Windows Sandbox MCP
fmuecke/windows-sandbox-mcp
Run risky commands in a disposable, offline Windows Sandbox (Windows only, needs a one-time setup).
- GitHub stars
- 2
- tools
- 4
- transport
- STDIO
- last updated
- Nov 7, 2026
Tools
4 toolsPublic tool metadata for what this MCP can expose to an agent.
sandbox_startStart a guest; optionally map `inputPath` read-only at `C:\SandboxIn` and `outputPath` writable at `C:\SandboxOut`.
Start a guest; optionally map `inputPath` read-only at `C:\SandboxIn` and `outputPath` writable at `C:\SandboxOut`.
No parameter schema in public metadata yet.
sandbox_execRun a command (`runAs` `system` or `user`, both elevated). Returns the guest exit code only; redirect output to files in `C:\SandboxOut`.
Run a command (`runAs` `system` or `user`, both elevated). Returns the guest exit code only; redirect output to files in `C:\SandboxOut`.
No parameter schema in public metadata yet.
sandbox_statusRunning state, id, mapped folders.
Running state, id, mapped folders.
No parameter schema in public metadata yet.
sandbox_stopStop and discard the guest.
Stop and discard the guest.
No parameter schema in public metadata yet.
Sponsors
Promote your product hereReach 125k+ visitors monthlyPromote your product hereReach 125k+ visitors monthly
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any language
Agent CaffeineSponsoredClose your lid, come back to finished workSnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthlyWaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthlyknobsSponsoredSee your site on any phone, any day, in any languageReadme
Windows Sandbox MCP
MCP server that lets a restricted agent run risky commands in a fresh, offline
Windows Sandbox guest, without access to anything else on the host.
Design and validated wsb.exe behaviour: SPEC.md.
Reporting vulnerabilities: SECURITY.md.
wsb-mcp is the name of the executable, the project and the solution.
Agent host ──stdio──> wsb-mcp proxy ──named pipe──> wsb-mcp serve ──> wsb.exe
(agent account) (ACL: agent only) (your account)
Tools
| Tool | Purpose |
|---|---|
sandbox_start | Start a guest; optionally map inputPath read-only at C:\SandboxIn and outputPath writable at C:\SandboxOut. |
sandbox_exec | Run a command (runAs system or user, both elevated). Returns the guest exit code only; redirect output to files in C:\SandboxOut. |
sandbox_status | Running state, id, mapped folders. |
sandbox_stop | Stop and discard the guest. |
Details
- Repository
- github.com/fmuecke/windows-sandbox-mcp
- Website
- github.com/fmuecke/windows-sandbox-mcp#readme
- Package
https://github.com/fmuecke/windows-sandbox-mcp/releases/download/v1.0.0/wsb-mcp-1.0.0-win-x64.mcpb- Transport
- STDIO
- Registry
- MCP registry, active