LLM Sandbox
vndee/llm-sandbox
Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.
- GitHub stars
- 1.1K
- tools
- 3
- transport
- STDIO
- env vars
- 12
- last updated
- Aug 3, 2026
Tools
3 toolsPublic tool metadata for what this MCP can expose to an agent.
execute_codeExecute code in a secure sandbox with automatic visualization capture
Execute code in a secure sandbox with automatic visualization capture
No parameter schema in public metadata yet.
get_supported_languagesGet the list of supported programming languages
Get the list of supported programming languages
No parameter schema in public metadata yet.
get_language_detailsGet detailed information about a specific language
Get detailed information about a specific language
No parameter schema in public metadata yet.
Sponsors
Promote your product here
Agent CaffeineSponsoredClose your lid, come back to finished work
LLMond HighlightsSponsoredThe AI tools worth your time, every Monday
SnugSponsoredThe clipboard manager you and your agent can use, safely
Vinena StudioSponsoredWe build premium apps, websites and AI workflows for you
knobsSponsoredSee your site on any phone, any day, in any language
AcheliaSponsoredNative herdr client for iOS and macOS
WaxSponsoredBlock anything with supervision, without erasing your iPhone
Agent CaffeineSponsoredClose your lid, come back to finished workLLMond HighlightsSponsoredThe AI tools worth your time, every MondaySnugSponsoredThe clipboard manager you and your agent can use, safelyVinena StudioSponsoredWe build premium apps, websites and AI workflows for youknobsSponsoredSee your site on any phone, any day, in any languageAcheliaSponsoredNative herdr client for iOS and macOSWaxSponsoredBlock anything with supervision, without erasing your iPhoneConfiguration
BACKENDdefault: dockerContainer backend to use. Must match the installed extra: mcp-docker, mcp-podman, or mcp-k8s.
DOCKER_HOSTDocker or Podman socket URL, e.g. unix:///var/run/docker.sock
KUBECONFIGPath to kubeconfig file when BACKEND=kubernetes.
NAMESPACEdefault: defaultKubernetes namespace used for sandbox pods when BACKEND=kubernetes.
COMMIT_CONTAINERdefault: trueCommit the container after a run so installed libraries persist between sessions.
KEEP_TEMPLATEdefault: trueKeep the base image after the session ends to avoid re-pulling it on the next run.
SANDBOX_NETWORK_MODENetwork mode for the sandbox container. Set to 'none' for hardened isolation. Docker and Podman backends only.
SANDBOX_READ_ONLYMount the sandbox root filesystem read-only. Recommended: true. Docker and Podman backends only.
SANDBOX_CAP_DROPComma-separated Linux capabilities to drop. Recommended: ALL. Docker and Podman backends only.
SANDBOX_SECURITY_OPTComma-separated container security options, e.g. no-new-privileges. Docker and Podman backends only.
SANDBOX_MEMORYMemory limit for the sandbox container, e.g. 4g. Docker and Podman backends only.
SANDBOX_CPUSFractional CPU allocation for the sandbox container, e.g. 1.5. Docker and Podman backends only.
Readme
Details
- Repository
- github.com/vndee/llm-sandbox
- Website
- vndee.github.io/llm-sandbox
- Category
- AI & LLM Tools
- Package
llm-sandbox- Transport
- STDIO
- Registry
- MCP registry, active
