuman/mcp-k8s-ephemeral-jobRuns a command in a throwaway Kubernetes pod and returns exit code, output and artifacts.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  13. Forge MCP @frmoded/forge-mcpMCP server + tools for the Forge E-- generative-music authoring loop (compile / run / commit).4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  14. Deep Agentic Core MCP @deepagentlabs/deep-agentic-core-mcpUnified MCP server for AgenticLens and Agentic Chaos capabilities.8% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  15. PLwC - Personality Layer with Conscience @mhoedt-ai/plwc-gatewayGoverned local MCP gateway for workspace, sandbox, document and profile operations.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from MCPB.
  16. Customjs @customjs/customjs-mcpHost static HTML pages, generate PDFs, screenshots, scrape JS sites, run sandboxed JavaScript.11% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  17. MCP stdio ShellGuard @studiomeyer/stdio-shellguardDefense-in-depth for MCP stdio servers: shell-injection guard, AST audit CLI, RCE blocking.4% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  18. BugProof @sidinsearch/bugproofCapture, replay, and debug failures with portable, executable bug artifacts5% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  19. Render Unto Caesar @mightydatainc/ruc-mcpAn MCP server that fuses LLM contextual intelligence with procedural code reliability.7% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from Docker.
  20. agent-godmode @mdvohra/agent-godmodeSandboxed workspace MCP: file ops, argv-only run_command, list_files; BYO LLM prompts.10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  21. Essentials @fieldcure/essentialsEssential MCP server: HTTP, web search, downloads, Wolfram|Alpha, shell, JS, file I/O, memory.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from NuGet.
  22. Forgejudge @ahmedeid1/forgejudgeOpen eval leaderboard + CI gate for autonomous coding agents (solve, score, trace).3% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  23. Code Executor @csoai-org/code-executor-mcpCode Executor MCP Server by MEOK AI Labs13% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  24. Plori MCP server @plori/ploriRun Plori agents in Workspaces over MCP.5% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.