LLM Sandbox — MCP Server 安装配置（官方 MCP Registry）

{
  "id": "io.github.vndee/llm-sandbox",
  "type": "mcp-server",
  "version": "0.3.43",
  "displayName": "LLM Sandbox",
  "description": "Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.",
  "repository": {
    "url": "https://github.com/vndee/llm-sandbox",
    "source": "github"
  },
  "homepage": "https://vndee.github.io/llm-sandbox/",
  "distribution": {
    "packages": [
      {
        "registryType": "pypi",
        "identifier": "llm-sandbox",
        "version": "0.3.43",
        "runtimeHint": "uvx",
        "transport": "stdio",
        "environmentVariables": [
          {
            "name": "BACKEND",
            "description": "Container backend to use. Must match the installed extra: mcp-docker, mcp-podman, or mcp-k8s."
          },
          {
            "name": "DOCKER_HOST",
            "description": "Docker or Podman socket URL, e.g. unix:///var/run/docker.sock"
          },
          {
            "name": "KUBECONFIG",
            "description": "Path to kubeconfig file when BACKEND=kubernetes."
          },
          {
            "name": "NAMESPACE",
            "description": "Kubernetes namespace used for sandbox pods when BACKEND=kubernetes."
          },
          {
            "name": "COMMIT_CONTAINER",
            "description": "Commit the container after a run so installed libraries persist between sessions."
          },
          {
            "name": "KEEP_TEMPLATE",
            "description": "Keep the base image after the session ends to avoid re-pulling it on the next run."
          },
          {
            "name": "SANDBOX_NETWORK_MODE",
            "description": "Network mode for the sandbox container. Set to 'none' for hardened isolation. Docker and Podman backends only."
          },
          {
            "name": "SANDBOX_READ_ONLY",
            "description": "Mount the sandbox root filesystem read-only. Recommended: true. Docker and Podman backends only."
          },
          {
            "name": "SANDBOX_CAP_DROP",
            "description": "Comma-separated Linux capabilities to drop. Recommended: ALL. Docker and Podman backends only."
          },
          {
            "name": "SANDBOX_SECURITY_OPT",
            "description": "Comma-separated container security options, e.g. no-new-privileges. Docker and Podman backends only."
          },
          {
            "name": "SANDBOX_MEMORY",
            "description": "Memory limit for the sandbox container, e.g. 4g. Docker and Podman backends only."
          },
          {
            "name": "SANDBOX_CPUS",
            "description": "Fractional CPU allocation for the sandbox container, e.g. 1.5. Docker and Podman backends only."
          }
        ]
      }
    ],
    "remotes": []
  },
  "dependencies": [],
  "installTargets": [
    "claude-code",
    "claude-desktop",
    "cursor",
    "vscode",
    "trae",
    "cherry-studio",
    "lingma",
    "windsurf",
    "cline",
    "workbuddy"
  ],
  "keywords": [],
  "provenance": {
    "origin": "official-mcp-registry",
    "originalId": "io.github.vndee/llm-sandbox",
    "originalUrl": "https://registry.modelcontextprotocol.io/v0.1/servers/io.github.vndee%2Fllm-sandbox/versions/latest",
    "isOfficial": true,
    "status": "active"
  }
}