Alternatives to LLM Sandbox
LLM Sandbox is a MCP server by vndee: Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends. If it doesn't fit your setup, these 12 MCP servers cover similar ground. They are ordered by how closely they match LLM Sandbox and by our rank, which weighs adoption, freshness and documentation; money never changes the order. Ephemora Cell MCP — WASM Sandbox leads the list (active in the last 30 days). 5 offer a remote endpoint, so there is nothing to install locally. Each entry shows data reasons to switch, and you can open a side-by-side comparison with LLM Sandbox.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
You're replacing
LLM Sandbox
Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.
12 alternatives
Ordered by how closely each matches LLM Sandbox (shared product, category or stated alternative) and by rank.
- 1Ephemora Cell MCP — WASM Sandbox
MichaelS1011
WASM sandbox for MCP tools.
- Active in the last 30 days
★ 48↓ 55/wkLast active Oct 15, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 2
No-KYC VPS + per-second code sandboxes AI agents run over MCP — 75 tools, SDK, pay BTC/XMR/USDC/USDT
- Remote server, no local install
Last active Oct 20, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet - 3Mathematical Code Execution
saifs.ai
Run sandboxed Python for calculations and PDFs; no other languages, installs or network.
- Remote server, no local install
Last active Oct 22, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet - 4Code Interpreter Agent by Nova (CIVAI)
nova.civai.co
I do everything related to coding and execution tasks
- Remote server, no local install
Last active Sep 21, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
BFreshness: B–Security: not graded yet - 5E2b
mcparmory.com
Create and manage secure sandboxes for running AI agent code
- Open source (MIT)
★ 32↓ 155/wkLast active May 12, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
CFreshness: C–Security: not graded yet - 6Vaara
vaaraio
Accountable autonomy proxy: gating, tamper-evident audit, time anchor for every action
- Most weekly downloads here (1.4K)
- Active in the last 30 days
★ 15↓ 1.4K/wkLast active Oct 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 7Code Sandbox API
Br0ski777
Execute Python, JavaScript, SQL code in a sandbox.
- Remote server, no local install
Last active Sep 2, 2026Remote (SSE)Claude Code, VS Code, Cursor, Windsurf
BFreshness: B–Security: not graded yet - 8Superserve
superserve-ai
MCP server for Superserve sandboxes: create, exec, and manage Firecracker microVMs
- Remote server, no local install
★ 467Last active Oct 23, 2026Local (stdio), Remote (HTTP)Claude Code, VS Code, Codex, Cursor +2
AFreshness: A–Security: not graded yet - 9Tidewave Phoenix
tidewave-ai
Runtime-level MCP server for Phoenix development: run code, read logs, query the DB, read docs.
- Most GitHub stars here (858)
- Active in the last 30 days
★ 858Last active Oct 23, 2026
AFreshness: A–Security: not graded yet - 10mcp-v8
r33drichards
Run JavaScript and TypeScript in sandboxed V8 isolates with policy-controlled host capabilities.
- Active in the last 30 days
- Open source (AGPL-3.0)
★ 62Last active Oct 20, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 11Ironclaw
IronSecCo
Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.
- Active in the last 30 days
- Open source (AGPL-3.0)
★ 19Last active Oct 24, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 12Tidewave Rails
tidewave-ai
Runtime-level MCP server for Rails development: run code, read logs, query the DB, read docs.
- Open source (Apache-2.0)
★ 476Last active Sep 9, 2026
BFreshness: B–Security: not graded yet