Sandbox Runtime
Official@anthropic-ai/sandbox-runtime · by anthropic-experimental
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
No known CVEs
Apache-2.0 license
Actively maintained
Last commit 5d ago
Works with most clients
Transport: stdio, sse
0 tools
Grade F
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"filesystem": {
"args": [
"-y",
"@modelcontextprotocol/server-filesystem"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/sandbox-runtime)
Read me
What Sandbox Runtime does
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@anthropic-ai/sandbox-runtime' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
63/100across 5 weighted dimensions
0255075100
22
17
14
10
−37
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev1 fixed
CVE-2025-66479medium · fixedCVSS 4
Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing
Due to a bug in sandboxing logic, `sandbox-runtime` did not properly enforce a network sandbox if the sandbox policy did not configure any allowed domains. This could allow sandboxed code to make network requests outside of the sandbox. A patch for this was released in v0.0.16. Thank you to https://github.com/bendrucker for reporting this issue!
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Sandbox Runtime safe to use?
- Sandbox Runtime has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
- How do I install Sandbox Runtime?
- Sandbox Runtime supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What AI clients work with Sandbox Runtime?
- Sandbox Runtime is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
- Is Sandbox Runtime actively maintained?
- Sandbox Runtime is actively maintained — last commit was 5 days ago. It has 4,073 GitHub stars.
Related
Similar servers
Others in security / developer-tools
X
XcodeBuildMCP97XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.
5.6k 1
Supabase MCP Server97Manage Supabase projects — databases, auth, storage, and edge functions
2.7k 4
XcodeBuildMCP97A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.
5.6k 2
G
Mcp Gitlab96MCP server for using the GitLab API
1.5k 12
MCP Security Weekly
Get CVE alerts and security updates for Sandbox Runtime and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.