LLM Sandbox
Rank #238io.github.vndee/llm-sandbox
Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.
LLM Sandbox is a Model Context Protocol (MCP) server published by vndee. It ranks #238 of 132,046 servers tracked on MCP Toplist, and its repository has 1,123 GitHub stars. LLM Sandbox is listed on Official MCP, with 2 tracked versions. It was first listed on Apr 12, 2026 and most recently updated on Aug 3, 2026.
Ranks ahead of 131,808 of 132,046 servers on MCP Toplist.
Use LLM Sandbox
No credentials or required configuration declared — add it to your MCP client and go.
claude mcp add llm-sandbox -e "BACKEND=<your BACKEND>" -e "DOCKER_HOST=<your DOCKER_HOST>" -e "KUBECONFIG=<your KUBECONFIG>" -e "NAMESPACE=<your NAMESPACE>" -e "COMMIT_CONTAINER=<your COMMIT_CONTAINER>" -e "KEEP_TEMPLATE=<your KEEP_TEMPLATE>" -e "SANDBOX_NETWORK_MODE=<your SANDBOX_NETWORK_MODE>" -e "SANDBOX_READ_ONLY=<your SANDBOX_READ_ONLY>" -e "SANDBOX_CAP_DROP=<your SANDBOX_CAP_DROP>" -e "SANDBOX_SECURITY_OPT=<your SANDBOX_SECURITY_OPT>" -e "SANDBOX_MEMORY=<your SANDBOX_MEMORY>" -e "SANDBOX_CPUS=<your SANDBOX_CPUS>" -- uvx --from "llm-sandbox[mcp-docker]" llm-sandboxReplace each placeholder with your own value before saving.
[mcp_servers.llm-sandbox]
command = "uvx"
args = ["--from", "llm-sandbox[mcp-docker]", "llm-sandbox"]
[mcp_servers.llm-sandbox.env]
BACKEND = "<your BACKEND>"
DOCKER_HOST = "<your DOCKER_HOST>"
KUBECONFIG = "<your KUBECONFIG>"
NAMESPACE = "<your NAMESPACE>"
COMMIT_CONTAINER = "<your COMMIT_CONTAINER>"
KEEP_TEMPLATE = "<your KEEP_TEMPLATE>"
SANDBOX_NETWORK_MODE = "<your SANDBOX_NETWORK_MODE>"
SANDBOX_READ_ONLY = "<your SANDBOX_READ_ONLY>"
SANDBOX_CAP_DROP = "<your SANDBOX_CAP_DROP>"
SANDBOX_SECURITY_OPT = "<your SANDBOX_SECURITY_OPT>"
SANDBOX_MEMORY = "<your SANDBOX_MEMORY>"
SANDBOX_CPUS = "<your SANDBOX_CPUS>"Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"llm-sandbox": {
"command": "uvx",
"args": [
"--from",
"llm-sandbox[mcp-docker]",
"llm-sandbox"
],
"env": {
"BACKEND": "<your BACKEND>",
"DOCKER_HOST": "<your DOCKER_HOST>",
"KUBECONFIG": "<your KUBECONFIG>",
"NAMESPACE": "<your NAMESPACE>",
"COMMIT_CONTAINER": "<your COMMIT_CONTAINER>",
"KEEP_TEMPLATE": "<your KEEP_TEMPLATE>",
"SANDBOX_NETWORK_MODE": "<your SANDBOX_NETWORK_MODE>",
"SANDBOX_READ_ONLY": "<your SANDBOX_READ_ONLY>",
"SANDBOX_CAP_DROP": "<your SANDBOX_CAP_DROP>",
"SANDBOX_SECURITY_OPT": "<your SANDBOX_SECURITY_OPT>",
"SANDBOX_MEMORY": "<your SANDBOX_MEMORY>",
"SANDBOX_CPUS": "<your SANDBOX_CPUS>"
}
}
}
}Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.
{
"mcpServers": {
"llm-sandbox": {
"command": "uvx",
"args": [
"--from",
"llm-sandbox[mcp-docker]",
"llm-sandbox"
],
"env": {
"BACKEND": "<your BACKEND>",
"DOCKER_HOST": "<your DOCKER_HOST>",
"KUBECONFIG": "<your KUBECONFIG>",
"NAMESPACE": "<your NAMESPACE>",
"COMMIT_CONTAINER": "<your COMMIT_CONTAINER>",
"KEEP_TEMPLATE": "<your KEEP_TEMPLATE>",
"SANDBOX_NETWORK_MODE": "<your SANDBOX_NETWORK_MODE>",
"SANDBOX_READ_ONLY": "<your SANDBOX_READ_ONLY>",
"SANDBOX_CAP_DROP": "<your SANDBOX_CAP_DROP>",
"SANDBOX_SECURITY_OPT": "<your SANDBOX_SECURITY_OPT>",
"SANDBOX_MEMORY": "<your SANDBOX_MEMORY>",
"SANDBOX_CPUS": "<your SANDBOX_CPUS>"
}
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.
{
"servers": {
"llm-sandbox": {
"type": "stdio",
"command": "uvx",
"args": [
"--from",
"llm-sandbox[mcp-docker]",
"llm-sandbox"
],
"env": {
"BACKEND": "<your BACKEND>",
"DOCKER_HOST": "<your DOCKER_HOST>",
"KUBECONFIG": "<your KUBECONFIG>",
"NAMESPACE": "<your NAMESPACE>",
"COMMIT_CONTAINER": "<your COMMIT_CONTAINER>",
"KEEP_TEMPLATE": "<your KEEP_TEMPLATE>",
"SANDBOX_NETWORK_MODE": "<your SANDBOX_NETWORK_MODE>",
"SANDBOX_READ_ONLY": "<your SANDBOX_READ_ONLY>",
"SANDBOX_CAP_DROP": "<your SANDBOX_CAP_DROP>",
"SANDBOX_SECURITY_OPT": "<your SANDBOX_SECURITY_OPT>",
"SANDBOX_MEMORY": "<your SANDBOX_MEMORY>",
"SANDBOX_CPUS": "<your SANDBOX_CPUS>"
}
}
}
}Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"llm-sandbox": {
"command": "uvx",
"args": [
"--from",
"llm-sandbox[mcp-docker]",
"llm-sandbox"
],
"env": {
"BACKEND": "<your BACKEND>",
"DOCKER_HOST": "<your DOCKER_HOST>",
"KUBECONFIG": "<your KUBECONFIG>",
"NAMESPACE": "<your NAMESPACE>",
"COMMIT_CONTAINER": "<your COMMIT_CONTAINER>",
"KEEP_TEMPLATE": "<your KEEP_TEMPLATE>",
"SANDBOX_NETWORK_MODE": "<your SANDBOX_NETWORK_MODE>",
"SANDBOX_READ_ONLY": "<your SANDBOX_READ_ONLY>",
"SANDBOX_CAP_DROP": "<your SANDBOX_CAP_DROP>",
"SANDBOX_SECURITY_OPT": "<your SANDBOX_SECURITY_OPT>",
"SANDBOX_MEMORY": "<your SANDBOX_MEMORY>",
"SANDBOX_CPUS": "<your SANDBOX_CPUS>"
}
}
}
}Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"llm-sandbox": {
"command": "uvx",
"args": [
"--from",
"llm-sandbox[mcp-docker]",
"llm-sandbox"
],
"env": {
"BACKEND": "<your BACKEND>",
"DOCKER_HOST": "<your DOCKER_HOST>",
"KUBECONFIG": "<your KUBECONFIG>",
"NAMESPACE": "<your NAMESPACE>",
"COMMIT_CONTAINER": "<your COMMIT_CONTAINER>",
"KEEP_TEMPLATE": "<your KEEP_TEMPLATE>",
"SANDBOX_NETWORK_MODE": "<your SANDBOX_NETWORK_MODE>",
"SANDBOX_READ_ONLY": "<your SANDBOX_READ_ONLY>",
"SANDBOX_CAP_DROP": "<your SANDBOX_CAP_DROP>",
"SANDBOX_SECURITY_OPT": "<your SANDBOX_SECURITY_OPT>",
"SANDBOX_MEMORY": "<your SANDBOX_MEMORY>",
"SANDBOX_CPUS": "<your SANDBOX_CPUS>"
}
}
}
}Replace each placeholder with your own value before saving.
Show your rank
Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.
[](https://mcptoplist.com/server/io.github.vndee%2Fllm-sandbox)<a href="https://mcptoplist.com/server/io.github.vndee%2Fllm-sandbox"><img src="https://mcptoplist.com/badge/io.github.vndee%2Fllm-sandbox.svg" alt="MCP Toplist: Top 1% of 132,046" /></a>Variants: append ?metric=score or ?metric=stars to the image URL.
Listed on 1 registry
vndee
Available versions (2)
| Version | Published |
|---|---|
| 0.3.43 | Aug 3, 2026 |
| 0.3.42 | Aug 2, 2026 |
Frequently asked questions
- Who maintains LLM Sandbox?
- LLM Sandbox is maintained by vndee, which publishes 1 MCP server (2 total versions) tracked on MCP Toplist.
- Is LLM Sandbox listed on the Official MCP Registry?
- Yes — LLM Sandbox is listed on the Official MCP Registry.
- How many versions does LLM Sandbox have?
- MCP Toplist tracks 2 versions of LLM Sandbox, most recently published on Aug 3, 2026.
- Where can I find the source code for LLM Sandbox?
- The source code for LLM Sandbox is hosted at github.com/vndee/llm-sandbox.
Do you run this server?
Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.