io.github.inhuman

mcp-exec

Exec Sandbox

Single exec tool running caller Python in a network-isolated locked-down sandbox.

stdiocommunityinfra

Package Details

docker.io/idconstruct/mcp-exec:v0.5.2

https://hub.docker.com/r/idconstruct/mcp-exec
Transportstdio
Runtimedocker

Runtime Arguments

Named
--network
noneNo network for the sandbox (stdio posture).
--read-only
Read-only root filesystem.
--cap-drop
ALLDrop all Linux capabilities.
--security-opt
no-new-privilegesBlock privilege escalation.
--user
65532:65532Run as the non-root sandbox user.
--tmpfs
/tmp:rw,noexec,nosuid,size=64mWritable ephemeral workspace (rootfs is read-only).
--memory
256mMemory limit.
--pids-limit
128PID limit.
--cpus
1CPU limit.

Environment Variables

MCP_EXEC_TRANSPORT
Default:stdio

MCP transport. Must be 'stdio' for direct docker/stdio use.

MCP_EXEC_DEFAULT_TIMEOUT_S
Default:30

Default wall-clock timeout per exec, seconds.

MCP_EXEC_MAX_TIMEOUT_S
Default:300

Maximum wall-clock timeout a caller may request, seconds.

MCP_EXEC_MAX_OUTPUT_BYTES
Default:1048576

Cap on combined stdout/stderr before truncation.

MCP_EXEC_MAX_STDIN_BYTES
Default:1048576

Cap on stdin passed to the sandboxed code.

MCP_EXEC_AUTH_TOKEN
Secret

Optional X-MCP-AUTH token (http/sse transports only).