Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.
Indexed, not yet reviewed
We found LLM Sandbox in the official MCP registry. Our automated check passed on Nov 1, 2026 (it confirms the server is published and reachable), but no one at CuratedMCP has reviewed its code, permissions or credentials handling. Check what it can access before you give it keys. Scan your machine free to see every MCP server you have installed.
llm-sandbox@0.3.46| Environment variable | Required | What it is |
|---|---|---|
| BACKEND | No | Container backend to use. Must match the installed extra: mcp-docker, mcp-podman, or mcp-k8s. |
| DOCKER_HOST | No | Docker or Podman socket URL, e.g. unix:///var/run/docker.sock |
| KUBECONFIG | No | Path to kubeconfig file when BACKEND=kubernetes. |
| NAMESPACE | No | Kubernetes namespace used for sandbox pods when BACKEND=kubernetes. |
| COMMIT_CONTAINER | No | Commit the container after a run so installed libraries persist between sessions. |
| KEEP_TEMPLATE | No | Keep the base image after the session ends to avoid re-pulling it on the next run. |
| SANDBOX_NETWORK_MODE | No | Network mode for the sandbox container. Set to 'none' for hardened isolation. Docker and Podman backends only. |
| SANDBOX_READ_ONLY | No | Mount the sandbox root filesystem read-only. Recommended: true. Docker and Podman backends only. |
| SANDBOX_CAP_DROP | No | Comma-separated Linux capabilities to drop. Recommended: ALL. Docker and Podman backends only. |
| SANDBOX_SECURITY_OPT | No | Comma-separated container security options, e.g. no-new-privileges. Docker and Podman backends only. |
| SANDBOX_MEMORY | No | Memory limit for the sandbox container, e.g. 4g. Docker and Podman backends only. |
| SANDBOX_CPUS | No | Fractional CPU allocation for the sandbox container, e.g. 1.5. Docker and Podman backends only. |
This checks that the server is published and reachable. It is not a security review. Source: the official MCP registry (io.github.vndee/llm-sandbox) and GitHub.
Claim this page to get a full CuratedMCP listing: edit your description, see listing analytics, and add our README badge. Listing is free, and a person checks every submission before it goes live. We'll pre-fill the form from the registry.
loki-mode
Autonomous spec-to-product coding-agent CLI with an MCP server exposing 39 tools over stdio.
marm-memory
Universal MCP Server with advanced AI memory capabilities and semantic search.
Martin Loop
One system around coding agents to run, verify, recover, and hand off software work.
mcp
MCP server for monday.com integration.