Sandbox Runtime

Name: Sandbox Runtime
Author: anthropic-experimental

Official

@anthropic-ai/sandbox-runtime · by anthropic-experimental

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

5.1k 294.9k/wk GitHub npm

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 1d ago

Works with most clients

Transport: stdio, sse

0 tools

Grade F

MCPpedia last refreshed this data 20h ago

Edit this pageView history

Sandbox Runtime is an MCP server that a lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 66/100 on MCPpedia's security, maintenance and efficiency rubric.

Security Developer Tools

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "filesystem": {
      "args": [
        "-y",
        "@modelcontextprotocol/server-filesystem"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/sandbox-runtime)](https://mcppedia.org/s/sandbox-runtime)

Read me

What Sandbox Runtime does

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@anthropic-ai/sandbox-runtime' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

66/100across 5 weighted dimensions

How we score →

0255075100

−34

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2025-66479low · fixed

Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing

Due to a bug in sandboxing logic, `sandbox-runtime` did not properly enforce a network sandbox if the sandbox policy did not configure any allowed domains. This could allow sandboxed code to make network requests outside of the sandbox. A patch for this was released in v0.0.16. Thank you to https://github.com/bendrucker for reporting this issue!

Affected: >= 0Fixed in 0.0.16source →

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Sandbox Runtime safe to use?: Sandbox Runtime has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install Sandbox Runtime?: Sandbox Runtime supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What AI clients work with Sandbox Runtime?: Sandbox Runtime is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is Sandbox Runtime actively maintained?: Sandbox Runtime is actively maintained — last commit was 1 day ago. It has 5,066 GitHub stars.

Similar servers

Others in security / developer-tools

View all →

Context797

Context7 Platform -- Up-to-date code documentation for LLMs and AI code editors

61.2k 2

Mcp Gitlab96

MCP server for using the GitLab API

1.9k 12

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

2.9k 4

Chrome Devtools Mcp96

Chrome DevTools for coding agents

49.7k 10

MCP Security Weekly

Get CVE alerts and security updates for Sandbox Runtime and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Frequently Asked Questions

Is Sandbox Runtime safe to use?

Sandbox Runtime has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.

How do I install Sandbox Runtime?

Sandbox Runtime supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What AI clients work with Sandbox Runtime?

Sandbox Runtime is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is Sandbox Runtime actively maintained?

Sandbox Runtime is actively maintained — last commit was 1 day ago. It has 5,066 GitHub stars.