Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.
Indexed, not yet reviewed
We found LLM Sandbox in the official MCP registry. Our automated check passed on Nov 1, 2026 (it confirms the server is published and reachable), but no one at CuratedMCP has reviewed its code, permissions or credentials handling. Check what it can access before you give it keys. Scan your machine free to see every MCP server you have installed.
claude mcp add llm-sandbox -- uvx llm-sandboxAdd --scope user to make it available in every project.
| Environment variable | Required | What it is |
|---|---|---|
| BACKEND | No | Container backend to use. Must match the installed extra: mcp-docker, mcp-podman, or mcp-k8s. |
| DOCKER_HOST | No | Docker or Podman socket URL, e.g. unix:///var/run/docker.sock |
| KUBECONFIG | No | Path to kubeconfig file when BACKEND=kubernetes. |
| NAMESPACE | No | Kubernetes namespace used for sandbox pods when BACKEND=kubernetes. |
| COMMIT_CONTAINER | No | Commit the container after a run so installed libraries persist between sessions. |
| KEEP_TEMPLATE | No | Keep the base image after the session ends to avoid re-pulling it on the next run. |
| SANDBOX_NETWORK_MODE | No | Network mode for the sandbox container. Set to 'none' for hardened isolation. Docker and Podman backends only. |
| SANDBOX_READ_ONLY | No | Mount the sandbox root filesystem read-only. Recommended: true. Docker and Podman backends only. |
| SANDBOX_CAP_DROP | No | Comma-separated Linux capabilities to drop. Recommended: ALL. Docker and Podman backends only. |
| SANDBOX_SECURITY_OPT | No | Comma-separated container security options, e.g. no-new-privileges. Docker and Podman backends only. |
| SANDBOX_MEMORY | No | Memory limit for the sandbox container, e.g. 4g. Docker and Podman backends only. |
| SANDBOX_CPUS | No | Fractional CPU allocation for the sandbox container, e.g. 1.5. Docker and Podman backends only. |
Claim this page to get a full CuratedMCP listing: edit your description, see listing analytics, and add our README badge. Listing is free, and a person checks every submission before it goes live. We'll pre-fill the form from the registry.