Single exec tool running caller Python in a network-isolated locked-down sandbox.
Connect Runs on your machine
claude mcp add mcp-exec -e MCP_EXEC_TRANSPORT=<MCP_EXEC_TRANSPORT> -e MCP_EXEC_DEFAULT_TIMEOUT_S=<MCP_EXEC_DEFAULT_TIMEOUT_S> -e MCP_EXEC_MAX_TIMEOUT_S=<MCP_EXEC_MAX_TIMEOUT_S> -e MCP_EXEC_MAX_OUTPUT_BYTES=<MCP_EXEC_MAX_OUTPUT_BYTES> -e MCP_EXEC_MAX_STDIN_BYTES=<MCP_EXEC_MAX_STDIN_BYTES> -e MCP_EXEC_AUTH_TOKEN=<MCP_EXEC_AUTH_TOKEN> -- docker run -i --rm docker.io/idconstruct/mcp-exec:v0.5.4{
"mcpServers": {
"mcp-exec": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/idconstruct/mcp-exec:v0.5.4"
],
"env": {
"MCP_EXEC_TRANSPORT": "<MCP_EXEC_TRANSPORT>",
"MCP_EXEC_DEFAULT_TIMEOUT_S": "<MCP_EXEC_DEFAULT_TIMEOUT_S>",
"MCP_EXEC_MAX_TIMEOUT_S": "<MCP_EXEC_MAX_TIMEOUT_S>",
"MCP_EXEC_MAX_OUTPUT_BYTES": "<MCP_EXEC_MAX_OUTPUT_BYTES>",
"MCP_EXEC_MAX_STDIN_BYTES": "<MCP_EXEC_MAX_STDIN_BYTES>",
"MCP_EXEC_AUTH_TOKEN": "<MCP_EXEC_AUTH_TOKEN>"
}
}
}
}{
"mcpServers": {
"mcp-exec": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/idconstruct/mcp-exec:v0.5.4"
],
"env": {
"MCP_EXEC_TRANSPORT": "<MCP_EXEC_TRANSPORT>",
"MCP_EXEC_DEFAULT_TIMEOUT_S": "<MCP_EXEC_DEFAULT_TIMEOUT_S>",
"MCP_EXEC_MAX_TIMEOUT_S": "<MCP_EXEC_MAX_TIMEOUT_S>",
"MCP_EXEC_MAX_OUTPUT_BYTES": "<MCP_EXEC_MAX_OUTPUT_BYTES>",
"MCP_EXEC_MAX_STDIN_BYTES": "<MCP_EXEC_MAX_STDIN_BYTES>",
"MCP_EXEC_AUTH_TOKEN": "<MCP_EXEC_AUTH_TOKEN>"
}
}
}
}{
"servers": {
"mcp-exec": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/idconstruct/mcp-exec:v0.5.4"
],
"env": {
"MCP_EXEC_TRANSPORT": "<MCP_EXEC_TRANSPORT>",
"MCP_EXEC_DEFAULT_TIMEOUT_S": "<MCP_EXEC_DEFAULT_TIMEOUT_S>",
"MCP_EXEC_MAX_TIMEOUT_S": "<MCP_EXEC_MAX_TIMEOUT_S>",
"MCP_EXEC_MAX_OUTPUT_BYTES": "<MCP_EXEC_MAX_OUTPUT_BYTES>",
"MCP_EXEC_MAX_STDIN_BYTES": "<MCP_EXEC_MAX_STDIN_BYTES>",
"MCP_EXEC_AUTH_TOKEN": "<MCP_EXEC_AUTH_TOKEN>"
}
}
}
}Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
MCP_EXEC_TRANSPORTOptional | MCP transport. Must be 'stdio' for direct docker/stdio use. |
MCP_EXEC_DEFAULT_TIMEOUT_SOptional | Default wall-clock timeout per exec, seconds. |
MCP_EXEC_MAX_TIMEOUT_SOptional | Maximum wall-clock timeout a caller may request, seconds. |
MCP_EXEC_MAX_OUTPUT_BYTESOptional | Cap on combined stdout/stderr before truncation. |
MCP_EXEC_MAX_STDIN_BYTESOptional | Cap on stdin passed to the sandboxed code. |
MCP_EXEC_AUTH_TOKENOptional, secret | Optional X-MCP-AUTH token (http/sse transports only). |
Details
| Package | docker.io/idconstruct/mcp-exec:v0.5.4 (OCI, stdio) |
| First published | 20 Jul 2026 |
| Last updated | 20 Jul 2026 |
| Registry name | io.github.inhuman/mcp-exec |
More other servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.