"Code Execution" matching MCP servers:

Provides a sandboxed Docker environment for executing Python code against API endpoints, exposing tools for discovery, inspection, execution, and reuse.

Enables AI agents to execute terminal commands and Python code on the host system with session management and smart output handling, leveraging Agent Zero's proven implementation.

Provides a secure interface to run Anthropic's Claude Code CLI as an MCP server, enabling task execution, persistent memory, and integration with MCP-enabled IDEs.

MCP server that routes Claude Desktop chat into Claude Code, enabling headless execution and terminal handoff with session continuity.

Creates short-lived, offline JavaScript sandbox containers for safe code execution via MCP, with no network access and strict resource limits.

Enables ISLI agents and MCP clients to dispatch natural-language coding and terminal tasks to a locally-installed Claude Code CLI, supporting both one-shot execution and persistent sessions with workspace and security controls.

A single-purpose MCP server that lets an AI assistant run commands over SSH on a fixed, pre-configured host only, with an explicit per-call confirmation gate before execution.

Ephemeral MicroVM-isolated code execution for AI agents. Run Python, Node, or bash — fresh hardware-isolated VM per call, hard-purged after. No state persists between calls.

Stateless command execution and process management MCP server for Claude. Enables searching file contents, executing commands with safety limits, listing processes, and terminating processes.

Executes privileged commands with mandatory human approval via a TUI prompt, supporting local and remote execution through sudo.

Enables LLMs to interact with remote servers via SSH, supporting command execution, file upload/download, and directory listing.

MCP server for managing remote servers via SSH, enabling command execution, file transfer, rsync, tunnels, health checks, backups, and database operations.

A Python MCP server that lets MCP-compatible clients inspect and operate AWS through the AWS CLI, with command execution, suggestions, region lookup, and caller identity checks.

Enables code execution in isolated Docker containers with persistent IPython, Node.js, or R kernels, supporting file import/export and cross-session transfers via MCP tools.

Enables any MCP client to execute DeepSeek Harness agents and shell commands through standard MCP tools, bridging multi-agent capabilities with sandboxed execution.

Exposes persistent, stateful remote Bash sessions to AI agents via SSH, enabling command execution with preserved working directory and environment.

Enables managing multiple remote Linux hosts over SSH via MCP, with command execution, SFTP file operations, and Windows DPAPI-protected credentials.

A high-performance MCP server that manages persistent SSH sessions via a local tmux instance, enabling command execution, file transfer, and session monitoring for AI agents.

A persistent, stateful MCP server that exposes a detached tmux session to clients, enabling shell command execution, terminal buffer reading, and control signal sending via JSON-RPC over stdio.

Offline server that explains any shell command token-by-token and flags destructive ones (rm -rf /, curl | sudo bash, dd/mkfs/shred to a disk device, chmod -R 777 /) — a safety gate for agentic shell execution.

Percival Ubuntu is a security-focused MCP server for safe Ubuntu operations, optimized for the Nanobot agent. It enables file management and command execution under strict security policies.

Security-hardened MCP server that runs only allowlisted commands with no shell, jailed to a single directory, and bounded execution.

An enhanced Model Context Protocol filesystem server that fixes common limitations and adds features like glob pattern search, head/tail reading, intelligent file editing with syntax validation, and new tools for delete and command execution.

Enables local forensic analysis of files by orchestrating system binaries (file, exiftool, strings, Volatility) via safe subprocess execution.

Enables Claude to execute Minecraft commands and get tab completions through the MasterControl API. Allows remote command execution and command discovery while the player is online on a server.

Cross-platform MCP server for policy-controlled command execution on Linux and Windows, with no SSH dependency.

Enables natural language orchestration of multi-vendor network infrastructure by combining NAPALM for structured data retrieval and Netmiko for CLI execution via Nornir.

Enables Windows users to connect Antigravity CLI as an MCP subagent for coding tasks such as file reading, code execution, edits, and terminal commands, with model selection, conversation continuity, and streaming progress.

Developers: Search your zsh, bash, or fish shell history from Claude Code, Cline, Cursor, Zed, or any MCP client using tools like search_history (full-text with timestamp/CWD/exit code), recent_in_dir, failed_commands, and command_chains for multi-step sequences. Reindex after new activity. Local-only SQLite FTS5 with secrets redacted before storage.

Provides workspace-scoped file operations and command execution tools for building Cursor-style agents, along with system prompts and tool definitions for LLM integration.