LLM Sandbox MCP Server

by vndeeio.github.vndee/llm-sandboxv0.3.43

Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.

1.1kPythonstdioofficial registry

context tax

queued

security

queued

cold start

queued

freshness

Active9d ago

Install LLM Sandbox MCP server

claude mcp add llm-sandbox -- uvx llm-sandbox

{
  "mcpServers": {
    "llm-sandbox": {
      "command": "uvx",
      "args": [
        "llm-sandbox"
      ]
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "llm-sandbox": {
      "command": "uvx",
      "args": [
        "llm-sandbox"
      ]
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "llm-sandbox": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "llm-sandbox"
      ]
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "llm-sandbox": {
      "command": "uvx",
      "args": [
        "llm-sandbox"
      ]
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Variable	Required	Secret	Description
BACKEND	—	—	Container backend to use. Must match the installed extra: mcp-docker, mcp-podman, or mcp-k8s.
DOCKER_HOST	—	—	Docker or Podman socket URL, e.g. unix:///var/run/docker.sock
KUBECONFIG	—	—	Path to kubeconfig file when BACKEND=kubernetes.
NAMESPACE	—	—	Kubernetes namespace used for sandbox pods when BACKEND=kubernetes.
COMMIT_CONTAINER	—	—	Commit the container after a run so installed libraries persist between sessions.
KEEP_TEMPLATE	—	—	Keep the base image after the session ends to avoid re-pulling it on the next run.
SANDBOX_NETWORK_MODE	—	—	Network mode for the sandbox container. Set to 'none' for hardened isolation. Docker and Podman backends only.
SANDBOX_READ_ONLY	—	—	Mount the sandbox root filesystem read-only. Recommended: true. Docker and Podman backends only.
SANDBOX_CAP_DROP	—	—	Comma-separated Linux capabilities to drop. Recommended: ALL. Docker and Podman backends only.
SANDBOX_SECURITY_OPT	—	—	Comma-separated container security options, e.g. no-new-privileges. Docker and Podman backends only.
SANDBOX_MEMORY	—	—	Memory limit for the sandbox container, e.g. 4g. Docker and Podman backends only.
SANDBOX_CPUS	—	—	Fractional CPU allocation for the sandbox container, e.g. 1.5. Docker and Podman backends only.