MCP.Market

UISandbox MCP server

by Ideelab·io.github.Ideelab/uisandbox·v0.5.3·6 stars
No reviews yet

Play with your app's design in the browser: load a build, turn the knobs, export the code.

B83/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

6 stars288 downloads/wk

Reviews

Write one

Nobody has reviewed UISandbox yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

UISandbox tools (9, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • export

    Export the current state: sheet-css (your values as CSS custom properties), sheet-json, patch (literal → value list), tokens-css / tokens-json / tailwind / shadcn (the --k-* design tokens), swift, android-xml, android-kotlin.

  • load

    Load a web app: a RUNNING dev server by its local address (devUrl, e.g. http://localhost:5173 — live mode: no build needed, hot reload passes through, best while the user is developing), or a BUILT app (a zip of its dist/build/out folder, or a repo zip carrying the build) by URL or local path. Returns the project id, screens, tokenised values and the baseline the knobs stand on. Refuses a build th

  • open

    Open UISandbox in the user's browser with this project loaded — the real, interactive sandbox: the whole app rendered 1:1, every knob there to turn by hand. Use this whenever the user wants to SEE or PLAY with the design themselves ("can I look at this in a sandbox", "let me try some changes"), not only read numbers. Served from 127.0.0.1 by this process; nothing leaves the machine. What the user

  • screens

    The screens (HTML entries) of a loaded project.

  • screenshot

    A PNG of the screen as it renders with the current knobs (the sandbox frame only).

  • set

    Apply knobs to a loaded project. Every dial has ×1 (or 0) = as in their code; colours are #rrggbb. Returns what moved (count and a sample of value → value).

  • state

    The knobs as they stand now — including what the user turned by hand in an opened sandbox (and when).

  • verifywrite action

    Run the 1:1 check in a real browser: the untouched build vs. the tokenised build with the identity sheet, computed styles of every element diffed. Also returns the reach meter. This is the same check a visitor runs on uisandbox.org.

  • wait_for_sendwrite action

    After `open`: wait until the user presses "Send to your agent" in the sandbox, then return what they turned (from → to, in the panel's own names), how many values moved, and the patch that writes it into their source. Returns at once if they already sent and you have not collected it. If the time runs out first it says the sandbox is still open: call it again (or ask them).

Public scan report

scanner v0.1.10 · 2026-10-29 · same rubric, same numbers if you re-run it

1 medium
  • Code scan14 source files scanned20/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 7 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (1)

  • mediumeval / new Function usedexec.eval
    dist/server.mjs: …e__error")) throw new Error(await page.$eval(".intake__error", (e) => e.textContent |…
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How UISandbox compares

Against every graded Scraping and browsing MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 60% of 867 Scraping and browsing servers
Tools
9
the typical Scraping and browsing server has 6
Tools that change things
22%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
6
more than 75% of 584 Scraping and browsing servers
Downloads a week
288
more than 76% of 312 Scraping and browsing servers with a package

What its tools let an agent do: 5 read · 1 create · 3 change

Release history: 2 versions in the registry since 2026-08-30, latest 2026-10-21, typically one every 52 days.

Install UISandbox in Claude Code, Cursor or VS Code

Runs npx -y uisandbox-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add uisandbox -- npx -y uisandbox-mcp
Add to Cursor

What the publisher says

From the UISandbox repository's README, as published. We do not edit it. Read it on GitHub

UISandbox

Play with your app's design. Right in the browser. Drop your build, turn the knobs, export the code. Restyle your app without rebuilding it: your build runs 1:1 in the tab, nothing is sent to a server, and closing the tab undoes all of it.

uisandbox.org · npm: uisandbox-mcp · MCP registry · Discussions · MIT

npx uisandbox-mcp open            # run inside your project: it finds the build and opens the sandbox — no agent needed

Or drop a zip on uisandbox.org — no build at hand? Try a sample under the drop zone (the Bootstrap docs, a VitePress site, an admin dashboard). Or, in Claude Code: /plugin marketplace add Ideelab/uisandbox → /plugin install uisandbox@uisandbox and say "open this app in UISandbox".

Four real builds from public repos, one knob each. Nothing staged.

What it does

  1. Bring the build — three ways in: a zip of dist/, build/, out/ (or a whole repo with the build inside); a folder (a build renders, a source folder is read for the knob stand); a public GitHub or GitLab repo URL (fetched as a zip through a same-origin route — the one thing that leaves the tab, see notes/security.md). While it works, the door shows the stages with their numbers. Otherwise your files never leave your browser: files are read in the page and served to the frame by a service worker on this origin.
  2. See it 1:1. Every colour, radius, font, size, spacing, line-height, letter-spacing, weight, border-width, duration, gradient angle and shadow literal in your CSS becomes a variable holding the very same value, so the page renders exactly as it was — runtime styles too (style="" set by JS, your framework appends, insertRule/replaceSync from styled-components, Emotion, Lit, Ant's cssinjs; CDN stylesheets through a same-origin proxy; nested same-origin frames such as Storybook's).
  3. Turn the knobs. Brand, and the colour families your CSS actually contains (secondary, accent, the status set, a palette row for what is neither); page background; grey tint and border tone; display and body font (yours listed first, then alternatives by character); dials for text size, line height, letter spacing, weight, spacing, radius, border width, elevation, motion and gradient angle — every dial with ×1 = as in your code at its centre; global hue, saturation and contrast that reach every colour, chart palettes and CSS-drawn icons included; your dark mode, switched on your own hooks.
  4. Export. Your values as CSS / JSON / a patch list, your files patched in place, --k-* tokens for web (CSS, Tailwind, shadcn), Swift constants + an asset catalog for iOS, colors.xml + Kotlin for Android.

Open one by link

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

UISandbox: common questions

Is UISandbox MCP server safe?
Mostly: it is graded B (83/100). Read the UISandbox safety report
How do I install UISandbox?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does UISandbox need an API key?
No secret keys are declared. It reads 1 setting from the environment.
Is UISandbox maintained?
The last commit was 14 days ago (2026-10-22). The latest release is v0.5.3.
What can I use instead of UISandbox?
Servers from other publishers that do the same job: GrowBlocks Dev Kit MCP server, FableCut MCP server and SeleniumBase MCP server.
How does UISandbox compare with other Scraping and browsing MCP servers?
safety score 83/100 (higher than 60% of 867 Scraping and browsing servers); tools 9 (the typical Scraping and browsing server has 6); tools that change things 22% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to UISandbox

Same job from other publishers: the closest match first, then the best rated.

  • GrowBlocks Dev Kit
    Build, play-test with screenshots, and ship three.js browser games on GrowBlocks.
    A
  • FableCut
    Zero-dependency browser video editor AI agents drive via a JSON timeline over MCP; ffmpeg export.
    A
  • SeleniumBase MCP
    Stealthy browser automation, testing, and web-scraping via CDP Mode.
    A
  • Next AI Draw.io
    draw.io diagrams your AI agent draws on a live browser canvas that you can also edit by hand
    A
  • AIHawk
    AI browser agent: browses, clicks, types, and reads real web pages from plain-English instructions.
    More from feder-cr →
    A