iflow-mcp_54rt1n_container-mcp

# Container-MCP [](https://opensource.org/licenses/Apache-2.0) A secure, container-based implementation of the Model Context Protocol (MCP) for executing tools on behalf of large language models. ## Overview Container-MCP provides a sandboxed environment for safely executing code, running commands, accessing files, and performing web operations requested by large language models. It implements the MCP protocol to expose these capabilities as tools that can be discovered and called by AI systems in a secure manner. The architecture uses a domain-specific manager pattern with multi-layered security to ensure tools execute in isolated environments with appropriate restrictions, protecting the host system from potentially harmful operations. ## Key Features - **Multi-layered Security** - Container isolation using Podman/Docker - AppArmor profiles for restricting access - Firejail sandboxing for additional isolation - Resource limits (CPU, memory, execution time) - Path traversal prevention - Allowed extension restrictions - **MCP Protocol Implementation** - Standardized tool discovery and execution - Resource management - Async execution support - **Domain-Specific Managers** - `BashManager`: Secure command execution - `PythonManager`: Sandboxed Python code execution - `FileManager`: Safe file operations - `WebManager`: Secure web browsing and scraping - `KnowledgeBaseManager`: Structured document storage with semantic search - **Configurable Environment** - Extensive configuration via environment variables - Custom environment support - Development and production modes ## Available Tools ### System Operations #### `system_run_command` Executes bash commands in a secure sandbox environment. - **Parameters**: - `command` (string, required): The bash command to execute - `working_dir` (string, optional): Working directory (ignored in sandb…