sandbox-as-a-service-mcp
Provides agents with real Linux VMs to run commands, manage files, expose ports, and track costs, all through an ephemeral sandbox service.
README
sandbox-as-a-service-mcp
An MCP server that gives an agent a real Linux virtual machine it can break.
Eleven tools: create a sandbox, run shell commands in it, write and read files, list what a run produced, expose a port on a public preview URL, extend the lifetime, destroy it, and check what it all cost.
Each sandbox is a dedicated VM with its own kernel — not a container sharing a host with other people's code. It is never reused between accounts and is destroyed when it expires, whether or not anything remembered to ask.
Use it
AAS_API_KEY=aas_sk_... npx -y https://sandbox-as-a-service.com/mcp.tgz
Get a key at sandbox-as-a-service.com — new accounts start with free credit and no card.
Claude Desktop / Claude Code
{
"mcpServers": {
"sandbox": {
"command": "npx",
"args": ["-y", "https://sandbox-as-a-service.com/mcp.tgz"],
"env": { "AAS_API_KEY": "aas_sk_..." }
}
}
}
The tools
| Tool | What it does |
|---|---|
create_sandbox |
Creates a VM and returns its id once it is ready. |
run_command |
Runs a shell command as an unprivileged user. Returns stdout, stderr, exit code. |
write_file |
Writes a file. Content travels out of band, so quotes and binary survive. |
read_file |
Reads a file back — how an agent gets at what its code produced. |
list_files |
Lists a directory tree, so an agent can find what a run produced. |
expose_port |
Gives a server inside the sandbox a public https URL to share. |
get_sandbox |
Status, size and expiry. |
list_sandboxes |
Everything on the account, newest first — useful for finding strays. |
extend_sandbox |
Pushes the expiry out when a job outgrows its timeout. |
destroy_sandbox |
Destroys it and stops billing. |
get_usage |
Remaining credit and recent usage. |
Notes for agents
- Code runs as an unprivileged user. There is no
sudo, soapt-getwill not work; usepip install --user --break-system-packagesornpm install, both of which do. run_commandwaits for the command to finish. Start a server with&or it will hold the call open until the timeout.- A sandbox is destroyed when its timeout expires whether or not
destroy_sandboxis called, so a forgotten sandbox costs minutes, not money forever. Calling it anyway returns the minutes you were not going to use.
Environment
| Variable | |
|---|---|
AAS_API_KEY |
Required. Your API key. |
AAS_BASE_URL |
Optional. Defaults to https://sandbox-as-a-service.com/v1. |
MIT licensed. The service it talks to is at sandbox-as-a-service.com; docs.
Recommended Servers
playwright-mcp
A Model Context Protocol server that enables LLMs to interact with web pages through structured accessibility snapshots without requiring vision models or screenshots.
Magic Component Platform (MCP)
An AI-powered tool that generates modern UI components from natural language descriptions, integrating with popular IDEs to streamline UI development workflow.
Audiense Insights MCP Server
Enables interaction with Audiense Insights accounts via the Model Context Protocol, facilitating the extraction and analysis of marketing insights and audience data including demographics, behavior, and influencer engagement.
VeyraX MCP
Single MCP tool to connect all your favorite tools: Gmail, Calendar and 40 more.
graphlit-mcp-server
The Model Context Protocol (MCP) Server enables integration between MCP clients and the Graphlit service. Ingest anything from Slack to Gmail to podcast feeds, in addition to web crawling, into a Graphlit project - and then retrieve relevant contents from the MCP client.
Kagi MCP Server
An MCP server that integrates Kagi search capabilities with Claude AI, enabling Claude to perform real-time web searches when answering questions that require up-to-date information.
E2B
Using MCP to run code via e2b.
Neon Database
MCP server for interacting with Neon Management API and databases
Exa Search
A Model Context Protocol (MCP) server lets AI assistants like Claude use the Exa AI Search API for web searches. This setup allows AI models to get real-time web information in a safe and controlled way.
Qdrant Server
This repository is an example of how to create a MCP server for Qdrant, a vector search engine.