{"servers":[{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-10-17/server.schema.json","name":"io.github.vndee/llm-sandbox","description":"Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.","title":"LLM Sandbox","repository":{"url":"https://github.com/vndee/llm-sandbox","source":"github"},"version":"0.3.43","websiteUrl":"https://vndee.github.io/llm-sandbox/","packages":[{"registryType":"pypi","registryBaseUrl":"https://pypi.org","identifier":"llm-sandbox","version":"0.3.43","runtimeHint":"uvx","transport":{"type":"stdio"},"runtimeArguments":[{"description":"Install the MCP server extra. The base llm-sandbox package intentionally ships no container or MCP dependencies, so the extra is required for the server to start.","isRequired":true,"value":"llm-sandbox[mcp-docker]","type":"named","name":"--from"}],"environmentVariables":[{"description":"Container backend to use. Must match the installed extra: mcp-docker, mcp-podman, or mcp-k8s.","default":"docker","choices":["docker","podman","kubernetes"],"name":"BACKEND"},{"description":"Docker or Podman socket URL, e.g. unix:///var/run/docker.sock","name":"DOCKER_HOST"},{"description":"Path to kubeconfig file when BACKEND=kubernetes.","name":"KUBECONFIG"},{"description":"Kubernetes namespace used for sandbox pods when BACKEND=kubernetes.","default":"default","name":"NAMESPACE"},{"description":"Commit the container after a run so installed libraries persist between sessions.","default":"true","name":"COMMIT_CONTAINER"},{"description":"Keep the base image after the session ends to avoid re-pulling it on the next run.","default":"true","name":"KEEP_TEMPLATE"},{"description":"Network mode for the sandbox container. Set to 'none' for hardened isolation. Docker and Podman backends only.","name":"SANDBOX_NETWORK_MODE"},{"description":"Mount the sandbox root filesystem read-only. Recommended: true. Docker and Podman backends only.","name":"SANDBOX_READ_ONLY"},{"description":"Comma-separated Linux capabilities to drop. Recommended: ALL. Docker and Podman backends only.","name":"SANDBOX_CAP_DROP"},{"description":"Comma-separated container security options, e.g. no-new-privileges. Docker and Podman backends only.","name":"SANDBOX_SECURITY_OPT"},{"description":"Memory limit for the sandbox container, e.g. 4g. Docker and Podman backends only.","name":"SANDBOX_MEMORY"},{"description":"Fractional CPU allocation for the sandbox container, e.g. 1.5. Docker and Podman backends only.","name":"SANDBOX_CPUS"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-08-03T04:22:49.745057Z","publishedAt":"2026-08-03T04:22:49.745057Z","updatedAt":"2026-08-03T04:22:49.745057Z","isLatest":true}}}],"metadata":{"count":1}}