com.sandboxerPublished by sandboxer.comOfficial publisherv0.2.0Updated Oct 29, 2026
Cloud Linux VMs for your agent: run code, Docker, files and HTTPS previews in a Sandboxer microVM.
Sandboxer's hosted MCP server (sandboxer.com), published by sandboxer.com; OAuth sign-in or API key required; Streamable HTTP; 18 tools.
No AI overview yet: these facts come from the registry entry and the server itself.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/com.sandboxer%2Fmcp/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.
{
"mcpServers": {
"sandboxer": {
"type": "http",
"url": "https://sandboxer.com/mcp"
}
}
}Create sandbox
Create a cloud sandbox (an Ubuntu microVM with root, Docker, git, Node and Python) and wait until it is ready. Returns its id and URL; later calls use it by default. Start from a named snapshot with from (a name, or a versioned name for its newest version) or fromLabels (the newest snapshot with all those labels).
envfromnametypenoEnvlabelsfromLabelsttlSecondsidleStopMinutesList sandboxes
List your sandboxes with their state, URL and labels.
statelabelsGet sandbox
Show one sandbox: state, URL, when it stops automatically, labels and stored bytes.
sandboxIdRun command
Run a shell command (bash -c) in the sandbox. By default it waits and returns stdout, stderr and the exit code (timeoutSeconds, default 120, max 600). With detached: true it starts the command in the background and returns its processId at once: read its output and exit code with command_status, stop it with kill_command. Use detached for anything long (builds, test suites, servers).
cwdenvcommandrequireddetachedsandboxIdtimeoutSecondsCommand status
Status of a detached command: running or its exit code, and its output. Pass the stdoutOffset/stderrOffset from the previous call to get only new output.
processIdrequiredsandboxIdstderrOffsetstdoutOffsetKill command
Stop a detached command.
processIdrequiredsandboxIdRead file
Read a file from the sandbox (up to 5 MiB).
pathrequiredencodingsandboxIdWrite file
Create or overwrite a file in the sandbox (up to 5 MiB). Parent directories are created.
pathrequiredcontentrequiredencodingsandboxIdHost port
Serve a port of the sandbox on a stable public HTTPS URL. The URL carries an access token unless public is true. Start the service first, listening on 0.0.0.0 (or set localhost).
portrequiredtitlepubliclocalhostsandboxIdStop sandbox
Snapshot the sandbox (memory included) and stop billing. Files, installed packages and running processes are kept; resume_sandbox brings it back.
sandboxIdResume sandbox
Resume a stopped sandbox from its snapshot and wait until it is ready. Its memory (running processes) is restored when a machine of its CPU type is free within 2 minutes; otherwise it boots from disk (files intact) and the result says so. requireMemory: true waits up to 30 minutes for its memory instead and fails rather than boot from disk.
sandboxIdrequireMemoryExtend sandbox
Set when the sandbox stops: ttlSeconds from now (0 never), and/or idleStopMinutes (pause after that long without activity, waking on use; 0 never).
sandboxIdttlSecondsidleStopMinutesRename sandbox
Change the sandbox's display name.
namerequiredsandboxIdLabel sandbox
Replace the sandbox's labels ({} clears them).
labelsrequiredsandboxIdDelete sandbox
Delete a sandbox permanently: its disk, memory and automatic snapshots go (named snapshots saved from it stay). sandboxId is required: there is no default and no wildcard.
sandboxIdrequiredSave snapshot
Save the sandbox as a named snapshot to create new sandboxes from, and wait until it is saved. With versioned: true each save is a new version (<name>-v<N>); ifLatest saves only if the newest version is still that number (safe concurrent saves); keep deletes all but the newest N versions.
keepnamerequiredlabelsifLatestsandboxIdversionedList snapshots
List your named snapshots: name, version, labels, created time, stored bytes (what counts toward your storage) and disk size (logical).
namelabelsDelete snapshot
Delete one named snapshot (one version, e.g. ci-base-v3). name is required: there is no wildcard.
namerequired75% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.
Declare a license in the repository or the registry entry.