{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_mgwy57tbzmj9","handle":"nanosandbox-mcp","url":"https://wellknown.network/agents/nanosandbox-mcp","links":{"self":"https://wellknown.network/agents/nanosandbox-mcp/record.json","html":"https://wellknown.network/agents/nanosandbox-mcp","markdown":"https://wellknown.network/agents/nanosandbox-mcp/record.md","api":"https://wellknown.network/api/v1/agents/nanosandbox-mcp","status":"https://wellknown.network/api/v1/agents/nanosandbox-mcp/status","claim":"https://wellknown.network/agents/nanosandbox-mcp/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/nanosandbox-mcp/claim.json","badge":"https://wellknown.network/agents/nanosandbox-mcp/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/nanosandbox-mcp/history","tools":"https://wellknown.network/api/v1/agents/nanosandbox-mcp/tools"},"ard":{"identifier":"urn:air::server:nanosandbox-mcp","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"nanosandbox-mcp","summary":"MCP server (stdio) that runs commands in a nanosandbox sandbox","description":"# nanosandbox-mcp\n\nAn [MCP](https://modelcontextprotocol.io) server that lets an AI agent run commands in a\n[nanosandbox](https://github.com/Erio-Harrison/nanosandbox) sandbox. It speaks MCP over stdio and\noffers one tool, `run_command`.\n\n## Install\n\n```bash\nnpx -y nanosandbox-mcp --help        # npm, nothing to install first\nuvx nanosandbox-mcp --help           # PyPI, via uv\ncargo install nanosandbox-mcp        # crates.io, builds from source\n```\n\nPrebuilt binaries cover macOS (Apple silicon and Intel) and Linux (x86_64 and aarch64, glibc 2.17+).\nLinux and macOS only. Windows isn't supported yet: the sandbox there is a resource limiter, not a\nsecurity boundary.\n\n## Use\n\nAdd it to an MCP client's configuration (Claude Desktop, Cursor, Zed, ...):\n\n```json\n{\n  \"mcpServers\": {\n    \"sandbox\": {\n      \"command\": \"npx\",\n      \"args\": [\"-y\", \"nanosandbox-mcp\", \"--workspace\", \"/path/to/project\"]\n    }\n  }\n}\n```\n\n(With `uvx`: `\"command\": \"uvx\", \"args\": [\"nanosandbox-mcp\", \"--workspace\", ...]`. With a\n`cargo install`ed binary: `\"command\": \"nanosandbox-mcp\"`.)\n\nThe agent can now run programs, with their files limited to that workspace and no network.\n\n## Who decides what the sandbox may do\n\nYou do, when you launch the server. The model chooses *what to run*; it never chooses *what the\nsandbox may touch*. The tool takes only `command`, `args` and `stdin`. There is no parameter for\npaths, network, memory or time, so a model can't ask for more than you allowed. An extra argument\nis refused.\n\n| Option | Meaning | Default |\n|---|---|---|\n| `--workspace <DIR>` | Working directory and the only place commands can write. **Required.** | |\n| `--read-only <PATH>`, `--writable <PATH>` | Also allow reading / writing a path (repeatable). A `--read-only` path inside the workspace is read-only again, so a settings file there, or `.git/hooks` and `.git/config` (both: `core.hooksPath` in the config runs code from anywhere), can't be changed by a command (on Linux this needs mounting, refused …","publisher":null,"homepage":"https://github.com/Erio-Harrison/nanosandbox","repository":"https://github.com/Erio-Harrison/nanosandbox","version":"0.3.3","license":"MIT","protocols":["mcp"],"tags":["mcp","sandbox","agent","security","isolation"],"pricing":null,"endpoints":[{"url":"pypi:nanosandbox-mcp","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","repoUrl":"pypi","summary":"pypi","version":"pypi","description":"pypi","homepageUrl":"pypi"}},"derived":{"capabilities":[{"slug":"code.execution","name":"Code Execution","confidence":1,"provenance":"declared"},{"slug":"dev.terminal","name":"Terminal & Shell","confidence":0.825,"provenance":"derived"},{"slug":"dev.filesystem","name":"Filesystem","confidence":0.802,"provenance":"derived"},{"slug":"dev.version-control","name":"Version Control","confidence":0.745,"provenance":"derived"},{"slug":"dev.package-management","name":"Packages & Dependencies","confidence":0.722,"provenance":"derived"}],"categories":["code","dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"nanosandbox-mcp","registry":"pypi","observedAt":"2026-10-24T17:29:29.990Z","publishedAt":"2026-10-13T14:11:33.736086Z","latestVersion":"0.3.3"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"nanosandbox-mcp","url":"https://pypi.org/project/nanosandbox-mcp/","firstSeenAt":"2026-10-12T14:25:22.023Z","fetchedAt":"2026-10-24T17:28:31.811Z","normalizedAt":"2026-10-24T17:28:31.811Z"}]},"firstSeenAt":"2026-10-12T14:25:22.023Z","updatedAt":"2026-10-24T17:29:29.990Z"}