Best MCP servers for code execution and sandboxes
We found 43 MCP servers for code execution and sandboxes in the catalog; these are the 15 that rank highest. The order comes from our rank, which weighs adoption, freshness, documentation and publisher identity. Nobody can pay for a place on this list. LLM Sandbox, Superserve and Tidewave Phoenix lead it. Krova and AgentSpace are published by the company that makes them. LLM Sandbox has the most GitHub stars here (1,137). 14 of the 15 had activity in the last 30 days. Remote servers need no local install; local ones run on your machine and can reach local files. Each entry lists why it made the list and links to its install page.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
Top 15 of 43
- 1LLM Sandbox
vndee
Securely run LLM-generated code in isolated containers across 7 languages and 3 container backends.
- Most GitHub stars here (1,137)
- Most weekly downloads here (101.7K)
- Active in the last 30 days
★ 1.1K↓ 101.7K/wkLast active Oct 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 2Superserve
superserve-ai
MCP server for Superserve sandboxes: create, exec, and manage Firecracker microVMs
- Runs locally or as a remote server
- Active in the last 30 days
- Open source (Apache-2.0)
★ 467Last active Oct 23, 2026Local (stdio), Remote (HTTP)Claude Code, VS Code, Codex, Cursor +2
AFreshness: A–Security: not graded yet - 3Tidewave Phoenix
tidewave-ai
Runtime-level MCP server for Phoenix development: run code, read logs, query the DB, read docs.
- Active in the last 30 days
- Open source (Apache-2.0)
★ 858Last active Oct 23, 2026
AFreshness: A–Security: not graded yet - 4mcp-v8
r33drichards
Run JavaScript and TypeScript in sandboxed V8 isolates with policy-controlled host capabilities.
- Active in the last 30 days
- Open source (AGPL-3.0)
★ 62Last active Oct 20, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 5Vaara
vaaraio
Accountable autonomy proxy: gating, tamper-evident audit, time anchor for every action
- Active in the last 30 days
- Open source (AGPL-3.0)
★ 15↓ 1.4K/wkLast active Oct 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 6Ironclaw
IronSecCo
Sandboxed shell exec for MCP clients: run untrusted agent commands in a gVisor container.
- Active in the last 30 days
- Open source (AGPL-3.0)
★ 19Last active Oct 24, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 7Ephemora Cell MCP — WASM Sandbox
MichaelS1011
WASM sandbox for MCP tools.
- Active in the last 30 days
★ 48↓ 55/wkLast active Oct 15, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 8Tidewave Rails
tidewave-ai
Runtime-level MCP server for Rails development: run code, read logs, query the DB, read docs.
- Open source (Apache-2.0)
★ 476Last active Sep 9, 2026
BFreshness: B–Security: not graded yet - 9Sabline
gowrishankar-infra
Run code an AI wrote without handing it everything you can reach.
- Active in the last 30 days
- Open source (MIT)
★ 4↓ 132/wkLast active Oct 13, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 10Krova
krova.cloudOfficial
Provision and manage Krova Cloud Cubes — Firecracker microVMs with root access and no public IP.
- Published by the vendor
- Active in the last 30 days
- Open source (MIT)
↓ 117/wkLast active Oct 7, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 11Tenki Sandbox MCP
LuxorLabs
Disposable microVM sandboxes for AI agents: run code, read/write files, git, preview URLs.
- Active in the last 30 days
- Open source (MIT)
Last active Oct 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 12
No-KYC VPS + per-second code sandboxes AI agents run over MCP — 75 tools, SDK, pay BTC/XMR/USDC/USDT
- Remote server, no local install
- Active in the last 30 days
- Open source (MIT)
Last active Oct 20, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet - 13
AgentSpaceagentspace.com.brOfficial
Give your agent a persistent workspace: files, a code sandbox and a public URL to publish to.
- Published by the vendor
- Remote server, no local install
- Active in the last 30 days
Last active Oct 3, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet - 14Sandboxd Code Run
saastemly.com
Hosted one-shot code execution: send a snippet plus optional files, get stdout, stderr, exit...
- Remote server, no local install
- Active in the last 30 days
Last active Oct 3, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet - 15Agentsandboxes
pooriaarab
A neutral index of cloud sandboxes for AI agents.
- Remote server, no local install
- Active in the last 30 days
Last active Oct 21, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet