MCP Server MCP

Exec Sandbox

By github 👁 1 views ▲ 0 votes

Single exec tool running caller Python in a network-isolated locked-down sandbox.

Homepage Verified source GitHub

Install

oci:docker.io/idconstruct/mcp-exec:v0.5.4

Configuration Example

{
  "remotes": [],
  "packages": [
    {
      "registryType": "oci",
      "identifier": "docker.io/idconstruct/mcp-exec:v0.5.4",
      "runtimeHint": "docker",
      "transport": {
        "type": "stdio"
      },
      "runtimeArguments": [
        {
          "description": "No network for the sandbox (stdio posture).",
          "value": "none",
          "type": "named",
          "name": "--network"
        },
        {
          "description": "Read-only root filesystem.",
          "type": "named",
          "name": "--read-only"
        },
        {
          "description": "Drop all Linux capabilities.",
          "value": "ALL",
          "type": "named",
          "name": "--cap-drop"
        },
        {
          "description": "Block privilege escalation.",
          "value": "no-new-privileges",
          "type": "named",
          "name": "--security-opt"
        },
        {
          "description": "Run as the non-root sandbox user.",
          "value": "65532:65532",
          "type": "named",
          "name": "--user"
        },
        {
          "description": "Writable ephemeral workspace (rootfs is read-only).",
          "value": "/tmp:rw,noexec,nosuid,size=64m",
          "type": "named",
          "name": "--tmpfs"
        },
        {
          "description": "Memory limit.",
          "value": "256m",
          "type": "named",
          "name": "--memory"
        },
        {
          "description": "PID limit.",
          "value": "128",
          "type": "named",
          "name": "--pids-limit"
        },
        {
          "description": "CPU limit.",
          "value": "1",
          "type": "named",
          "name": "--cpus"
        }
      ],
      "environmentVariables": [
        {
          "description": "MCP transport. Must be 'stdio' for direct docker/stdio use.",
          "default": "stdio",
          "name": "MCP_EXEC_TRANSPORT"
        },
        {
          "description": "Default wall-clock timeout per exec, seconds.",
          "default": "30",
          "name": "MCP_EXEC_DEFAULT_TIMEOUT_S"
        },
        {
          "description": "Maximum wall-clock timeout a caller may request, seconds.",
          "default": "300",
          "name": "MCP_EXEC_MAX_TIMEOUT_S"
        },
        {
          "description": "Cap on combined stdout/stderr before truncation.",
          "default": "1048576",
          "name": "MCP_EXEC_MAX_OUTPUT_BYTES"
        },
        {
          "description": "Cap on stdin passed to the sandboxed code.",
          "default": "1048576",
          "name": "MCP_EXEC_MAX_STDIN_BYTES"
        },
        {
          "description": "Optional X-MCP-AUTH token (http/sse transports only).",
          "isSecret": true,
          "name": "MCP_EXEC_AUTH_TOKEN"
        }
      ]
    }
  ]
}

mcp model-context-protocol oci