Ipybox MCP server
io.github.gradion-ai/ipybox·v0.9.2·75 starsUnified execution environment for Python code, shell commands, and programmatic MCP tool calls
75 stars
Reviews
Write oneNobody has reviewed Ipybox yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Ipybox tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan10 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 108 days ago8/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year9/10
How Ipybox compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 83/100
- higher than 65% of 48,255 servers
- GitHub stars
- 75
- more than 95% of 28,688 servers
Install Ipybox in Claude Code, Cursor or VS Code
claude mcp add ipybox -- uvx ipybox
What the publisher says
From the Ipybox repository's README, as published. We do not edit it. Read it on GitHub
ipybox
mcp-name: io.github.gradion-ai/ipybox
ipybox is a unified execution environment for Python code, shell commands, and programmatic MCP tool calls.
Overview
ipybox executes code blocks in a stateful IPython kernel. A code block can contain any combination of Python code, shell commands, and programmatic MCP tool calls. Kernels can be sandboxed with sandbox-runtime, enforcing filesystem and network restrictions at OS level.
It generates Python APIs for MCP server tools via mcpygen, and supports application-level approval of individual tool calls and shell commands during code execution. ipybox runs locally on your computer, enabling protected access to your local data and tools.
[!NOTE]
Next generation ipybox
This is the next generation of ipybox, a complete rewrite. Older versions are maintained on the 0.6.x branch and can be obtained with pip install ipybox<0.7.
Documentation:
- 📚 Documentation
- 🏗️ Architecture
- 🤖 llms.txt
- 🤖 llms-full.txt
Capabilities
Usage
[!TIP]
Freeact agent
Freeact is a general-purpose agent built on ipybox.
Nothing above is checked by us. What we check is on the safety report.
Ipybox: common questions
- Is Ipybox MCP server safe?
- Mostly: it is graded B (83/100). Read the Ipybox safety report
- How do I install Ipybox?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Ipybox need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Ipybox maintained?
- The last commit was 146 days ago (2026-06-11). The latest release is v0.9.2.
- How does Ipybox compare with other MCP servers?
- safety score 83/100 (higher than 65% of 48,255 servers); github stars 75 (more than 95% of 28,688 servers). Full comparison.