Which integrations are available for this server?

Enables isolated command execution inside Docker containers via the execute_sandbox tool, with configurable images, mounts, and security restrictions.

How do I use cmd-exec-mcp?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@cmd-exec-mcp run 'ls -la' in /tmp" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

cmd-exec-mcp

by YC-CLT

Overview Schema Related Servers Score Discussions

Python

Hybrid

cmd-exec-mcp

English | 中文

English

A simple command execution MCP server supporting local execution, Docker/OpenSandbox sandbox isolation, and SSH remote execution.

Features

Local (execute_local): Execute commands on the host machine, cwd required
Sandbox (execute_sandbox): Isolated execution in Docker containers or OpenSandbox, ephemeral
Remote (execute_remote): Execute commands via SSH on remote servers, supports standard/custom dual-mode config
Security mode: restricted (whitelist + blacklist) / full mode
Sequential / parallel execution
Timeout control
Logging

Installation

git clone https://github.com/<user>/cmd-exec-mcp.git
cd cmd-exec-mcp
uv sync

MCP Client Configuration

{
  "mcpServers": {
    "cmd-exec-mcp": {
      "command": "uv",
      "args": ["run", "--directory", "D:\\your_path\\cmd-exec-mcp", "main.py"]
    }
  }
}

Configuration

Edit config.py:

Config	Default	Description
`SECURITY_MODE`	`"restricted"`	Security mode: `"restricted"` \| `"full"`
`COMMAND_LIST_MODE`	`"blacklist"`	List mode: `"whitelist"` \| `"blacklist"`
`COMMAND_WHITELIST`	`["ls","dir","git",...]`	Whitelist commands
`COMMAND_BLACKLIST`	`["rm","del","shutdown",...]`	Blacklist commands
`FORCE_SHELL`	`None`	Force shell: `"pwsh"`\|`"cmd"`\|`"bash"`\|`"wsl"`
`WSL_DISTRO`	`"kali-linux"`	WSL distro name (when `shell="wsl"`)
`WSL_USER`	`"kali"`	WSL username (when `shell="wsl"`)
`SANDBOX_BACKEND`	`"opensandbox"`	Sandbox backend: `"docker"` \| `"opensandbox"`
`SANDBOX_SECURITY_MODE`	`"full"`	Docker sandbox security mode
`SANDBOX_COMMAND_LIST_MODE`	`"blacklist"`	Docker sandbox list mode
`SANDBOX_COMMAND_BLACKLIST`	`["docker","mount","fdisk"]`	Docker sandbox blacklist
`SANDBOX_COMMAND_WHITELIST`	`[]`	Docker sandbox whitelist
`SANDBOX_DEFAULT_IMAGE`	`"opensandbox/code-interpreter:v1.1.0"`	Docker sandbox default image
`SANDBOX_DEFAULT_MOUNT`	`None`	Mount directory (`"host:container"`)
`SANDBOX_DOCKER_PREFIX`	`"export PIP_INDEX_URL=..."`	Docker sandbox startup prefix (mirrors, etc.)
`SANDBOX_OPEN_TEMPLATE`	`"opensandbox/code-interpreter:v1.1.0"`	OpenSandbox template image
`SANDBOX_OPEN_ENTRYPOINT`	`["/opt/code-interpreter/code-interpreter.sh"]`	OpenSandbox entrypoint script
`SANDBOX_OPEN_RUNTIME_ENV`	`{"PYTHON_VERSION":"3.11",...}`	OpenSandbox runtime versions + mirrors
`SANDBOX_OPEN_SERVER_HOST`	`"localhost"`	OpenSandbox Server host
`SANDBOX_OPEN_SERVER_PORT`	`8080`	OpenSandbox Server port
`SANDBOX_OPEN_API_KEY`	`"cmd-exec-mcp-dev"`	OpenSandbox API Key (required for production)
`DEFAULT_TIMEOUT`	`30`	Timeout in seconds (-1 for unlimited)
`OUTPUT_TRUNCATE_LENGTH`	`2000`	stdout truncation length when using `output_file`
`RESULT_FIELDS`	`{"stdout":True,...}`	Return field toggles
`SSH_CONFIG_MODE`	`"standard"`	SSH config mode: `"standard"` \| `"custom"`
`SSH_HOST_NAME`	—	SSH Host alias for standard mode
`SSH_PERSISTENT`	`True`	Persistent SSH connection
`SSH_CONNECTION_TIMEOUT`	`10`	SSH connection timeout in seconds
`LOG_FILE`	`"log.txt"`	Log file path
`LOG_LEVEL`	`"INFO"`	Log level

OpenSandbox Prerequisites

To use the OpenSandbox backend (SANDBOX_BACKEND = "opensandbox"):

Prerequisite: Docker Desktop installed and running
Install the server (global):
```
uv tool install opensandbox-server
```

Deploy config:

copy docs\opensandbox\.sandbox.toml %USERPROFILE%\.sandbox.toml

Switch backend: config.py → SANDBOX_BACKEND = "opensandbox"
API Key: can be arbitrary for local dev, but don't leave it empty or it will block for manual confirmation; set SANDBOX_OPEN_API_KEY in production

opensandbox-server is started automatically on first execute_sandbox call and cleaned up via atexit.

SSH Remote Execution Prerequisites

Standard mode: configure ~/.ssh/config and set SSH_HOST_NAME to the Host alias

Custom mode: create .env in the project root, referencing .env.example:

SSH_HOST=192.168.1.100
SSH_PORT=22
SSH_USER=root
SSH_KEY_PATH=~/.ssh/id_rsa
SSH_PASSWORD=
SSH_KNOWN_HOSTS=true

Tools

execute_local

Execute a command on the host machine.

{
  "command": "echo hello",
  "parallel": false,
  "timeout": 30,
  "cwd": "/tmp",
  "env": { "KEY": "value" },
  "fields": { "stdout": true, "stderr": false }
}

Param	Type	Default	Description
`command`	str	required	Command, use `&&` for parallel mode
`cwd`	str	required	Working directory
`parallel`	bool	false	Run commands in parallel
`timeout`	int	30	Timeout in seconds, -1 for unlimited
`env`	dict	null	Environment variables
`fields`	dict	null	Return field filter
`shell`	str	null	Override shell: `"pwsh"`\|`"cmd"`\|`"bash"`\|`"wsl"`
`output_file`	str	""	Write full stdout to disk, return truncated preview

execute_sandbox

Execute a command in a sandbox (Docker/OpenSandbox, determined by SANDBOX_BACKEND).

{
  "command": "echo hello",
  "parallel": false,
  "timeout": 30,
  "env": { "KEY": "value" },
  "fields": { "stdout": true, "stderr": false }
}

Param	Type	Default	Description
`command`	str	required	Command
`parallel`	bool	false	Run in parallel
`timeout`	int	30	Timeout in seconds
`env`	dict	null	Environment variables
`fields`	dict	null	Return field filter
`output_file`	str	""	Write full stdout to disk, return truncated preview

execute_remote

Execute a command on a remote server via SSH. See SSH prerequisites above.

{
  "command": "ls -la",
  "parallel": false,
  "timeout": 30,
  "env": { "KEY": "value" },
  "fields": { "stdout": true, "stderr": false }
}

Param	Type	Default	Description
`command`	str	required	Command
`parallel`	bool	false	Run in parallel
`timeout`	int	30	Timeout in seconds
`env`	dict	null	Environment variables
`fields`	dict	null	Return field filter
`output_file`	str	""	Write full stdout to disk, return truncated preview

Testing

uv run pytest tests/ -v

Logging

Logs are written to log.txt in the project root, format:

2026-07-30 12:00:00 [INFO] local: execute: echo hello
2026-07-30 12:00:00 [INFO] local: exit_code=0 duration=0.012

License

MIT

Related MCP server: dynamic-mcp

中文

一个简单的命令执行 MCP，支持本地执行、纯 Docker/OpenSandbox 沙箱隔离执行和 SSH 远程执行。

功能

本地执行 (execute_local): 在宿主机执行命令，cwd 必填
沙箱执行 (execute_sandbox): 在 Docker 容器或 OpenSandbox 沙箱中隔离执行，用完即焚
远程执行 (execute_remote): 通过 SSH 在远程服务器执行命令，支持 standard/custom 双模式配置
安全模式: 受限模式（白名单+黑名单）/ 完全模式
单步/并行执行
超时控制
日志记录

安装

git clone https://github.com/<user>/cmd-exec-mcp.git
cd cmd-exec-mcp
uv sync

MCP 客户端配置

{
  "mcpServers": {
    "cmd-exec-mcp": {
      "command": "uv",
      "args": ["run", "--directory", "D:\\your_path\\cmd-exec-mcp", "main.py"]
    }
  }
}

配置

编辑 config.py:

配置	默认值	说明
`SECURITY_MODE`	`"restricted"`	安全模式
`COMMAND_LIST_MODE`	`"blacklist"`	列表模式: `"whitelist"` \| `"blacklist"`
`COMMAND_WHITELIST`	`["ls","dir","git",...]`	白名单
`COMMAND_BLACKLIST`	`["rm","del","shutdown",...]`	黑名单
`FORCE_SHELL`	`None`	强制指定 Shell: `"pwsh"`\|`"cmd"`\|`"bash"`\|`"wsl"`
`WSL_DISTRO`	`"kali-linux"`	WSL 发行版名（`shell="wsl"` 时生效）
`WSL_USER`	`"kali"`	WSL 用户名（`shell="wsl"` 时生效）
`SANDBOX_BACKEND`	`"opensandbox"`	沙箱后端: `"docker"` \| `"opensandbox"`
`SANDBOX_SECURITY_MODE`	`"full"`	纯docker沙箱安全模式
`SANDBOX_COMMAND_LIST_MODE`	`"blacklist"`	纯docker沙箱列表模式
`SANDBOX_COMMAND_BLACKLIST`	`["docker","mount","fdisk"]`	纯docker沙箱黑名单
`SANDBOX_COMMAND_WHITELIST`	`[]`	纯docker沙箱白名单
`SANDBOX_DEFAULT_IMAGE`	`"opensandbox/code-interpreter:v1.1.0"`	纯docker沙箱默认镜像
`SANDBOX_DEFAULT_MOUNT`	`None`	挂载目录（`"host:container"`）
`SANDBOX_DOCKER_PREFIX`	`"export PIP_INDEX_URL=..."`	纯docker启动命令前缀（换源等）
`SANDBOX_OPEN_TEMPLATE`	`"opensandbox/code-interpreter:v1.1.0"`	OpenSandbox 模板镜像
`SANDBOX_OPEN_ENTRYPOINT`	`["/opt/code-interpreter/code-interpreter.sh"]`	OpenSandbox 入口脚本
`SANDBOX_OPEN_RUNTIME_ENV`	`{"PYTHON_VERSION":"3.11",...}`	OpenSandbox 运行时版本+镜像源
`SANDBOX_OPEN_SERVER_HOST`	`"localhost"`	OpenSandbox Server 地址
`SANDBOX_OPEN_SERVER_PORT`	`8080`	OpenSandbox Server 端口
`SANDBOX_OPEN_API_KEY`	`"cmd-exec-mcp-dev"`	OpenSandbox API Key（生产必填）
`DEFAULT_TIMEOUT`	`30`	超时秒数（-1 无限制）
`OUTPUT_TRUNCATE_LENGTH`	`2000`	输出落盘时 stdout 截断长度
`RESULT_FIELDS`	`{"stdout":True,...}`	返回字段开关
`SSH_CONFIG_MODE`	`"standard"`	SSH 配置模式: `"standard"` \| `"custom"`
`SSH_HOST_NAME`	—	standard 模式 SSH Host 别名
`SSH_PERSISTENT`	`True`	SSH 长连接复用
`SSH_CONNECTION_TIMEOUT`	`10`	SSH 连接超时秒数
`LOG_FILE`	`"log.txt"`	日志文件路径
`LOG_LEVEL`	`"INFO"`	日志级别

OpenSandbox 前置条件

如需使用 OpenSandbox 后端 (SANDBOX_BACKEND = "opensandbox")：

前置依赖：Docker Desktop 已安装运行
安装 Server（全局）：
```
uv tool install opensandbox-server
```

部署配置：

copy docs\opensandbox\.sandbox.toml %USERPROFILE%\.sandbox.toml

切换后端：config.py → SANDBOX_BACKEND = "opensandbox"
API Key：本地开发随意，但不建议留空，否则会阻塞让你手动确认；生产环境设 SANDBOX_OPEN_API_KEY

首次调用 execute_sandbox 时自动拉起 opensandbox-server，atexit 自动清理。

SSH 远程执行前置条件

standard 模式：已配置 ~/.ssh/config，设置 SSH_HOST_NAME 为 Host 别名

custom 模式：项目根目录创建 .env，参考 .env.example:

SSH_HOST=192.168.1.100
SSH_PORT=22
SSH_USER=root
SSH_KEY_PATH=~/.ssh/id_rsa
SSH_PASSWORD=
SSH_KNOWN_HOSTS=true

工具

execute_local

在宿主机执行命令。

{
  "command": "echo hello",
  "parallel": false,
  "timeout": 30,
  "cwd": "/tmp",
  "env": { "KEY": "value" },
  "fields": { "stdout": true, "stderr": false }
}

参数	类型	默认	说明
`command`	str	必填	命令，并行模式用 `&&` 分隔
`cwd`	str	必填	工作目录
`parallel`	bool	false	是否并行执行
`timeout`	int	30	超时秒数，-1 无限制
`env`	dict	null	环境变量
`fields`	dict	null	返回字段过滤
`shell`	str	null	指定 Shell: `"pwsh"`\|`"cmd"`\|`"bash"`\|`"wsl"`
`output_file`	str	""	输出过长时落盘，返回截断预览

execute_sandbox

在沙箱中执行命令（Docker/OpenSandbox，由 SANDBOX_BACKEND 决定）。

{
  "command": "echo hello",
  "parallel": false,
  "timeout": 30,
  "env": { "KEY": "value" },
  "fields": { "stdout": true, "stderr": false }
}

参数	类型	默认	说明
`command`	str	必填	命令
`parallel`	bool	false	是否并行
`timeout`	int	30	超时秒数
`env`	dict	null	环境变量
`fields`	dict	null	返回字段过滤
`output_file`	str	""	输出过长时落盘，返回截断预览

execute_remote

通过 SSH 在远程服务器执行命令，配置见 SSH 前置条件。

{
  "command": "ls -la",
  "parallel": false,
  "timeout": 30,
  "env": { "KEY": "value" },
  "fields": { "stdout": true, "stderr": false }
}

参数	类型	默认	说明
`command`	str	必填	命令
`parallel`	bool	false	是否并行
`timeout`	int	30	超时秒数
`env`	dict	null	环境变量
`fields`	dict	null	返回字段过滤
`output_file`	str	""	输出过长时落盘，返回截断预览

测试

uv run pytest tests/ -v

日志

日志写入项目根目录 log.txt，格式:

2026-07-30 12:00:00 [INFO] local: execute: echo hello
2026-07-30 12:00:00 [INFO] local: exit_code=0 duration=0.012

协议

MIT

This server cannot be installed

license - permissive license

quality - not tested

maintenance

How are these scores calculated?

Maintenance

–Maintainers

–Response time

–Release cycle

–Releases (12mo)

Commit activity

Resources

GitHub Repository

Need Help?

Related Servers

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Servers

Kilntainersofficial
Shell Access Virtualization Code Execution
Kiln-AI
A
license
A
quality
F
maintenance
MCP server to give every agent an ephemeral Linux sandboxes for executing shell commands.
Last updated 2026-03-03
1
45
MIT
dynamic-mcp
Code Execution Developer Tools
mcpland
A
license
B
quality
B
maintenance
Dynamic MCP server for Node.js enabling runtime tool creation, management, and execution in isolated sandboxes (Docker or Node).
Last updated 2026-03-08
8
31
1
MIT
CommandBridge MCP
Shell Access Command Line
HsinPu
F
license
A
quality
B
maintenance
Cross-platform MCP server for policy-controlled command execution on Linux and Windows, with no SSH dependency.
Last updated 2026-07-29
3
mcp-exec
Code Execution Command Line
inhuman
A
license
-
quality
B
maintenance
MCP server that executes caller-supplied Python code in a network-isolated, locked-down sandbox and returns stdout/stderr/exit code. Supports stdio, HTTP, and SSE transports with optional auth.
Last updated 2026-07-20
1
MIT

View all related MCP servers

Related MCP Connectors

Kody
Personal assistant MCP server with search, execute, packages, jobs, secrets, and integrations.
server
An MCP server that let you interact with Cycloid.io Internal Development Portal and Platform
neverinfamous-memory-journal-mcp
A MCP server built for developers enabling Git based project management with project and personal…

View all MCP Connectors

Latest Blog Posts

Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)
By Om-Shree-0709 on July 25, 2026.
mcp
Agent Identity
OAuth 2.1
Your AI Chatbot Just Exposed Your CEO's Salary to an Intern
By Om-Shree-0709 on July 2, 2026.
Agent Identity
MCP Security
OAuth Delegation
Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)
By Om-Shree-0709 on June 30, 2026.
Agentic Ai
Prompt Injection
WebAssembly

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/YC-CLT/cmd-exec-mcp'

If you have feedback or need assistance with the MCP directory API, please join our Discord server

cmd-exec-mcp

English

Features

Installation

MCP Client Configuration

Configuration

OpenSandbox Prerequisites

SSH Remote Execution Prerequisites

Tools

execute_local

execute_sandbox

execute_remote

Testing

Logging

License

中文

功能

安装

MCP 客户端配置

配置

OpenSandbox 前置条件

SSH 远程执行前置条件

工具

execute_local

execute_sandbox

execute_remote

测试

日志

协议

Maintenance

Resources

Looking for Admin?

Related MCP Servers

Kilntainersofficial

dynamic-mcp

CommandBridge MCP

mcp-exec

Related MCP Connectors

Latest Blog Posts

MCP directory API