mcp-coderunner-app
Allows running a provided script inside a resource-limited Docker container built from a Dockerfile, with containers isolated using --network none for safe execution and benchmarking.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
π mcp-coderunner-app
An MCP server that takes a Dockerfile and a script, and runs the script in a resource-limited container. Built to try out Ractor behavior and run benchmarks without dirtying the machine I work on.
VPS (Rails) β authentication, authorization, the MCP endpoint, the review UI
Home VM (worker) β polls outbound-only and drives docker
Nothing listens on the home side. Job containers always run with --network none.
Every Dockerfile is reviewed by a human before anything runs on it.
This is a personal setup, run by one person. The design lives in
.claude/plans/ruby-exec-mcp-design.md, which is not in git.
app/ Rails: models, controllers, MCP tools, /admin
lib/protocol/ DTOs and constants shared by Rails and the worker (stdlib only)
worker/ the side that drives docker (stdlib only; never loads Rails)
bin/worker the long-running process on the VM
deploy/ systemd units and an example CaddyfileDevelopment
bin/setup # install dependencies, db:prepare, start the dev server
bin/dev # web + js + worker (the worker's token is issued on first run)
bin/ci # lint, security, and the full test suite
# The worker does not load Rails. Run it with plain ruby.
ruby -Ilib -I. -e 'require "worker/runner"'
ruby -Ilib -I. worker/test/policy_test.rb
# The end-to-end test that actually drives docker (slow)
MCP_CODERUNNER_APP_E2E=1 ruby -Ilib -I. worker/test/e2e_test.rbPoint an MCP client at http://localhost:3000/mcp over Streamable HTTP. Issue the
access token from /admin after signing in β in development, /login also offers a
door that skips GitHub (dev lands as an admin).
Related MCP server: mcp-sandbox
Operating it
docs/deployment.md β the VPS: Kamal, ghcr.io, opkssh, the secrets CI needs, and what the failures mean
docs/worker-setup.md β the VM, from a bare machine to a running worker (ζ₯ζ¬θͺ)
License
MIT License (LICENSE)
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelogβ¦
This server cannot be deployed
Maintenance
Related MCP Connectors
Run AI agent tasks in isolated sandboxes with a cost cap, saved workflows and scoped connections.
Run Python code in a secure sandbox without local setup. Declare inline dependencies and execute sβ¦
Hosted Python sandbox for package runtime verification: pip install and usable-import evidence.
Execute code in 8 languages (Python, JS, TS, Go, Java, C++, C, Bash) in gVisor sandboxes.
Related MCP Servers
- FlicenseAqualityDmaintenanceEnables running arbitrary JavaScript code in isolated Docker containers with on-demand npm dependency installation, allowing for ephemeral script execution and long-running services with controlled resource limits.7111 npm4-
- AlicenseNot gradedqualityCmaintenanceExecute scientific scripts (R, Python, GMT, LaTeX, Octave, Julia, etc.) in isolated, disposable containers with no host filesystem access.1Apache 2.0
- FlicenseNot gradedqualityDmaintenanceEnables secure execution of bash, Python, and Node.js code in isolated Firecracker microVMs with configurable timeouts and no network access.-
- AlicenseNot gradedqualityCmaintenanceEnables secure execution of Python scripts in isolated Docker containers via MCP, with resource limits, package allowlisting, read-only filesystem, and artifact return.MIT