Code execution sandboxes MCP servers

A server here runs code or commands in an isolated sandbox or container for an AI agent.

Not here: deploying apps to production.

307servers
107 remote200 localTagged by Odel's AI, which can make mistakes

Best fit

182 made for this, ranked by starsRemoteLocal
  1. EQVPS — VPS and code sandboxes for AI agents @poiuyhje/eqvpsNo-KYC VPS + per-second code sandboxes AI agents run over MCP — 75 tools, SDK, pay BTC/XMR/USDC/USDT13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  2. Code Sandbox API @br0ski777/code-sandboxExecute Python, JavaScript, SQL code in a sandbox. x402 micropayment.23% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  3. Prover @axiomatic-ai/proverLean 4 MCP server: compile, prove theorems, and formalize math with Mathlib.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  4. Premiss @founders-loralabs/premissCreate Python strategies and backtest crypto, stocks and ETFs in Claude. Premiss account required.Not assessed yet.A remote server; no sign-in.
  5. Shardflux @shardflux/mcpPersistent cloud workspaces for AI agents: run commands, edit files, use git and a browser.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  6. AgentSpace @agentspace/agentspaceGive your agent a persistent workspace: files, a code sandbox and a public URL to publish to.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  7. Batcave Agent Services @bjorn2-sol/batcave-agent-servicesMCP discovery and x402 checkout handoff for five paid Batcave agent products.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  8. Sandboxd Code Run @saastemly/sandboxd-code-runHosted one-shot code execution: send a snippet plus optional files, get stdout, stderr, exit...8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  9. SecureStamp Action Proof — Cross-Cloud Public Beta (Unverified) @securestamp/action-proofUNVERIFIED: cross-cloud beta; sandbox by default; production opt-in via customer Guardian.13% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  10. NIRA REPL MCP @pachote/nira-replSecure code execution sandbox for Claude — run Python, JavaScript, and shell commands10% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  11. Ovrin @joshluberisse/ovrin-mcpSecure Linux sandboxes for AI agents, as MCP tools.6% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from PyPI.
  12. Agent Vending Factory @rubentay/agent-vending-factoryPay-per-call MCP tools via x402 USDC: ZAR prices, data extraction, Python sandbox, SA flights.9% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  13. Alpacacloud @melgencer/alpacacloud-mcpConnect AI agents to Alpaca Cloud: Postgres, Auth, Storage, Sandboxes, and Workflows.7% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  14. Bedc @be-dce/bedc-mcpMCP server for Dual Canvas Execution (DCE) - use with Polsia, Cursor, Claude, and other MCP clients9% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  15. Gibil @alexikm/gibilSpawns an ephemeral Ubuntu VM with project clone, shell exec, file I/O, and auto-destroy on TTL.12% chance this is malicious. Assessed by AI, which can make mistakes.Runs on your machine, installed from npm.
  16. AIAgora @aiagora/agoraOpen square for AI agents: solve sandbox-tested problems, earn Ed25519-signed proofs.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  17. cdbx.ai MCP @cdbx/mcp-serverBuild Apps and run code in 30 languages — sandboxed, with persistent sessions for agent loops.12% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  18. agent-exec @448c/agent-execAccountless pay-per-use sandbox, storage, locks, attestation and handoff. Paid over MCP with x402.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  19. Foundry MCP code mode @foundry-mcp/foundry-codeCode mode (preview): the AI writes a script against a typed foundry.* API and runs it in a sandbox.6% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  20. Code Interpreter Agent by Nova (CIVAI) @civai/code-interpreter-agentI do everything related to coding and execution tasks8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  21. Pebble @shippebble/pebbleHost the tools your AI builds — small internal tools in isolated microVMs, live for your team.8% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; you sign in with your account.
  22. GardenArena GardenScript @gardenarena/gardenscriptSimulate farms, validate GardenScript and compare policies with Rust. No outbound LLM calls.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  23. CinderRoute Agent Exchange @cinderroute/agentic-ci-operationsCinderRoute Agent Exchange for public failed-build triage, artifact handoff, and remediation.14% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.
  24. Python Package Runtime Test @ligafew/python-package-runtime-testHosted Python sandbox for package runtime verification: pip install and usable-import evidence.4% chance this is malicious. Assessed by AI, which can make mistakes.A remote server; no sign-in.