Sandbox MCP Server
by agent-infraAll-in-One Sandbox for AI Agents that combines Browser, Shell, File, MCP and VSCode Server in a single Docker container.
Sandbox is an open-source mcp server by agent-infra, written mainly in Python, with 6,259 GitHub stars and the Apache-2.0 license. Its code was last updated Sep 14, 2026. The latest PyPI release is agent-sandbox 0.0.30, published Mar 24, 2026, with 26,361 downloads last week.
Scan summary: scanned Nov 5, 2026 at commit 7f1afaf. Seen able to connect to the internet. Scan policy
What Sandbox can touch
- Not checked directly. Its own description suggests it does this.Run shell commandsLikely, from its own description
- Our checks did not find this. The tool may still do it.Run dynamic codeNot seen in this scan
- Not checked directly. Its own description suggests it does this.Read or write filesLikely, from its own description
- Our checks did not find this. The tool may still do it.Read environment and secretsNot seen in this scan
- Not checked directly. Its own description suggests it does this.Control a web browserLikely, from its own description
- Our checks did not find this. The tool may still do it.Connect to databasesNot seen in this scan
- Our checks did not find this. The tool may still do it.Read or send messagesNot seen in this scan
- Our checks did not find this. The tool may still do it.Touch money or tradingNot seen in this scan
- Seen in this scan, either in the code or while it ran.Connect to the internetFound in the code by our scan
"Not seen" means our checks did not find it, and the tool may still do it. Covers commit 7f1afaf, Nov 5, 2026. See the scan policy.
Before you install Sandbox
AgenticMart scanned Sandbox on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.
What it can access
- An MCP server is a program your AI app starts and talks to. A local one runs with your user's permissions: it can see the files, environment variables and network your account can.
- Based on its description and topics, it likely needs to control a web browser (visit sites, fill in and submit forms).
- Based on its description and topics, it likely needs to read and write files on your machine.
- Based on its description and topics, it likely needs to run shell commands.
Before you install
- Run it in a separate browser profile without your logged-in accounts.
- Point it at one project folder, never your home directory.
- Pin the version you reviewed instead of always installing the latest release.
- Read the tool list or scripts before the first run, and keep approval prompts on for actions that write, send or delete.
- Maintained by agent-infra on GitHub, 6,259 stars and 563 forks. Popularity is not proof of safety.
- Last code change: Sep 14, 2026.
- Open-source license: Apache-2.0.
Sandbox is an open-source mcp server by agent-infra, written mainly in Python. All-in-One Sandbox for AI Agents that combines Browser, Shell, File, MCP and VSCode Server in a single Docker container.
At a glance
- Stars
- 6.3k
- Forks
- 563
- Language
- Python
- License
- Apache-2.0
- Created
- Aug 2025
- Last update
- Sep 14, 2026
- Type
- MCP Server
- Price
- Free
Topics
Questions about Sandbox
What is Sandbox?
All-in-One Sandbox for AI Agents that combines Browser, Shell, File, MCP and VSCode Server in a single Docker container.
Who maintains Sandbox?
Sandbox is maintained by agent-infra on GitHub (agent-infra/sandbox). AgenticMart lists it from public repository data.
Is Sandbox safe to use?
AgenticMart scanned Sandbox on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.
What license does Sandbox use?
It is published under the Apache-2.0 license.
Sandbox alternatives
View more →Similar mcp servers in Browser Automation, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Sandbox (this page) agent-infra | 6.3k | Apache-2.0 | Sep 14, 2026 | Scanned, no flagged issues |
| Chrome Devtools MCP ChromeDevTools | 55k | Apache-2.0 | Nov 1, 2026 | Scanned, no flagged issues |
| Playwright MCP microsoft | 39k | Apache-2.0 | Oct 31, 2026 | Scanned, no flagged issues |
| MCP Chrome hangwin | 13k | MIT | Jan 6, 2026 | Scanned, no flagged issues |
| Browser Tools MCP AgentDeskAI | 7.3k | MIT | Oct 28, 2026 | Scanned, no flagged issues |
| MCP BrowserMCP | 7.3k | Apache-2.0 | Oct 30, 2026 | Scanned, no flagged issues |