mcp-python-repl
A production-grade MCP server providing a persistent Python REPL with multi-session support, sandboxing, and timeout protection, enabling LLM agents to execute Python code across multiple turns with variables that persist between calls.
README
๐ mcp-python-repl
A production-grade MCP server providing a persistent Python REPL with multi-session support, sandboxing, and timeout protection.
Built for LLM agents that need to execute Python code across multiple turns with variables that persist between calls.
โจ Features
| Feature | Description |
|---|---|
| Multi-session | Isolated sessions with unique IDs โ run parallel workflows |
| Persistent namespace | Variables survive across calls within a session |
| Timeout protection | Configurable execution timeout (SIGALRM on Unix) |
| Sandboxing | Optional mode blocks dangerous modules (subprocess, socket, etc.) |
| Package install | Install pip packages on-the-fly (prefers uv for speed) |
| File execution | Run .py files inside the persistent session |
| Dual transport | stdio (local) and streamable-http (remote) |
| Full introspection | List variables, get history, check server status |
| Env-based config | All settings via REPL_* environment variables |
๐ Quick Start
With Claude Desktop / Cursor (stdio)
Add to your MCP config:
{
"mcpServers": {
"python-repl": {
"command": "uvx",
"args": ["mcp-python-repl"]
}
}
}
With uv (local dev)
# Clone and run
git clone https://github.com/soufiane-aazizi/mcp-python-repl.git
cd mcp-python-repl
uv run mcp-python-repl
HTTP transport (remote / multi-client)
REPL_TRANSPORT=streamable-http REPL_PORT=8000 uv run mcp-python-repl
๐ ๏ธ Tools
Code Execution
| Tool | Description |
|---|---|
repl_run_code |
Execute Python code with persistent namespace |
repl_run_file |
Execute a .py file in the session |
repl_install_package |
Install a pip package (uses uv if available) |
Namespace Management
| Tool | Description |
|---|---|
repl_list_namespace |
List all variables in a session |
repl_get_variable |
Get the full value of a variable |
repl_set_variable |
Inject a variable from JSON |
repl_delete_variable |
Delete a specific variable |
repl_clear_namespace |
Clear all variables in a session |
Session Management
| Tool | Description |
|---|---|
repl_list_sessions |
List all active sessions |
repl_delete_session |
Delete a session and its data |
Debugging
| Tool | Description |
|---|---|
repl_get_history |
Get execution history for a session |
repl_server_status |
Server config, Python version, session count |
๐ How Persistence Works
Call 1: repl_run_code(code="data = [1,2,3]; total = sum(data); result = total")
โ returns: {"result": 6, "session_id": "a1b2c3d4e5f6", "new_variables": ["data", "total"]}
Call 2: repl_run_code(code="doubled = [x*2 for x in data]; result = doubled", session_id="a1b2c3d4e5f6")
โ returns: {"result": [2,4,6], "new_variables": ["doubled"]}
Important: The
resultvariable is for returning output to the caller. It does NOT persist. Use named variables instead.
โ๏ธ Configuration
All settings are configurable via environment variables:
| Variable | Default | Description |
|---|---|---|
REPL_TIMEOUT |
30 |
Max execution time in seconds |
REPL_MAX_SESSIONS |
50 |
Maximum concurrent sessions |
REPL_SESSION_TTL |
120 |
Session expiry in minutes |
REPL_MAX_OUTPUT |
1048576 |
Max stdout/stderr capture (bytes) |
REPL_SANDBOX |
false |
Enable sandboxing (true/false) |
REPL_TRANSPORT |
stdio |
Transport: stdio or streamable-http |
REPL_HOST |
127.0.0.1 |
HTTP host (when using HTTP transport) |
REPL_PORT |
8000 |
HTTP port (when using HTTP transport) |
REPL_WORKDIR |
cwd |
Working directory for executions |
Sandbox Mode
When REPL_SANDBOX=true, the following modules are blocked:
subprocess, shutil, ctypes, socket, http.server, xmlrpc, ftplib, smtplib, telnetlib, webbrowser
And the following builtins are removed: exec, eval, compile, __import__ (replaced with a restricted version).
๐งช Development
# Install dev dependencies
uv sync --extra dev
# Run tests
uv run pytest -v
# Lint
uv run ruff check src/ tests/
# Test with MCP Inspector
npx @modelcontextprotocol/inspector uv run mcp-python-repl
๐ฆ Project Structure
mcp-python-repl/
โโโ src/mcp_python_repl/
โ โโโ __init__.py # Package metadata
โ โโโ config.py # Env-based configuration
โ โโโ session.py # Multi-session manager with TTL
โ โโโ executor.py # Python code executor (timeout + sandbox)
โ โโโ server.py # MCP server with all tools
โโโ tests/
โ โโโ test_core.py # Unit + integration tests
โโโ pyproject.toml # uv/hatch project config
โโโ LICENSE # MIT
โโโ README.md
๐ License
MIT โ See LICENSE.
Recommended Servers
playwright-mcp
A Model Context Protocol server that enables LLMs to interact with web pages through structured accessibility snapshots without requiring vision models or screenshots.
Magic Component Platform (MCP)
An AI-powered tool that generates modern UI components from natural language descriptions, integrating with popular IDEs to streamline UI development workflow.
Audiense Insights MCP Server
Enables interaction with Audiense Insights accounts via the Model Context Protocol, facilitating the extraction and analysis of marketing insights and audience data including demographics, behavior, and influencer engagement.
VeyraX MCP
Single MCP tool to connect all your favorite tools: Gmail, Calendar and 40 more.
graphlit-mcp-server
The Model Context Protocol (MCP) Server enables integration between MCP clients and the Graphlit service. Ingest anything from Slack to Gmail to podcast feeds, in addition to web crawling, into a Graphlit project - and then retrieve relevant contents from the MCP client.
Kagi MCP Server
An MCP server that integrates Kagi search capabilities with Claude AI, enabling Claude to perform real-time web searches when answering questions that require up-to-date information.
E2B
Using MCP to run code via e2b.
Neon Database
MCP server for interacting with Neon Management API and databases
Exa Search
A Model Context Protocol (MCP) server lets AI assistants like Claude use the Exa AI Search API for web searches. This setup allows AI models to get real-time web information in a safe and controlled way.
Qdrant Server
This repository is an example of how to create a MCP server for Qdrant, a vector search engine.