MCP servers that ship as code — a repository or a package you install and run locally (usually over stdio). They have no hosted endpoint, so we cannot probe or grade them: instead each one shows its repository, install command, license, stars and when it was last updated.
Collected from GitHub repositories and npm, PyPI, Cargo, Go, Maven, NuGet and RubyGems packages tagged as MCP servers, the official MCP Registry, Docker's MCP catalog, ModelScope, Baidu MCP World, Cline and other public directories; one entry per repository. A server that also offers a hosted endpoint is listed under Remote instead. These entries are not counted in our reachability, verification or readiness statistics.
-
mcp-python-exec-sandboxgithub.com/lu-zhengda/mcp-python-exec-sandboxupdated this year
MCP server for sandboxed Python execution — bubblewrap on Linux, Docker on macOS. PEP 723 inline deps, multi-version Python, ephemeral environments.
MIT ★ 1 -
mcp-sandboxgithub.com/JohanLi233/mcp-sandboxupdated this year
Python sandboxes for llms
Apache-2.0 ★ 39 -
Python sandbox escape detection, SQL injection taint analysis, Seccomp BPF filter generation, and ReDoS regex scanning.
MIT -
Python-Runtime-Interpreter-MCP-Servergithub.com/hileamlakB/Python-Runtime-Interpreter-MCP-Serverstale
PRIMS is a lightweight, open-source Model Context Protocol (MCP) server that lets LLM agents safely execute arbitrary Python code in a secure, throw-away sandbox.
MIT ★ 30 -
hexnest-mcpupdated this year
MCP server for HexNest - machine reasoning network with Python sandbox + web search | 机器推理网络MCP服务器
npm MIT -
Autonomous operational reporting agent built on TrueForge with custom Slack MCP (SSE), sandboxed Python analytics, and human-in-the-loop safety gates.
-
Self-tuning, disposable Docker sandboxes for AI agents. Runs code in locked-down containers sized to your hardware, with GPU sharing, crash cleanup, a CLI, a Python API and an MCP server for Claude.
MIT -
agent-sandbox-osgithub.com/dhanababum/agent-sandbox-osupdated this year
Easy, fast, isolated microVM sandboxes for AI agents and untrusted code on AWS Lambda MicroVMs — Python SDK, asb CLI, and MCP server.
Apache-2.0 ★ 4 -
sandbox-agentgithub.com/eduresser/sandbox-agentupdated this year
LangGraph agent with Docker-based sandboxed code execution (Python, Node.js, R). Hardened containers with persistent kernels, vision support, provider-agnostic LLMs, cross-session file transfer, and session GC. Available as CLI, MCP server, REST API (Aegra), and Streamlit UI.
MIT -
Two MCP tools instead of an API catalog: search finds endpoints, run executes model-written Python in a sandbox with memory and allowlisted HTTP. 217 tokens for the whole toolset.
npm MIT -
A lean Forth-2012 system in Rust, thriving on a two-stack diet. Sandboxed, with a dependency-free core. Runs in your browser, in your terminal, from Python and for AI agents through MCP.
MIT -
A Python-based MCP server that lets Claude run boto3 code to query and manage AWS resources. Execute powerful AWS operations directly through Claude with proper sandboxing and containerization. No need for complex setups - just pass your AWS credentials and start interacting with all AWS services.
MIT ★ 24 -
Two MCP tools instead of an API catalog: search finds endpoints, run executes model-written Python in a sandbox with memory and allowlisted HTTP. 217 tokens for the whole toolset; 1272 GitHub endpoints cost 79,525 tokens as plain tools.
npm MIT -
Compiler-grade multi-file security, business-logic & concurrency verifier in Rust. Traces cross-file taint via an O(V+E) Guard-Set Lattice (TS/JS/Go/Python/Rust), proves exploits in a Linux Bubblewrap sandbox, and exposes a stdio MCP server.
Apache-2.0 -
MechCPgithub.com/RsGoksel/MechCPupdated this year
Hardened MCP server giving AI agents real-browser automation: CDP-level control, dynamic Python hooks, full element cloning, AST-sandboxed for safe AI-supplied code.
MIT -
Autonomous Just-In-Time MCP Tool Synthesizer & Sandboxed Compiler (inspired by Manus Generalist Sandbox). Dynamically generates typed MCP tool schemas, validates Python execution AST trees against unsafe imports, compiles sandboxed callable handlers, and hot-plugs them into the active agent runtime.
MIT -
Production-style MCP server (Python/FastMCP): 8 typed tools for GitHub, Postgres, deploy status, and sandboxed filesystem — with SQL/path safety gates, dry-run writes, Docker, and CI.
-
Scanners flag CVEs. CheckExploit proves which ones actually reach your code — by running the real exploit against your actual code inside an isolated sandbox. Supports Python,Node repos; generates and verifies remediation patches. Built on OpenCode + MCP.
MIT ★ 3 -
MCP server for sentinel-ir: lets AI agents (Claude Desktop, Cursor, Windsurf, ...) read a compact structural IR of JavaScript, TypeScript, Python and Rust files instead of the raw source. Read-only, sandboxed to allowed folders.
npm Apache-2.0 -
openworkflowgithub.com/chaizijun1/openworkflowupdated this year
Open-source alternative to Claude Code's hidden multi-agent Workflow tool. Fan out dozens of subagents from one Python script and keep only the final answer in context. Runs standalone or as an MCP Workflow tool inside Claude Code. Zero core deps, OS-sandboxed, MCP-native.
MIT -
ReasonForge-MCP-Servergithub.com/RoyCoding8/ReasonForge-MCP-Serverupdated this year
A deterministic tool-calling framework for small LLMs. Integrates SymPy and sandboxed Python to achieve better accuracy/latency without massive parameter counts.
Apache-2.0 -
MCP server where AI agents write sandboxed Python against 5 FDA/NIH drug APIs. 2 tools, 714 tokens, 102x less data to the model.
MIT -
Turn pasted or logged crash output into a compact root-cause report over MCP: Python, Node, Java, Go, Rust and .NET traces, cause chains, app-vs-library frames, fingerprints, sandboxed mapping onto your code, secrets redacted.
MIT -
Elite Model Context Protocol (MCP) server for worldwide stock markets. Equips AI agents with 28 advanced tools: live quotes, F&O option chains, EOD Bhavcopy parsing, technical indicators, news, a Python analysis sandbox, and a direct remote SSE connection.
★ 1 -
Agent‑ready MCP server for precise, cross‑model file edits. Improves context management and developer flow by auto‑running Ruff/ Black/MyPy after Python edits, all within a secure allowed‑dir sandbox
MIT ★ 1 -
MCP stdio server for sentinel-ir: compact structural IR of JavaScript, TypeScript, Python and Rust files for AI agents (Claude Desktop, Cursor, Windsurf). Read-only, sandboxed, user-only excludes, opt-in audit log. Mirror of gitlab.com/jakubrojicek11/sentinel-ir-mcp.
Apache-2.0 ★ 1 -
flipdotgithub.com/mdbug/flipdotupdated this year
Interactive flipdot art installation on a Jetson Orin Nano: MediaPipe pose/face detection turns your silhouette into a falling-sand toy and draws a live caricature, while an AI chat (via MCP) writes sandboxed Python animations for the physical panel. Also games, Bluetooth gamepads, and a browser console.
MIT ★ 2 -
mcp-sandboxgithub.com/kkamal11/mcp-sandboxupdated this year
model context protocol
-
modal-sandbox-mcpgithub.com/amichae2/modal-sandbox-mcpupdated this year
MCP server that runs Python on Modal cloud hardware (CPU/RAM/GPU) — for Open WebUI and other MCP clients
MIT -
code-sandbox-mcpgithub.com/lemonlyue/code-sandbox-mcpupdated this year
MCP server is used to create a secure code sandbox environment, execute code in Docker containers, and provide code execution capabilities for AI applications.
★ 1 -
Give AI coding agents a disposable Windows desktop. Commands, GUI automation, browser DOM control and screenshots over MCP. Tested on Windows 10 Pro.
MIT -
sandbox-mcpgithub.com/bird/sandbox-mcpupdated this year
Local AI agent sandbox — run isolated Linux VMs on your Mac in ~60ms. No cloud, no containers sharing your kernel. Works with Claude Code, Cursor, and any MCP client.
MIT ★ 1 -
ipyboxgithub.com/gradion-ai/ipyboxupdated this year
Unified execution environment for Python code, shell commands, and programmatic MCP tool calls.
Apache-2.0 ★ 76 -
Python SDK and MCP server for Drums: create, act on, fork, reset and verify isolated desktops for computer-use agents
Apache-2.0 -
NanoBoxgithub.com/FredyRivera-dev/NanoBoxupdated this year
A naive, from-scratch implementation of an AI sandbox
Apache-2.0 ★ 1 -
hackmontygithub.com/dipankar/hackmontyupdated this year
Autonomous Sandbox Security Assessment
MIT -
Handyman-MCPgithub.com/kennetchau/Handyman-MCPupdated this year
Stateful AI Agent Infrastructure with Persistent FTS5 Memory and Sandboxed Execution.
MIT ★ 1 -
A sandboxed terminal for Claude on your Mac. No dialogs, no dependencies, no telemetry.
MIT -
An embeddable Python runtime where AI agents call tools as code. Powered by Deno + Pyodide.
MIT ★ 3 -
bentorungithub.com/vladkol/bentorunupdated this year
An MCP server that provides a secure isolated environment for executing Python code.
Apache-2.0 ★ 5 -
Security-hardened MCP server for terminal access: deny-by-default policy engine, shell=False sandboxed execution, cwd jail, secret redaction, fail-closed audit log.
MIT -
cruxgithub.com/crux-cli/cruxupdated this year
Agentic Tool Manager for Claude Code
MIT -
MCP server that runs Python a model wrote, or a project's build and tests, in a throwaway container under gVisor: no network, read-only root, hard limits, long runs as jobs. Streamable HTTP on a Nomad or Compose node. Native AOT, .NET 10.
MIT -
Executed-evidence verification gate for AI coding agents
AGPL-3.0 ★ 4 -
An MCP browser logged in to one site, contained by a Linux network namespace and an allowlisting proxy
Apache-2.0 -
Turn ChatGPT Web Chat, Grok, Claude Code, Codex, Cursor or VS Code into a coding agent for one folder on your machine, sandboxed and logged on a live dashboard. MCP server.
MIT ★ 2 -
Universal code & logic calculator for AI models: 51 MCP tools across 31 languages. Rust-sandboxed execution with verdicts, sessions, artifacts, exact arithmetic, and verified translation/optimization. No LLM, no gateway, no telemetry: the caller is the model. Apache-2.0.
Apache-2.0 ★ 5 -
Secure Host MCP server & native desktop studio with workspace isolation, capability gating, and 8 super-tools
★ 4 -
Memory and state for AI agents: every correction kept with history, and agents that resume from their own records. Runs on your database.
pypi Apache-2.0 ★ 16 -
AI software assurance & lay-user pair programming framework. Senior-grade zero-to-production guidance: graduated House Blueprints (1–15 SDDs), Clean Architecture, active guardrails (AST / Guard / Cage), and AL1–AL4 assurance (SARIF).
MIT ★ 1 -
MCP for AI era sandbox data population
MIT ★ 2 -
Multi-Agent-Mcpgithub.com/R-Mabasha/Multi-Agent-Mcpupdated this year
A Model-Agnostic, Git-Sandboxed Multi-Agent Nexus MCP Server.
MIT ★ 3 -
Self-hosted secure runtime for AI agents — isolated Docker sandboxes, MCP server, SSO, signed audit trail. No SaaS, no telemetry.
Apache-2.0 ★ 1 -
Agent-neutral MCP server with persistent memory (SOIL + Postgres KB) and a sandboxed task queue. Manifest-based ACL; works with any stdio MCP client.
Apache-2.0 ★ 3 -
MCP server hub for Node.js and Android Termux: host shell/Python/JS execution, WASI WebAssembly runner, vector search and text utilities over stdio, plus an optional token-protected HTTP/WebSocket bridge.
npm Apache-2.0 -
mcp-frontend-backendgithub.com/giauphan/mcp-frontend-backendupdated this year
A Multimodal MCP Server for Fullstack development. Bridges local Frontend & Backend repositories to AI tools (Gemini CLI, Claude, Cursor) with seamless file & image access, bypassing workspace sandbox restrictions
★ 1 -
Autonomous AI agents inside a Qubes-isolated sandbox - tag-scoped Admin API access with dom0-mediated trust boundary.
MIT ★ 8 -
An LLM agent that fixes git mistakes from plain-language requests, safely: sandboxed runs, auto backups, human approval for destructive steps, and hard guardrails. CLI + MCP server.
MIT -
Dokumen-Pintargithub.com/firdausmntp/Dokumen-Pintarupdated this year
Universal MCP server for document CRUD across formats (TXT, JSON, YAML, CSV, XML, DOCX, XLSX, PPTX, PDF) — with versioning, sandboxed multi-root workspace, full-text search, batch ops, and optional semantic search.
MIT ★ 2 -
Secure read-only SQL MCP server for AI assistants: SQL guard + locked DuckDB sandbox, PII masking, audit log, 52-attack red-team suite in CI.
MIT