{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_tya558cqrdh9","handle":"mcp-run-isolated-python","url":"https://wellknown.network/agents/mcp-run-isolated-python","links":{"self":"https://wellknown.network/agents/mcp-run-isolated-python/record.json","html":"https://wellknown.network/agents/mcp-run-isolated-python","markdown":"https://wellknown.network/agents/mcp-run-isolated-python/record.md","api":"https://wellknown.network/api/v1/agents/mcp-run-isolated-python","status":"https://wellknown.network/api/v1/agents/mcp-run-isolated-python/status","claim":"https://wellknown.network/agents/mcp-run-isolated-python/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-run-isolated-python/claim.json","badge":"https://wellknown.network/agents/mcp-run-isolated-python/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-run-isolated-python/history","tools":"https://wellknown.network/api/v1/agents/mcp-run-isolated-python/tools"},"ard":{"identifier":"urn:air::server:mcp-run-isolated-python","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp_run_isolated_python","summary":"A secure and sandboxed python code interpreter for LLMs. Accessable via MCP, or directly in code","description":"# MCP Server for Sandboxed Python Code Execution\n\nThis MCP server allows your LLM to execute python code securely and returns the results - including files.\nThe code is executed in a configurable sandboxed environment, with strong defaults - like no network access and heavily\nlimited file write permissions.\n\nIt's great for use cases complicated use cases where LLMs run into hallucination. For example, stuff that requires a lot\nof math - where LLMs are notoriously finicky - or if you want to generate cool graphs.\nIf you this, your LLM will always be able to count the number of \"r\" in strawberry!\n\n## Quick Start\n\n### MCP - via Docker (recommended)\n\nFor this to run we have to set some security options on the container.\nThis is due to bubblewrap needing to create user, mount and pid namespaces, which the container has to be allowed to do:\n- seccomp=unconfined\n- apparmor=unconfined\n- systempaths=unconfined\n\nThis is mandatory - to my knowledge these are the miniumum needed permissions, but feel free to experiment :)\n\n```\ndocker run -p 6400:6400 \\\n  --pids-limit 512 --memory 2g --cpus 2 \\\n  --security-opt seccomp=unconfined \\\n  --security-opt apparmor=unconfined \\\n  --security-opt systempaths=unconfined \\\n  -e PYTHON_DEPENDENCIES=\"pydantic numpy\" \\\n  kigstn/mcp-run-isolated-python\n```\n\nYou can pass your CLI settings directly after that, the dockerfile uses entrypoint to start the server and listens to all args.\n\nNote:\n\n- If you are running on Ubuntu 24 you will need to adapt your apparmor profile. We have a script, just run `setup_host.sh`. [More Info](https://github.com/anthropics/sandbox-runtime/blob/main/.github/workflows/integration-tests.yml#L152)\n- These three options only loosen the *container*. The code your LLM runs is still sandboxed by `srt` inside it -\n  no network, no writes outside its temp dir, own pid namespace.\n- Docker automatically creates a separate UV python interpreter for the runtime - so you dont have to pass that :)\n- To control your packages, use…","publisher":{"name":"Daniel J","url":null},"homepage":null,"repository":"https://github.com/Kigstn/mcp-run-isolated-python","version":"1.1.0","license":"Copyright © 2026 Daniel J  Permission is hereby granted, free o…","protocols":["mcp"],"tags":["mcp"],"pricing":null,"endpoints":[{"url":"pypi:mcp_run_isolated_python","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","publisherName":"pypi"}},"derived":{"capabilities":[{"slug":"code.execution","name":"Code Execution","confidence":1,"provenance":"derived"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.859,"provenance":"derived"}],"categories":["code","dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp_run_isolated_python","registry":"pypi","observedAt":"2026-10-28T13:24:37.024Z","publishedAt":"2026-09-25T14:14:48.994454Z","latestVersion":"1.1.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp_run_isolated_python","url":"https://pypi.org/project/mcp_run_isolated_python/","firstSeenAt":"2026-09-10T03:19:26.498Z","fetchedAt":"2026-10-28T13:22:29.991Z","normalizedAt":"2026-10-28T13:22:29.991Z"}]},"firstSeenAt":"2026-09-10T03:19:26.498Z","updatedAt":"2026-10-28T13:24:37.024Z"}