Exec Sandbox

Single exec tool running caller Python in a network-isolated locked-down sandbox.

What does this entry provide?

Exec Sandbox is an MCP server entry in ChatHome Skills, sourced from Official MCP Registry and scored 67/100. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding Exec Sandbox to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.

Snapshot facts

Source: Official MCP Registry
Quality: 67/100
Install method: oci
Repo: inhuman/mcp-exec
Repo updated: Jul 20, 2026

Install command

docker run -i --rm docker.io/idconstruct/mcp-exec:v0.5.4

Install method: oci

Review the upstream source before running this command.

GitHub project

Quality

Repo stars

Repo updated

Jul 20, 2026

How is this score calculated?

Weighted across six dimensions, scored 0-100.
Provenance (25): listed in an official or curated registry.
Installability (25): a runnable install command beats a declared transport, which beats a source checkout.
Maintenance (20): recency of the last push; archived entries score zero here.
Adoption (20): repository stars on a log curve.
Documentation (10) and description quality (10): parsed manifest or SKILL.md frontmatter, and a real description rather than a placeholder.

MCP manifest

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-07-20T09:45:26.647237Z",
      "publishedAt": "2026-07-20T09:45:26.647237Z",
      "statusChangedAt": "2026-07-20T09:45:26.647237Z"
    }
  },
  "server": {
    "name": "io.github.inhuman/mcp-exec",
    "title": "Exec Sandbox",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "version": "0.5.4",
    "packages": [
      {
        "transport": {
          "type": "stdio"
        },
        "identifier": "docker.io/idconstruct/mcp-exec:v0.5.4",
        "runtimeHint": "docker",
        "registryType": "oci",
        "runtimeArguments": [
          {
            "name": "--network",
            "type": "named",
            "value": "none",
            "description": "No network for the sandbox (stdio posture)."
          },
          {
            "name": "--read-only",
            "type": "named",
            "description": "Read-only root filesystem."
          },
          {
            "name": "--cap-drop",
            "type": "named",
            "value": "ALL",
            "description": "Drop all Linux capabilities."
          },
          {
            "name": "--security-opt",
            "type": "named",
            "value": "no-new-privileges",
            "description": "Block privilege escalation."
          },
          {
            "name": "--user",
            "type": "named",
            "value": "65532:65532",
            "description": "Run as the non-root sandbox user."
          },
          {
            "name": "--tmpfs",
            "type": "named",
            "value": "/tmp:rw,noexec,nosuid,size=64m",
            "description": "Writable ephemeral workspace (rootfs is read-only)."
          },
          {
            "name": "--memory",
            "type": "named",
            "value": "256m",
            "description": "Memory limit."
          },
          {
            "name": "--pids-limit",
            "type": "named",
            "value": "128",
            "description": "PID limit."
          },
          {
            "name": "--cpus",
            "type": "named",
            "value": "1",
            "description": "CPU limit."
          }
        ],
        "environmentVariables": [
          {
            "name": "MCP_EXEC_TRANSPORT",
            "default": "stdio",
            "description": "MCP transport. Must be 'stdio' for direct docker/stdio use."
          },
          {
            "name": "MCP_EXEC_DEFAULT_TIMEOUT_S",
            "default": "30",
            "description": "Default wall-clock timeout per exec, seconds."
          },
          {
            "name": "MCP_EXEC_MAX_TIMEOUT_S",
            "default": "300",
            "description": "Maximum wall-clock timeout a caller may request, seconds."
          },
          {
            "name": "MCP_EXEC_MAX_OUTPUT_BYTES",
            "default": "1048576",
            "description": "Cap on combined stdout/stderr before truncation."
          },
          {
            "name": "MCP_EXEC_MAX_STDIN_BYTES",
            "default": "1048576",
            "description": "Cap on stdin passed to the sandboxed code."
          },
          {
            "name": "MCP_EXEC_AUTH_TOKEN",
            "isSecret": true,
            "description": "Optional X-MCP-AUTH token (http/sse transports only)."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/inhuman/mcp-exec",
      "source": "github"
    },
    "description": "Single exec tool running caller Python in a network-isolated locked-down sandbox."
  }
}

Report an issue with this listing