{"name":"io.github.inhuman/mcp-exec","slug":"inhuman-mcp-exec","title":"Exec Sandbox","description":"Single exec tool running caller Python in a network-isolated locked-down sandbox.","url":"https://mcp.market/server/inhuman-mcp-exec","rating":null,"grade":"C","score":65,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":13,"stars":1,"forks":0,"downloads_week":null,"last_push_at":"2026-07-20T09:37:51.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"oci","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/inhuman/mcp-exec","website":null,"version":"0.5.4","remotes":[],"packages":[{"registryType":"oci","identifier":"docker.io/idconstruct/mcp-exec:v0.5.4","runtimeHint":"docker","transport":{"type":"stdio"},"runtimeArguments":[{"description":"No network for the sandbox (stdio posture).","value":"none","type":"named","name":"--network"},{"description":"Read-only root filesystem.","type":"named","name":"--read-only"},{"description":"Drop all Linux capabilities.","value":"ALL","type":"named","name":"--cap-drop"},{"description":"Block privilege escalation.","value":"no-new-privileges","type":"named","name":"--security-opt"},{"description":"Run as the non-root sandbox user.","value":"65532:65532","type":"named","name":"--user"},{"description":"Writable ephemeral workspace (rootfs is read-only).","value":"/tmp:rw,noexec,nosuid,size=64m","type":"named","name":"--tmpfs"},{"description":"Memory limit.","value":"256m","type":"named","name":"--memory"},{"description":"PID limit.","value":"128","type":"named","name":"--pids-limit"},{"description":"CPU limit.","value":"1","type":"named","name":"--cpus"}],"environmentVariables":[{"description":"MCP transport. Must be 'stdio' for direct docker/stdio use.","default":"stdio","name":"MCP_EXEC_TRANSPORT"},{"description":"Default wall-clock timeout per exec, seconds.","default":"30","name":"MCP_EXEC_DEFAULT_TIMEOUT_S"},{"description":"Maximum wall-clock timeout a caller may request, seconds.","default":"300","name":"MCP_EXEC_MAX_TIMEOUT_S"},{"description":"Cap on combined stdout/stderr before truncation.","default":"1048576","name":"MCP_EXEC_MAX_OUTPUT_BYTES"},{"description":"Cap on stdin passed to the sandboxed code.","default":"1048576","name":"MCP_EXEC_MAX_STDIN_BYTES"},{"description":"Optional X-MCP-AUTH token (http/sse transports only).","isSecret":true,"name":"MCP_EXEC_AUTH_TOKEN"}]}],"tools":[],"scan":{"score":65,"grade":"C","scanned_at":"2026-09-25T17:24:00.327Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-25T17:24:00.289Z","components":{"code":{"score":-1,"max":25,"notes":["package could not be scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":12,"max":15,"notes":["last push 67 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[],"repo":{"found":true,"owner":"inhuman","repo":"mcp-exec","archived":false,"pushedAt":"2026-07-20T09:37:51Z","stars":1,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/2518263?v=4","ownerCreatedAt":"2012-10-09T08:00:33Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/2518263?v=4&s=128","source":"github"},"presence":{"stars":1,"forks":0,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-07-20T09:37:51.000Z","score":13}}}},"grade_history":[],"reviews":[]}