Skip to main content
Glama
117,389 servers. Updated
20 Best Code Execution MCP Servers: compared and ranked, November 2026Ranked from 1,332 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Information about sandbox environments or games" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • F
    license
    A
    quality
    C
    maintenance
    Enables AI coding agents to run Kubernetes inspection and Terraform plan/apply operations inside ephemeral gVisor-sandboxed jobs with short-lived, narrowly-scoped credentials, while routing destructive changes through a human approval gate.
    3
    -
  • A
    license
    Not graded
    quality
    Not graded
    maintenance
    Enables clients to select administrator-registered machines and projects, work in isolated Git-versioned sandboxes, inspect diffs, and generate policy-gated publish plans without writing changes back to source.
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to safely execute privileged commands by routing them to a human approver, who runs them outside the agent's context and returns the output to the model.
    5
    1
    MIT
  • F
    license
    Not graded
    quality
    Not graded
    maintenance
    Enables enforcing memory boundary compartmentalization and multi-tenant security isolation for autonomous agents via a deterministic, zero-dependency Python skill. Seamlessly integrates with Claude Desktop, Cursor, and other MCP-compliant clients to execute isolation policies through structured JSON-RPC requests.
    8
    -
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables developers and AI agents to enforce per-tenant security isolation for autonomous agents by compartmentalizing memory boundaries and managing sandboxed tenant execution. It exposes this deterministic, dependency-free guard through a native MCP server that plugs into Claude Desktop, Cursor, and other MCP-compliant clients.
    8
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    Provides threat intelligence and vulnerability research tools by integrating with NVD, VirusTotal, AbuseIPDB, Shodan, and MITRE ATT\&CK. It enables users to perform CVE lookups, analyze IP reputation, and retrieve detailed MITRE ATT\&CK technique information.
    1
    -
  • F
    license
    Not graded
    quality
    D
    maintenance
    Provides secure execution of arbitrary JavaScript code within a sandboxed QuickJS WASM environment, allowing language models or other MCP clients to safely run JavaScript code snippets without compromising the host system.
    5
    -
  • A
    license
    B
    quality
    B
    maintenance
    Gives coding agents read-only access to an AI-SPM backend's flagged issues, inventory, and remediation guidance so they can fix the affected code, along with guardrail policies, LLM-interaction analytics, cost-optimization analyses, and red-teaming evaluation results.
    37
    Apache 2.0
  • A
    license
    B
    quality
    B
    maintenance
    Enables pre-execution security checks and sandboxed execution for AI agent workflows, including prompt-injection detection, MCP rugpull and sampling abuse protection, untrusted tool-output sanitization, loop circuit breaking, SQL AST validation, PII redaction, and ephemeral Python execution.
    8
    2
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    MCP server for Speakeasy — Windows API emulation for binary analysis. It runs a .exe in a Wine-like sandbox and returns a structured API trace.
    3
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    GATE verifies whether an AI agent still has valid delegated authority at execution time. It provides live revocation checks, signed authority evidence, alternate delegation paths, and explicit ALLOW, DENY or UNKNOWN decisions. Integrates with MCP tools through a trusted effect-boundary guard. Open-source Developer Preview with Free sandbox and live network onboarding.
    2
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    A Model Context Protocol (MCP) server for interacting with Joe Sandbox Cloud. This server exposes rich analysis and IOC extraction capabilities from Joe Sandbox and integrates cleanly into any MCP-compatible application (e.g. Claude Desktop, Glama, or custom LLM agents).
    15
    12
    MIT
  • A
    license
    A
    quality
    D
    maintenance
    Tamper-evident audit logging for AI decisions. Three tools (record_decision, verify_decision, list_decisions) write to a regulator-grade ledger built on AWS S3 Object Lock with 7-year retention. Designed for EU AI Act Article 12 and FCA SS1/23 evidence requirements. Try zero-config: npx audit-ledger-mcp boots in sandbox mode against a public hosted tenant.
    3
    92 npm
    1
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to run read-only AWS security audits and receive normalized, severity-ranked findings about account posture, such as stale access keys, missing MFA, public buckets, open security groups, and CloudTrail coverage.
    11
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    A robust Model Control Protocol server that enables AI agents to access real-time cyber threat intelligence and detailed information about vulnerabilities, threat actors, malware, and other cyber-security entities.
    10
    8
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    Dependency-free, locally sandboxed MCP stdio server. Tools run as WASM inside a capability-based WASI sandbox (wasmtime); every tools/call is attested with cost/policy and signed manifests fail-closed.
    3
    166 PyPI
    48
    Business Source 1.1
  • A
    license
    A
    quality
    D
    maintenance
    An MCP server that lets LLM agents operate the IDnow Trust Platform sandbox to list verification flows, create sessions, check sessions, and get session details.
    4
    ISC
  • A
    license
    A
    quality
    D
    maintenance
    A read-only MCP server for the Qualys PCI Merchant API that lets LLM assistants answer questions about PCI compliance posture, such as which hosts are failing PCI or listing high findings.
    7
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    An MCP server that exposes macOS-native device trust signals — the facts about a Mac that cannot be gathered from a Linux container or a cloud runner. All tools are strictly read-only.
    22
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI assistants to use the Healthier Business Hub API v2, covering 189 operations across core and portals plus 59 webhook events, with safe read-only defaults, sandbox-first behavior, and confirmed live writes.
    8
    1,250 npm
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    A read-only MCP server that analyzes a supplied Terraform plan JSON file and returns resource identities, action/type/mode counts, and coverage warnings about proposed infrastructure changes. It never executes Terraform, applies changes, or connects to AWS, keeping analysis local and deterministic.
    3
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    A Model Context Protocol (MCP) server for Socket integration, allowing AI assistants to efficiently check dependency vulnerability scores and security information.
    1
    14,807 npm
    139
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to assess AWS environments against the AWS Security Reference Architecture (SRA) by providing tools to discover, describe, and run security checks across AWS services and accounts.
    5
    3
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    Exposes Microsoft 365 privacy/compliance audit checks as MCP tools, enabling natural language queries about tenant configuration, orphaned documents, Conditional Access policies, DLP policies, and Copilot usage.
    5
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables MCP clients to read system information and inspect areas, doors, inputs, outputs, and review/event logs through the Inner Range Inception REST API. It is read-only and cannot arm, disarm, unlock, toggle outputs, or change configuration.
    4
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    MISP (Malware Information Sharing Platform) MCP server with built-in prompt injection defense via prompt-defense-audit
    8
    2
    MIT