container-mcp
If you are the rightful owner of container-mcp and would like to certify it and/or have it hosted online, please leave a comment on the right or send an email to henry@mcphub.com.
Container-MCP is a secure, container-based implementation of the Model Context Protocol (MCP) for executing tools on behalf of large language models.
Container-MCP provides a sandboxed environment for safely executing code, running commands, accessing files, and performing web operations requested by large language models. It implements the MCP protocol to expose these capabilities as tools that can be discovered and called by AI systems in a secure manner. The architecture uses a domain-specific manager pattern with multi-layered security to ensure tools execute in isolated environments with appropriate restrictions, protecting the host system from potentially harmful operations.
Features
- Multi-layered Security: Container isolation using Podman/Docker, AppArmor profiles, Firejail sandboxing, resource limits, path traversal prevention, and allowed extension restrictions.
- MCP Protocol Implementation: Standardized tool discovery and execution, resource management, and async execution support.
- Domain-Specific Managers: Includes BashManager for secure command execution, PythonManager for sandboxed Python code execution, FileManager for safe file operations, and WebManager for secure web browsing and scraping.
- Configurable Environment: Extensive configuration via environment variables, custom environment support, and development and production modes.
Tools
system_run_command
Executes bash commands in a secure sandbox environment.
system_run_python
Executes Python code in a secure sandbox environment.
system_env_var
Gets environment variable values.
file_read
Reads file contents safely.
file_write
Writes content to a file safely.
file_list
Lists contents of a directory safely.
file_delete
Deletes a file safely.
file_move
Moves or renames a file safely.
web_search
Uses a search engine to find information on the web.
web_scrape
Scrapes a specific URL and returns the content.
web_browse
Interactively browses a website using Playwright.
