--- bezeichner: "io.github.vndee/llm-sandbox" art: "mcp_server" slug: "io-github-vndee-llm-sandbox" paketkoordinate: "pypi:llm-sandbox" status: "aktiv" homepage: "https://vndee.github.io/llm-sandbox/" erhebungsstand: "2026-10-10T01:17:01.464Z" namensraum: "io.github.vndee" registerseite: "https://tracevero.de/mcp/io-github-vndee-llm-sandbox" abgerufen_am: "2026-10-10" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: false quelloffen_einsehbar: true roh_beschreibung: "Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends." version: "0.3.43" roh_umgebungsvariablen: "BACKEND, DOCKER_HOST, KUBECONFIG, NAMESPACE, COMMIT_CONTAINER, KEEP_TEMPLATE, SANDBOX_NETWORK_MODE, SANDBOX_READ_ONLY, SANDBOX_CAP_DROP, SANDBOX_SECURITY_OPT, SANDBOX_MEMORY, SANDBOX_CPUS" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio" roh_pfadargumente: "" roh_repository_url: "https://github.com/vndee/llm-sandbox" roh_paketquellen: "pypi" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-08-03" roh_aktualisiert_am: "2026-08-03" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-10-17/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "llm-sandbox" roh_paketversionen: "0.3.43" roh_laufzeithinweise: "uvx" roh_umgebungsformate: "" roh_umgebungsbeschreibungen: "BACKEND=Container backend to use. Must match the installed extra: mcp-docker, mcp-podman, or mcp-k8s. · COMMIT_CONTAINER=Commit the container after a run so installed libraries persist between sessions. · DOCKER_HOST=Docker or Podman socket URL, e.g. unix:///var/run/docker.sock · KEEP_TEMPLATE=Keep the base image after the session ends to avoid re-pulling it on the next run. · KUBECONFIG=Path to kubeconfig file when BACKEND=kubernetes. · NAMESPACE=Kubernetes namespace used for sandbox pods when BACKEND=kubernetes. · SANDBOX_CAP_DROP=Comma-separated Linux capabilities to drop. Recommended: ALL. Docker and Podman backends only. · SANDBOX_CPUS=Fractional CPU allocation for the sandbox container, e.g. 1.5. Docker and Podman backends only. · SANDBOX_MEMORY=Memory limit for the sandbox container, e.g. 4g. Docker and Podman backends only. · SANDBOX_NETWORK_MODE=Network mode for the sandbox container. Set to 'none' for hardened isolation. Docker and Podman backends only. · SANDBOX_READ_ONLY=Mount the sandbox root filesystem read-only. Recommended: true. Docker and Podman backends only. · SANDBOX_SECURITY_OPT=Comma-separated container security options, e.g. no-new-privileges. Docker and Podman backends only." roh_symbolformate: "" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"pypi\",\"identifier\":\"llm-sandbox\",\"version\":\"0.3.43\",\"runtimeHint\":\"uvx\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"BACKEND\",\"description\":\"Container backend to use. Must match the installed extra: mcp-docker, mcp-podman, or mcp-k8s.\",\"required\":false,\"secret\":false},{\"name\":\"DOCKER_HOST\",\"description\":\"Docker or Podman socket URL, e.g. unix:///var/run/docker.sock\",\"required\":false,\"secret\":false},{\"name\":\"KUBECONFIG\",\"description\":\"Path to kubeconfig file when BACKEND=kubernetes.\",\"required\":false,\"secret\":false},{\"name\":\"NAMESPACE\",\"description\":\"Kubernetes namespace used for sandbox pods when BACKEND=kubernetes.\",\"required\":false,\"secret\":false},{\"name\":\"COMMIT_CONTAINER\",\"description\":\"Commit the container after a run so installed libraries persist between sessions.\",\"required\":false,\"secret\":false},{\"name\":\"KEEP_TEMPLATE\",\"description\":\"Keep the base image after the session ends to avoid re-pulling it on the next run.\",\"required\":false,\"secret\":false},{\"name\":\"SANDBOX_NETWORK_MODE\",\"description\":\"Network mode for the sandbox container. Set to 'none' for hardened isolation. Docker and Podman backends only.\",\"required\":false,\"secret\":false},{\"name\":\"SANDBOX_READ_ONLY\",\"description\":\"Mount the sandbox root filesystem read-only. Recommended: true. Docker and Podman backends only.\",\"required\":false,\"secret\":false},{\"name\":\"SANDBOX_CAP_DROP\",\"description\":\"Comma-separated Linux capabilities to drop. Recommended: ALL. Docker and Podman backends only.\",\"required\":false,\"secret\":false},{\"name\":\"SANDBOX_SECURITY_OPT\",\"description\":\"Comma-separated container security options, e.g. no-new-privileges. Docker and Podman backends only.\",\"required\":false,\"secret\":false},{\"name\":\"SANDBOX_MEMORY\",\"description\":\"Memory limit for the sandbox container, e.g. 4g. Docker and Podman backends only.\",\"required\":false,\"secret\":false},{\"name\":\"SANDBOX_CPUS\",\"description\":\"Fractional CPU allocation for the sandbox container, e.g. 1.5. Docker and Podman backends only.\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":true}],\"remotes\":[]}" --- # LLM Sandbox ## Gemessene Werte | Merkmal | Wert | Quelle | Erhoben am | Vertrauensgrad | Rohangabe | | --- | --- | --- | --- | --- | --- | | Pflicht-Geheimnisse deklariert | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Ausführungsort | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio | | Pfadargument vorhanden | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: | | Repository-Adresse geführt | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/vndee/llm-sandbox | | Beschreibung (Rohangabe) | Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft | | | Deklarierte Version | 0.3.43 | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Umgebungsvariablen (Rohangabe) | BACKEND, DOCKER_HOST, KUBECONFIG, NAMESPACE, COMMIT_CONTAINER, KEEP_TEMPLATE, SANDBOX_NETWORK_MODE, SANDBOX_READ_ONLY, SANDBOX_CAP_DROP, SANDBOX_SECURITY_OPT, SANDBOX_MEMORY, SANDBOX_CPUS | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Geheime Pflichtvariablen (Rohangabe) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Transportarten (Rohangabe) | stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Pfadargumente (Rohangabe) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Repository (Rohangabe) | https://github.com/vndee/llm-sandbox | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Paketquellen (Rohangabe) | pypi | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Geheime Pflichtkopfzeilen (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Pfad-Umgebungsvariablen (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote-Adressen (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote-Hosts (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Statusmeldung des Registers (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Im Register eingetragen am (Rohangabe) | 2026-08-03 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Im Register geändert am (Rohangabe) | 2026-08-03 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Schemafassung des Rohsatzes (Rohangabe) | https://static.modelcontextprotocol.io/schemas/2025-10-17/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Bereitstellungsform (Rohangabe) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository-Plattform (Rohangabe) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository-Unterordner (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Paketbezeichner (Rohangabe) | llm-sandbox | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Paketversionen (Rohangabe) | 0.3.43 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Laufzeithinweise (Rohangabe) | uvx | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Formate der Umgebungsvariablen (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Beschreibungen der Umgebungsvariablen (Rohangabe) | BACKEND=Container backend to use. Must match the installed extra: mcp-docker, mcp-podman, or mcp-k8s. · COMMIT_CONTAINER=Commit the container after a run so installed libraries persist between sessions. · DOCKER_HOST=Docker or Podman socket URL, e.g. unix:///var/run/docker.sock · KEEP_TEMPLATE=Keep the base image after the session ends to avoid re-pulling it on the next run. · KUBECONFIG=Path to kubeconfig file when BACKEND=kubernetes. · NAMESPACE=Kubernetes namespace used for sandbox pods when BACKEND=kubernetes. · SANDBOX_CAP_DROP=Comma-separated Linux capabilities to drop. Recommended: ALL. Docker and Podman backends only. · SANDBOX_CPUS=Fractional CPU allocation for the sandbox container, e.g. 1.5. Docker and Podman backends only. · SANDBOX_MEMORY=Memory limit for the sandbox container, e.g. 4g. Docker and Podman backends only. · SANDBOX_NETWORK_MODE=Network mode for the sandbox container. Set to 'none' for hardened isolation. Docker and Podman backends only. · SANDBOX_READ_ONLY=Mount the sandbox root filesystem read-only. Recommended: true. Docker and Podman backends only. · SANDBOX_SECURITY_OPT=Comma-separated container security options, e.g. no-new-privileges. Docker and Podman backends only. | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Symbolformate (Rohangabe) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Verbindungswege (Quellstruktur) | {"packages":[{"registryType":"pypi","identifier":"llm-sandbox","version":"0.3.43","runtimeHint":"uvx","transport":"stdio","environment":[{"name":"BACKEND","description":"Container backend to use. Must match the installed extra: mcp-docker, mcp-podman, or mcp-k8s.","required":false,"secret":false},{"name":"DOCKER_HOST","description":"Docker or Podman socket URL, e.g. unix:///var/run/docker.sock","required":false,"secret":false},{"name":"KUBECONFIG","description":"Path to kubeconfig file when BACKEND=kubernetes.","required":false,"secret":false},{"name":"NAMESPACE","description":"Kubernetes namespace used for sandbox pods when BACKEND=kubernetes.","required":false,"secret":false},{"name":"COMMIT_CONTAINER","description":"Commit the container after a run so installed libraries persist between sessions.","required":false,"secret":false},{"name":"KEEP_TEMPLATE","description":"Keep the base image after the session ends to avoid re-pulling it on the next run.","required":false,"secret":false},{"name":"SANDBOX_NETWORK_MODE","description":"Network mode for the sandbox container. Set to 'none' for hardened isolation. Docker and Podman backends only.","required":false,"secret":false},{"name":"SANDBOX_READ_ONLY","description":"Mount the sandbox root filesystem read-only. Recommended: true. Docker and Podman backends only.","required":false,"secret":false},{"name":"SANDBOX_CAP_DROP","description":"Comma-separated Linux capabilities to drop. Recommended: ALL. Docker and Podman backends only.","required":false,"secret":false},{"name":"SANDBOX_SECURITY_OPT","description":"Comma-separated container security options, e.g. no-new-privileges. Docker and Podman backends only.","required":false,"secret":false},{"name":"SANDBOX_MEMORY","description":"Memory limit for the sandbox container, e.g. 4g. Docker and Podman backends only.","required":false,"secret":false},{"name":"SANDBOX_CPUS","description":"Fractional CPU allocation for the sandbox container, e.g. 1.5. Docker and Podman backends only.","required":false,"secret":false}],"additional_arguments_declared":true}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | ## Verweise - Namensraum: [[namensraum/io-github-vndee|io.github.vndee]] --- - Registerseite: - Abgerufen am: 2026-10-10