加载中…
Single exec tool running caller Python in a network-isolated locked-down sandbox.
Exec Sandbox 是 ChatHome Skills 收录的 MCP 条目，来源为 Official MCP Registry，质量分 67/100。 作为 Model Context Protocol 服务器，它向 Claude、Cursor、Copilot 等兼容 MCP 的 LLM 客户端暴露可直接调用的工具，让 agent 的能力超出模型内置范围。 该条目由 ChatHome Skills 的每日抓取从官方 registry 和 GitHub 发现查询中收录，每次运行都会重新核验仓库事实、新鲜度信号和安装元数据。 质量分综合了官方 registry 收录情况、可用安装命令、许可证完整性、仓库活跃度和 GitHub star 趋势，完整算法说明见来源页。安装命令已列于上方，可直接复制使用。 在将 Exec Sandbox 加入生产 agent 工作流前，请核对上方的最近更新日期和仓库状态——下方事实快照是最近一次抓取的时点值。
docker run -i --rm docker.io/idconstruct/mcp-exec:v0.5.4运行此命令前，请先核对上游源码。
{
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"isLatest": true,
"updatedAt": "2026-07-20T09:45:26.647237Z",
"publishedAt": "2026-07-20T09:45:26.647237Z",
"statusChangedAt": "2026-07-20T09:45:26.647237Z"
}
},
"server": {
"name": "io.github.inhuman/mcp-exec",
"title": "Exec Sandbox",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"version": "0.5.4",
"packages": [
{
"transport": {
"type": "stdio"
},
"identifier": "docker.io/idconstruct/mcp-exec:v0.5.4",
"runtimeHint": "docker",
"registryType": "oci",
"runtimeArguments": [
{
"name": "--network",
"type": "named",
"value": "none",
"description": "No network for the sandbox (stdio posture)."
},
{
"name": "--read-only",
"type": "named",
"description": "Read-only root filesystem."
},
{
"name": "--cap-drop",
"type": "named",
"value": "ALL",
"description": "Drop all Linux capabilities."
},
{
"name": "--security-opt",
"type": "named",
"value": "no-new-privileges",
"description": "Block privilege escalation."
},
{
"name": "--user",
"type": "named",
"value": "65532:65532",
"description": "Run as the non-root sandbox user."
},
{
"name": "--tmpfs",
"type": "named",
"value": "/tmp:rw,noexec,nosuid,size=64m",
"description": "Writable ephemeral workspace (rootfs is read-only)."
},
{
"name": "--memory",
"type": "named",
"value": "256m",
"description": "Memory limit."
},
{
"name": "--pids-limit",
"type": "named",
"value": "128",
"description": "PID limit."
},
{
"name": "--cpus",
"type": "named",
"value": "1",
"description": "CPU limit."
}
],
"environmentVariables": [
{
"name": "MCP_EXEC_TRANSPORT",
"default": "stdio",
"description": "MCP transport. Must be 'stdio' for direct docker/stdio use."
},
{
"name": "MCP_EXEC_DEFAULT_TIMEOUT_S",
"default": "30",
"description": "Default wall-clock timeout per exec, seconds."
},
{
"name": "MCP_EXEC_MAX_TIMEOUT_S",
"default": "300",
"description": "Maximum wall-clock timeout a caller may request, seconds."
},
{
"name": "MCP_EXEC_MAX_OUTPUT_BYTES",
"default": "1048576",
"description": "Cap on combined stdout/stderr before truncation."
},
{
"name": "MCP_EXEC_MAX_STDIN_BYTES",
"default": "1048576",
"description": "Cap on stdin passed to the sandboxed code."
},
{
"name": "MCP_EXEC_AUTH_TOKEN",
"isSecret": true,
"description": "Optional X-MCP-AUTH token (http/sse transports only)."
}
]
}
],
"repository": {
"url": "https://github.com/inhuman/mcp-exec",
"source": "github"
},
"description": "Single exec tool running caller Python in a network-isolated locked-down sandbox."
}
}