MCP.Market

Sandbox Env MCP server

by hs3434·io.github.hs3434/sandbox-env-mcp·v0.3.1·1 stars
No reviews yet

Persistent Docker/SSH sandbox for AI agents: shell exec, file ops, audit log.

A92/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

1 stars29 downloads/wk

Reviews

Write one

Nobody has reviewed Sandbox Env MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Sandbox Env MCP tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

no findings
  • Code scan21 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Sandbox Env MCP compares

Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 90% of 1,119 Developer tools servers
GitHub stars
1
more than 50% of 854 Developer tools servers
Downloads a week
29
more than 14% of 430 Developer tools servers with a package

Install Sandbox Env MCP in Claude Code, Cursor or VS Code

claude mcp add sandbox-env-mcp -- uvx sandbox-env-mcp
Add to Cursor

What the publisher says

From the Sandbox Env MCP repository's README, as published. We do not edit it. Read it on GitHub

sandbox-mcp

<!-- mcp-name: io.github.hs3434/sandbox-env-mcp -->

MCP server that gives AI agents a real working environment: persistent shells, a filesystem, and multi-machine management — backed by Docker containers or remote SSH hosts.

Features

survive across tool calls. Set env vars, activate venvs, change directories, and they stay.

  • Persistent shells — stateful bash or PowerShell sessions that

simultaneously. Each has its own isolated workspace and shell pool.

  • Multi-machine — manage several Docker containers and SSH hosts

any target machine. All writes are atomic (temp-file + rename).

  • Full filesystem access — read, write, patch, and search files on

automatically on first run. One command, ready to go.

  • Zero-config startup — creates a default Docker container

step. Agents call env(action="help") to see what's available.

  • Progressive discovery — env tool exposes capabilities step by

Build images, inspect configs, commit state, view logs.

  • Docker lifecycle — create, stop, start, restart, remove containers.

SSH. Windows targets get automatic code-page probing.

  • SSH remote access — connect to Linux and Windows machines over

without blocking access. Pre-write syntax lint for JSON/YAML/TOML.

  • Safety net — sensitive-path warnings (.ssh, .aws, .env*)

parameters, and outcomes. Queryable from within the agent session.

  • Audit trail — every tool call is logged with timestamps,

Quick start

pip install sandbox-env-mcp

# stdio — for Claude Desktop, Cline, Continue
sandbox-mcp

# HTTP — for remote agents
sandbox-mcp-http

On first run a default container (python:3.14-slim, named admin) starts automatically with a persistent bash shell. No other setup.

Requirements: Python 3.12+, Docker SDK, running Docker daemon. SSH mode needs openssh-client.

Tools

All tools target the default machine unless an explicit machine parameter is passed.

audit_query is exposed when the audit log is a SQLite database — it lets the agent search historical tool calls.

Shell states

Every shell is in one of four states:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Sandbox Env MCP: common questions

Is Sandbox Env MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the Sandbox Env MCP safety report
How do I install Sandbox Env MCP?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Sandbox Env MCP need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Sandbox Env MCP maintained?
The last commit was 39 days ago (2026-09-24). The latest release is v0.3.1.
What can I use instead of Sandbox Env MCP?
Servers from other publishers that do the same job: Servonaut MCP server, Ocm MCP server and Ocm MCP server. Compare all Sandbox Env MCP alternatives.
How does Sandbox Env MCP compare with other Developer tools MCP servers?
safety score 92/100 (higher than 90% of 1,119 Developer tools servers); github stars 1 (more than 50% of 854 Developer tools servers); downloads a week 29 (more than 14% of 430 Developer tools servers with a package). Full comparison.

Alternatives to Sandbox Env MCP

Same job from other publishers: the closest match first, then the best rated.

All Sandbox Env MCP alternatives →
  • Servonaut
    Manage AWS, Hetzner, OVH and SSH servers: status, logs, CloudWatch, IP bans, safe command exec.
    A
  • Ocm
    Guardrailed fleet ops for AI agents: multi-cluster Kubernetes via OCM with policy, approval, audit.
    B
  • Ocm
    Guardrailed fleet ops for AI agents: multi-cluster Kubernetes via OCM with policy, approval, audit.
    A
  • Notion
    Token-auth Notion MCP: pages, databases, blocks, comments, files. Runs headless in CI and agents.
    B
  • Homebutler
    Tells an agent what changed on a server since it last looked - status, Docker, backups, Proxmox.
    C