SERVER

Exec Sandbox

Rank #59,885

io.github.inhuman/mcp-exec

Single exec tool running caller Python in a network-isolated locked-down sandbox.

3 versions

1 GitHub stars

by inhuman (3 servers)View repository ↗

First listed

Jul 17, 2026

Last publish date

Jul 20, 2026

PURPOSE

What you can do with Exec Sandbox

Exec Sandbox is a Model Context Protocol (MCP) server published by inhuman. It ranks #59,885 of 167,945 active servers on MCP Toplist, and its repository has 1 GitHub stars. Exec Sandbox is listed across 2 registries — Official MCP and Glama, with 3 tracked versions. It was first listed on Jul 17, 2026 and most recently updated on Jul 20, 2026.

Not verifiedMCP Toplist has not yet written a checked profile for this server, so the paragraph above is assembled from registry data only. The repository README is the authority on what it does.

CAPABILITIES AND LIMITATIONS

What Exec Sandbox can and cannot do

Not verifiedMCP Toplist has not catalogued this server's tools or limitations. The repository README lists them.

REQUIREMENTS

What you need before using Exec Sandbox

DeclaredNo credentialsNo credentials declared

The registry listing declares no required environment variables or authentication. This is declared metadata, not a verified install — the repository README is the authority.

Declared by Glama, last synced Nov 3, 2026. Not independently verified by MCP Toplist.

Declared in the registry install config

MCP_EXEC_TRANSPORT · optional
MCP_EXEC_DEFAULT_TIMEOUT_S · optional
MCP_EXEC_MAX_TIMEOUT_S · optional
MCP_EXEC_MAX_OUTPUT_BYTES · optional
MCP_EXEC_MAX_STDIN_BYTES · optional
MCP_EXEC_AUTH_TOKEN · optional

INSTALLATION AND FIRST TASK

Connect Exec Sandbox and confirm it works

Docker image

claude mcp add mcp-exec -e "MCP_EXEC_TRANSPORT=<your MCP_EXEC_TRANSPORT>" -e "MCP_EXEC_DEFAULT_TIMEOUT_S=<your MCP_EXEC_DEFAULT_TIMEOUT_S>" -e "MCP_EXEC_MAX_TIMEOUT_S=<your MCP_EXEC_MAX_TIMEOUT_S>" -e "MCP_EXEC_MAX_OUTPUT_BYTES=<your MCP_EXEC_MAX_OUTPUT_BYTES>" -e "MCP_EXEC_MAX_STDIN_BYTES=<your MCP_EXEC_MAX_STDIN_BYTES>" -e "MCP_EXEC_AUTH_TOKEN=<your MCP_EXEC_AUTH_TOKEN>" -- docker run -i --rm --network none --cap-drop ALL --security-opt no-new-privileges --user 65532:65532 --tmpfs /tmp:rw,noexec,nosuid,size=64m --memory 256m --pids-limit 128 --cpus 1 docker.io/idconstruct/mcp-exec:v0.5.4

Replace each placeholder with your own value before saving.

Docker image

[mcp_servers.mcp-exec]
command = "docker"
args = ["run", "-i", "--rm", "--network", "none", "--cap-drop", "ALL", "--security-opt", "no-new-privileges", "--user", "65532:65532", "--tmpfs", "/tmp:rw,noexec,nosuid,size=64m", "--memory", "256m", "--pids-limit", "128", "--cpus", "1", "docker.io/idconstruct/mcp-exec:v0.5.4"]

[mcp_servers.mcp-exec.env]
MCP_EXEC_TRANSPORT = "<your MCP_EXEC_TRANSPORT>"
MCP_EXEC_DEFAULT_TIMEOUT_S = "<your MCP_EXEC_DEFAULT_TIMEOUT_S>"
MCP_EXEC_MAX_TIMEOUT_S = "<your MCP_EXEC_MAX_TIMEOUT_S>"
MCP_EXEC_MAX_OUTPUT_BYTES = "<your MCP_EXEC_MAX_OUTPUT_BYTES>"
MCP_EXEC_MAX_STDIN_BYTES = "<your MCP_EXEC_MAX_STDIN_BYTES>"
MCP_EXEC_AUTH_TOKEN = "<your MCP_EXEC_AUTH_TOKEN>"

Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-exec": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "none",
        "--cap-drop",
        "ALL",
        "--security-opt",
        "no-new-privileges",
        "--user",
        "65532:65532",
        "--tmpfs",
        "/tmp:rw,noexec,nosuid,size=64m",
        "--memory",
        "256m",
        "--pids-limit",
        "128",
        "--cpus",
        "1",
        "docker.io/idconstruct/mcp-exec:v0.5.4"
      ],
      "env": {
        "MCP_EXEC_TRANSPORT": "<your MCP_EXEC_TRANSPORT>",
        "MCP_EXEC_DEFAULT_TIMEOUT_S": "<your MCP_EXEC_DEFAULT_TIMEOUT_S>",
        "MCP_EXEC_MAX_TIMEOUT_S": "<your MCP_EXEC_MAX_TIMEOUT_S>",
        "MCP_EXEC_MAX_OUTPUT_BYTES": "<your MCP_EXEC_MAX_OUTPUT_BYTES>",
        "MCP_EXEC_MAX_STDIN_BYTES": "<your MCP_EXEC_MAX_STDIN_BYTES>",
        "MCP_EXEC_AUTH_TOKEN": "<your MCP_EXEC_AUTH_TOKEN>"
      }
    }
  }
}

Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-exec": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "none",
        "--cap-drop",
        "ALL",
        "--security-opt",
        "no-new-privileges",
        "--user",
        "65532:65532",
        "--tmpfs",
        "/tmp:rw,noexec,nosuid,size=64m",
        "--memory",
        "256m",
        "--pids-limit",
        "128",
        "--cpus",
        "1",
        "docker.io/idconstruct/mcp-exec:v0.5.4"
      ],
      "env": {
        "MCP_EXEC_TRANSPORT": "<your MCP_EXEC_TRANSPORT>",
        "MCP_EXEC_DEFAULT_TIMEOUT_S": "<your MCP_EXEC_DEFAULT_TIMEOUT_S>",
        "MCP_EXEC_MAX_TIMEOUT_S": "<your MCP_EXEC_MAX_TIMEOUT_S>",
        "MCP_EXEC_MAX_OUTPUT_BYTES": "<your MCP_EXEC_MAX_OUTPUT_BYTES>",
        "MCP_EXEC_MAX_STDIN_BYTES": "<your MCP_EXEC_MAX_STDIN_BYTES>",
        "MCP_EXEC_AUTH_TOKEN": "<your MCP_EXEC_AUTH_TOKEN>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.

Docker image

{
  "servers": {
    "mcp-exec": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "none",
        "--cap-drop",
        "ALL",
        "--security-opt",
        "no-new-privileges",
        "--user",
        "65532:65532",
        "--tmpfs",
        "/tmp:rw,noexec,nosuid,size=64m",
        "--memory",
        "256m",
        "--pids-limit",
        "128",
        "--cpus",
        "1",
        "docker.io/idconstruct/mcp-exec:v0.5.4"
      ],
      "env": {
        "MCP_EXEC_TRANSPORT": "<your MCP_EXEC_TRANSPORT>",
        "MCP_EXEC_DEFAULT_TIMEOUT_S": "<your MCP_EXEC_DEFAULT_TIMEOUT_S>",
        "MCP_EXEC_MAX_TIMEOUT_S": "<your MCP_EXEC_MAX_TIMEOUT_S>",
        "MCP_EXEC_MAX_OUTPUT_BYTES": "<your MCP_EXEC_MAX_OUTPUT_BYTES>",
        "MCP_EXEC_MAX_STDIN_BYTES": "<your MCP_EXEC_MAX_STDIN_BYTES>",
        "MCP_EXEC_AUTH_TOKEN": "<your MCP_EXEC_AUTH_TOKEN>"
      }
    }
  }
}

Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-exec": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "none",
        "--cap-drop",
        "ALL",
        "--security-opt",
        "no-new-privileges",
        "--user",
        "65532:65532",
        "--tmpfs",
        "/tmp:rw,noexec,nosuid,size=64m",
        "--memory",
        "256m",
        "--pids-limit",
        "128",
        "--cpus",
        "1",
        "docker.io/idconstruct/mcp-exec:v0.5.4"
      ],
      "env": {
        "MCP_EXEC_TRANSPORT": "<your MCP_EXEC_TRANSPORT>",
        "MCP_EXEC_DEFAULT_TIMEOUT_S": "<your MCP_EXEC_DEFAULT_TIMEOUT_S>",
        "MCP_EXEC_MAX_TIMEOUT_S": "<your MCP_EXEC_MAX_TIMEOUT_S>",
        "MCP_EXEC_MAX_OUTPUT_BYTES": "<your MCP_EXEC_MAX_OUTPUT_BYTES>",
        "MCP_EXEC_MAX_STDIN_BYTES": "<your MCP_EXEC_MAX_STDIN_BYTES>",
        "MCP_EXEC_AUTH_TOKEN": "<your MCP_EXEC_AUTH_TOKEN>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.

Docker image

{
  "mcpServers": {
    "mcp-exec": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "--network",
        "none",
        "--cap-drop",
        "ALL",
        "--security-opt",
        "no-new-privileges",
        "--user",
        "65532:65532",
        "--tmpfs",
        "/tmp:rw,noexec,nosuid,size=64m",
        "--memory",
        "256m",
        "--pids-limit",
        "128",
        "--cpus",
        "1",
        "docker.io/idconstruct/mcp-exec:v0.5.4"
      ],
      "env": {
        "MCP_EXEC_TRANSPORT": "<your MCP_EXEC_TRANSPORT>",
        "MCP_EXEC_DEFAULT_TIMEOUT_S": "<your MCP_EXEC_DEFAULT_TIMEOUT_S>",
        "MCP_EXEC_MAX_TIMEOUT_S": "<your MCP_EXEC_MAX_TIMEOUT_S>",
        "MCP_EXEC_MAX_OUTPUT_BYTES": "<your MCP_EXEC_MAX_OUTPUT_BYTES>",
        "MCP_EXEC_MAX_STDIN_BYTES": "<your MCP_EXEC_MAX_STDIN_BYTES>",
        "MCP_EXEC_AUTH_TOKEN": "<your MCP_EXEC_AUTH_TOKEN>"
      }
    }
  }
}

Replace each placeholder with your own value before saving.

First successful task

After adding the config, ask your client to list this server's tools. A tool list confirms the connection; an empty list or an error means the server did not start or needs credentials.

ALTERNATIVES

When to choose another server

Other servers by inhuman

View all inhuman servers →

No task-specific alternatives are catalogued for Exec Sandboxyet; the list above is its publisher's other servers.

MAINTENANCE AND EVIDENCE

What changed, and when this was checked

First listed: Jul 17, 2026
Latest version published: Jul 20, 2026
Version history: 3 versions tracked (below)
Requirements evidence: Declared by Glama, last synced Nov 3, 2026. Not independently verified by MCP Toplist.
Profile checked: Not yet — purpose, capabilities and requirements above come from registry data only
Ranking data as of: Nov 3, 2026

Registry sightings

Official MCP ↗listed since Jul 24, 2026 · still listed
Glama ↗listed since Jul 31, 2026 · still listed

Do you maintain Exec Sandbox? to correct or enrich this profile.

VERSIONS

Available versions (3)

Version	Published
0.5.4	Jul 20, 2026
0.5.3	Jul 17, 2026
0.5.2	Jul 17, 2026

STANDING

#59,885of 167,945 active serversTop 50%

Ranks ahead of 108,060 of 167,945 servers on MCP Toplist.

BADGE

Show your rank

Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.

Markdown

[![MCP Toplist](https://mcptoplist.com/badge/io.github.inhuman%2Fmcp-exec.svg)](https://mcptoplist.com/server/io.github.inhuman%2Fmcp-exec)

HTML

<a href="https://mcptoplist.com/server/io.github.inhuman%2Fmcp-exec"><img src="https://mcptoplist.com/badge/io.github.inhuman%2Fmcp-exec.svg" alt="MCP Toplist: Top 50% of 167,945" /></a>

Variants: append ?metric=score or ?metric=stars to the image URL.

FAQ

Frequently asked questions

Who maintains Exec Sandbox?: Exec Sandbox is maintained by inhuman, which publishes 3 MCP servers (9 total versions) tracked on MCP Toplist.
Is Exec Sandbox listed on the Official MCP Registry?: Yes — Exec Sandbox is listed on the Official MCP Registry, alongside Glama.
How many versions does Exec Sandbox have?: MCP Toplist tracks 3 versions of Exec Sandbox, most recently published on Jul 20, 2026.
Where can I find the source code for Exec Sandbox?: The source code for Exec Sandbox is hosted at github.com/inhuman/mcp-exec.

Used in projects

Do you run this server?

Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.

EXPLORE

All MCP Servers Official MCP Servers GitHub MCP Servers Best MCP Servers Most Active MCP Servers New MCP Servers Best New MCP Servers