LLM Sandbox
Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.
MCP server · by vndee
About
LLM Sandbox is an MCP server published by vndee. Marketplaces we read that list it: 1 (Official MCP Registry). We first saw it on 2026-10-11 and have recorded no change since. As of our marketplace pass on 2026-10-11.
What it asks for
- Runs on your machine
- Settings: 12
What it declares, asks for and runs, in full
Only install plugins from developers you trust. We list what marketplaces publish and do not test plugins.
Connect
Commands and configs built only from what its marketplaces declare. We do not run them for you and do not test plugins.
As a local MCP server: PyPI package
Built from what Official MCP Registry declares.
claude mcp add --transport stdio llm-sandbox -- uvx llm-sandbox[mcp_servers.llm-sandbox]
command = "uvx"
args = ["llm-sandbox"]{
"mcpServers": {
"llm-sandbox": {
"command": "uvx",
"args": [
"llm-sandbox"
]
}
}
}Optional settings it also lists: BACKEND, COMMIT_CONTAINER, DOCKER_HOST, KEEP_TEMPLATE, KUBECONFIG, NAMESPACE, SANDBOX_CAP_DROP, SANDBOX_CPUS, SANDBOX_MEMORY, SANDBOX_NETWORK_MODE, SANDBOX_READ_ONLY, SANDBOX_SECURITY_OPT.
We do not store launch arguments. If the server needs any, its own documentation names them.
Where it is published
| Marketplace | Status | Version | Figures | Verified | First seen |
|---|---|---|---|---|---|
| Official MCP Registry (Open the registry record) | Listed | 0.3.43 | Forks (GitHub): 107 Stars (GitHub): 1 130 |
Not marked |
Each figure is the marketplace's own and is never added up across marketplaces. A marketplace that publishes no figure shows none: no number is not zero.
What changed
Nothing has moved on this plugin since we started watching it.
Similar plugins
Products whose own names, descriptions, tools and skills are closest in meaning to this one, on every marketplace we read. Closeness is ranked within this list only.
-
Ephemeral MicroVM-isolated code execution for AI agents. Fresh VM per call, hard-purged after.
-
Bridges multiple AI models and CLIs, enabling orchestrated workflows across Claude Code, Gemini CLI, Codex CLI, and other AI development tools.
-
Hosted one-shot code execution: send a snippet plus optional files, get stdout, stderr, exit...
-
Code Interpreter Agent by Nova (CIVAI)
I do everything related to coding and execution tasks
-
Secure code execution sandbox for Claude — run Python, JavaScript, and shell commands
-
Disposable microVM sandboxes for AI agents: run code, read/write files, git, preview URLs.
-
Persistent memory and session intelligence for AI coding assistants. Zero config.
-
A Node.js–based Model Context Protocol server that spins up disposable Docker containers to execute arbitrary JavaScript.
-
Give any AI assistant a code run button via HackerEarth. 24 languages, zero setup.
-
misterdev io.github.dcondrey/misterdev
Autonomous LLM build orchestrator that plans, edits, and verifies code across languages.
Similar plugins by marketplace
The same question asked of one marketplace at a time: is there an analog of this plugin there?
Has a listing on Claude Code: claude-plugins-community (5)
-
Context optimization + safe code execution - Query docs (90% token reduction), orchestrate multi-round exploration, and execute code with Docker isolation using RLM Runtime
-
Multi-LLM orchestration MCP server. Delegate tasks to Claude Code, Codex, and Gemini CLIs with session management, retry logic, async job orchestration, and token optimization.
-
Intelligent orchestration platform for AI coding tools. Coordinates Claude, Codex, Gemini, and OpenCode through a single MCP server — routing each task to the best model using…
-
Write, run, debug, and explain programs in ilo — a token-optimised programming language for AI agents
-
together-ai-skills
A collection of skills that teach coding agents how to use the Together AI platform, including chat completions, image generation, video, audio, embeddings, fine-tuning, batch…
Has a listing on Claude Code: claude-plugins-official (5)
-
Appwrite tools for Claude Code, including SDK skills, Appwrite MCP servers, and deployment commands.
-
Analyze codebases and recommend tailored Claude Code automations such as hooks, skills, MCP servers, and subagents.
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
-
Precise local semantic code search via MCP. Indexes your codebase with Go AST parsing, embeds with Ollama or LM Studio, and exposes vector search to Claude through an MCP server…
-
MCP server for terminal commands, file operations, and process management
Has a listing on Claude: knowledge-work-plugins (5)
-
MCP server for terminal commands, file operations, and process management
-
Deploy, debug, and monitor applications on Render. Includes skills, an agent, slash commands, and a render.yaml validation hook.
-
Official Buildkite skills for Claude Code, Cursor, and other AI coding agents — pipelines, migration, preflight, agent runtime, CLI, and API
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Bring Qodo's codebase intelligence, coding standards, and code review into your coding agent.
Has a listing on Codex: openai-curated (openai/plugins) (5)
-
Build with OpenAI APIs, Agents SDK, and ChatGPT Apps, and create and save OpenAI API keys from Codex.
-
Evaluate Codex skills and plugins from chat with a beginner-friendly start command, local-first reports, token budget explanations, and guided benchmarking.
-
Skills for NVIDIAs ecosystem spans GPU acceleration, CUDA, AI agents, inference, robotics, Physical AI, Omniverse, and simulation. This plugin helps you understand the pieces…
-
AI-powered code review in Codex, powered by CodeRabbit.
-
Inspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.
Has a listing on Community GitHub marketplaces (5)
-
Dash0 Observability
OpenTelemetry observability for OpenAI Codex sessions. Captures prompts, tool calls, MCP calls, sub-agent activity, and token usage as OTel traces.
-
Endor Labs workflow agents and setup for Claude Code.
-
Appwrite tools for Claude Code, including SDK skills, Appwrite MCP servers, and deployment commands.
-
MCP server for terminal commands, file operations, and process management
-
Endor Labs AI Plugins (Legacy)
Legacy Claude Code plugin id for Endor Labs Agent Kit workflows.
Has a listing on Copilot CLI: github/awesome-copilot (5)
-
Model, visualize, and deploy applications with Radius from the GitHub Copilot app and CLI.
-
Build applications with the GitHub Copilot SDK across multiple programming languages. Includes comprehensive instructions for C#, Go, Node.js/TypeScript, and Python to help you…
-
Meta prompts that help you discover and generate curated GitHub Copilot agents, instructions, prompts, and skills.
-
Use Datadog directly in Copilot / VS Code through a preconfigured Datadog MCP server. Query logs, metrics, traces, dashboards, and more through natural conversation.
-
Plain-English translation layer for non-technical Copilot CLI users. Translates every approval prompt, error message, and technical output into clear, jargon-free English with…
Has a listing on Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
Navigate and interact with your C++ code using the Microsoft C++ Language Server.
-
Build Power Apps Canvas Apps using the Canvas Authoring MCP server.
Has a listing on Cursor: cursor/plugins (5)
-
Build apps, scripts, and automations with the TypeScript SDK.
-
Skills for building on the Cursor Origin API. Fetch the live spec first, then follow the Origin rules for credentials, scopes, webhooks, paging, and errors. Includes a skill that…
-
Fan large tasks out across parallel cloud agents with planners, workers, verifiers, and structured handoffs.
-
Iterative self-referential AI loops using the Ralph Wiggum technique.
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
Has a listing on Docker MCP Catalog (5)
-
Bridges multiple AI models and CLIs, enabling orchestrated workflows across Claude Code, Gemini CLI, Codex CLI, and other AI development tools.
-
A Node.js–based Model Context Protocol server that spins up disposable Docker containers to execute arbitrary JavaScript.
-
Giving Claude ability to run code with E2B via MCP (Model Context Protocol).
-
Stop stitching context for Copilot and Cursor. With Sequa MCP, your AI tools know your entire codebase and docs out of the box.
-
MCP server for terminal commands, file operations, and process management
Has a listing on Official MCP Registry (5)
-
Ephemeral MicroVM-isolated code execution for AI agents. Fresh VM per call, hard-purged after.
-
Hosted one-shot code execution: send a snippet plus optional files, get stdout, stderr, exit...
-
Code Interpreter Agent by Nova (CIVAI)
I do everything related to coding and execution tasks
-
Secure code execution sandbox for Claude — run Python, JavaScript, and shell commands
-
Disposable microVM sandboxes for AI agents: run code, read/write files, git, preview URLs.
Found by meaning, not by shared code or a shared repository: similar plugins stay separate products, and this is not a review or a recommendation.
Is this your plugin?
Prove you maintain it with a file in its repository, a file on your domain or a DNS record. You get alerts when a marketplace lists it, drops it, changes its verified mark or what it asks for, and can put its remote endpoint on monitoring as a web service.
Data comes from the Official MCP Registry (registry.modelcontextprotocol.io), CC0 1.0. Figures come from our own regular passes over the marketplaces, last read on . We publish no contact details for plugin publishers.