run_code
Run a program once in a sandbox on a spare ce-net machine (no network, no shell, only its own...
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| files | No | ||
| public | No | ||
| command | Yes | ||
| timeout_s | No | ||
| result_path | No |
Run a program once in a sandbox on a spare ce-net machine (no network, no shell, only its own...
| Name | Required | Description | Default |
|---|---|---|---|
| files | No | ||
| public | No | ||
| command | Yes | ||
| timeout_s | No | ||
| result_path | No |
Changes observed during successful MCP inspections.
Input schema / properties / command / items / propertiesRemoved value: -nullInput schema / properties / command / propertiesRemoved value: -nullInput schema / properties / files / propertiesRemoved value: -nullInput schema / properties / public / propertiesRemoved value: -nullInput schema / properties / result_path / propertiesRemoved value: -nullInput schema / properties / timeout_s / propertiesRemoved value: -nullInput schema / properties / command / descriptionRemoved value: -"argv, e.g. [\"python3\", \"sim.py\"]; never a shell string"Input schema / properties / command / items / propertiesAdded value: +nullInput schema / properties / command / propertiesAdded value: +nullInput schema / properties / files / descriptionRemoved value: -"relative path -> text content, put in the job folder (source only, no binaries)"Input schema / properties / files / propertiesAdded value: +nullInput schema / properties / public / descriptionRemoved value: -"true lets any machine on the network run it, including ones that joined self-serve; leave false for work you would not show a stranger"Input schema / properties / public / propertiesAdded value: +nullInput schema / properties / result_path / descriptionRemoved value: -"file the job writes its answer to, default result.json; it comes back as output"Input schema / properties / result_path / propertiesAdded value: +nullInput schema / properties / timeout_s / descriptionRemoved value: -"seconds, default 120; the cap depends on your account's level (compute_backends)"Input schema / properties / timeout_s / propertiesAdded value: +nullDoes the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds useful sandbox constraints beyond the annotations: no network, no shell, one-time execution on a spare machine. These clarify the execution environment. However, it is truncated ('only its own...') and does not explain result retrieval, timeout behavior, or permission requirements.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is one incomplete sentence ending in an ellipsis. It is short but under-specified rather than concise, leaving critical information missing.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a code-execution tool with no output schema and five undocumented parameters, the description is far too thin. It states basic sandbox constraints but omits how inputs map to execution, how results are returned, and how this differs from related execution tools.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% for five parameters, including a nested files object, public flag, timeout, and result_path. The description does not mention any parameter or explain how to pass the command, files, or retrieve results. It fails to compensate for the schema gap.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb and resource: 'Run a program once in a sandbox on a spare ce-net machine.' An agent can infer this executes code in an isolated environment. However, it does not distinguish this from sibling tools like code_call, host_code, or compute_submit, and the description is truncated.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
There is no explicit guidance on when to use this tool versus alternatives such as code_call, compute_submit, or host_code. The phrase 'once' and sandbox constraints imply a one-off execution context, but the agent is left to infer selection criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Add one secure layer between your agents and this server.