LLM Sandbox
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| BACKEND | No | The container backend to use for the sandbox. One of 'docker' (default), 'podman', or 'kubernetes'. | |
| KUBECONFIG | No | The path to your kubeconfig file. Required when using the Kubernetes backend. | |
| DOCKER_HOST | No | The host to use for the Docker/Podman backend, e.g. 'unix:///var/run/docker.sock' or 'unix:///var/run/podman/podman.sock'. Required if not automatically available in your system. | |
| SANDBOX_CPUS | No | CPU limit for the sandbox, normalized to Linux-compatible CPU quota settings. | |
| SANDBOX_MEMORY | No | Memory limit for the sandbox, normalized to the backend-safe 'mem_limit' runtime config, e.g. '4g'. | |
| SANDBOX_CAP_DROP | No | Linux capabilities to drop for the sandbox container, e.g. 'ALL'. | |
| SANDBOX_CPU_COUNT | No | Number of CPUs for the sandbox, normalized to Linux-compatible CPU quota settings, e.g. '1'. | |
| SANDBOX_MEM_LIMIT | No | Memory limit for the sandbox runtime config, e.g. '512m'. | |
| SANDBOX_READ_ONLY | No | Runtime config to mount the sandbox container as read-only, e.g. 'true'. | |
| SANDBOX_PRIVILEGED | No | Whether to run the sandbox container in privileged mode, e.g. 'true'. Avoid unless explicitly needed. | |
| SANDBOX_NETWORK_MODE | No | Runtime config for the sandbox network mode (Docker, Podman, and Micromamba backends only). e.g. 'none' to disable egress. | |
| SANDBOX_SECURITY_OPT | No | Security options for the sandbox container, e.g. 'no-new-privileges:true'. |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
| experimental | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| execute_codeB | Execute code in a secure sandbox environment and automatic visualization capture. |
| get_supported_languagesB | Get the list of supported languages. |
| get_language_detailsC | Get the details of a language. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| language_details | Resource containing detailed information about supported languages. Returns: str: The details of the languages |
TDQS
Scored across 3 tools
The three tools have clearly distinct purposes: execute_code runs code, get_supported_languages lists languages, and get_language_details returns metadata for a specific language. There is no overlap that would cause misselection.
All tool names follow a consistent snake_case verb_noun pattern (execute_code, get_supported_languages, get_language_details). The convention is predictable and readable.
Three tools is slightly thin but appropriate for a focused sandbox execution server. Each tool earns its place, though two are lightweight metadata helpers around a single action.
The surface covers execution and language introspection well. Minor gaps exist, such as file input/output management or execution status/cancellation, but core workflows are supported.