This is a code execution environment that runs Python, shell commands, and MCP tool calls in a single stateful IPython kernel. It generates typed Python APIs from MCP tool schemas using mcpygen, so tools are invoked as function calls rather than raw JSON. You get application-level approval for individual tool calls and shell commands during execution, plus optional sandboxing via Anthropic's sandbox-runtime for filesystem and network restrictions. Everything runs locally. Reach for this when you need an LLM to execute multi-step Python workflows that combine local scripts, system commands, and calls to other MCP tools, all while maintaining state across executions. The project also ships as a Claude Code plugin and includes Freeact, a general-purpose agent built on top of it.
claude mcp add --transport stdio gradion-ai-ipybox uvx ipybox