How do I install LLM Sandbox?

Pick a client above and copy the generated config. Cursor and VS Code also have a deep link when the server can run locally or remotely.

Is LLM Sandbox official?

No. Registry-listed is not the same as vendor-official. Read the methodology for the difference.

How is the trust score calculated?

This listing scores 50 (Fair). The formula is published on the methodology page.

MCPpedia

LLM Sandbox MCP Server

Name: LLM Sandbox MCP Server
Author: vndee

Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.

Tools Versions Alternatives

Registryvndee

50Fair

Install

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "vndee-llm-sandbox": {
      "command": "uvx",
      "args": [
        "llm-sandbox"
      ],
      "env": {
        "BACKEND": "docker",
        "DOCKER_HOST": "",
        "KUBECONFIG": "",
        "NAMESPACE": "default",
        "COMMIT_CONTAINER": "true",
        "KEEP_TEMPLATE": "true",
        "SANDBOX_NETWORK_MODE": "",
        "SANDBOX_READ_ONLY": "",
        "SANDBOX_CAP_DROP": "",
        "SANDBOX_SECURITY_OPT": "",
        "SANDBOX_MEMORY": "",
        "SANDBOX_CPUS": ""
      }
    }
  }
}

Install guide

Related servers

SuperLocalMemory

78Good

Local-first memory for AI agents: recall with sources, answer checks, documents, mesh, governance.

Registryqualixar249 stars1.3K/wk

Codebase Memory

77Good

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

LLM Sandbox MCP Server | MCPpedia

Environment

Name	Required	Notes
BACKEND	No	Container backend to use. Must match the installed extra: mcp-docker, mcp-podman, or mcp-k8s.
DOCKER_HOST	No	Docker or Podman socket URL, e.g. unix:///var/run/docker.sock
KUBECONFIG	No	Path to kubeconfig file when BACKEND=kubernetes.
NAMESPACE	No	Kubernetes namespace used for sandbox pods when BACKEND=kubernetes.
COMMIT_CONTAINER	No	Commit the container after a run so installed libraries persist between sessions.
KEEP_TEMPLATE	No	Keep the base image after the session ends to avoid re-pulling it on the next run.
SANDBOX_NETWORK_MODE	No	Network mode for the sandbox container. Set to 'none' for hardened isolation. Docker and Podman backends only.
SANDBOX_READ_ONLY	No	Mount the sandbox root filesystem read-only. Recommended: true. Docker and Podman backends only.
SANDBOX_CAP_DROP	No	Comma-separated Linux capabilities to drop. Recommended: ALL. Docker and Podman backends only.
SANDBOX_SECURITY_OPT	No	Comma-separated container security options, e.g. no-new-privileges. Docker and Podman backends only.
SANDBOX_MEMORY	No	Memory limit for the sandbox container, e.g. 4g. Docker and Podman backends only.
SANDBOX_CPUS	No	Fractional CPU allocation for the sandbox container, e.g. 1.5. Docker and Podman backends only.

LLM Sandbox MCP Server

Install

Related servers

SuperLocalMemory

Codebase Memory

Environment

Tools

About

FAQ

Reviews

haiku.rag

openInvest

M3 Memory

Codigest