ipybox
Unified execution environment for Python code, shell commands, and programmatic MCP tool calls
pinned to #264ed6cupdated 3 weeks ago
Ask your AI client: “install mcps/ipybox”.
Requires the metahub MCP server installed in your client. Set up MCP.
mh install mcps/ipyboxmetahub onboarded this repo on the author's behalf.
If you own github.com/gradion-ai/ipybox on GitHub, claim the listing to take over publishing. Your claim preserves the existing eval history and badges; only the curator label is replaced with verified-publisher on your next publish.
Stars
73
Last commit
3 weeks ago
Latest release
published
- #claude-code-plugin
- #code-execution
- #code-interpreter
- #code-mode
- #code-sandbox
- #ipython
- #mcp
- #mcp-client
- #mcp-server
- #programmatic-tool-calling
- #python
- #sandbox-runtime
Evaluation report
PassingAutomated checks the publisher passed at publish time — structure, docs, safety, and whether the artifact behaves as claimed.264ed6c· 3 weeks ago
Select a category above to see its individual checks.
Release history
1- releasecurrent264ed6cpass3 weeks ago
Contents
ipybox
mcp-name: io.github.gradion-ai/ipybox
ipybox is a unified execution environment for Python code, shell commands, and programmatic MCP tool calls.
Overview
ipybox executes code blocks in a stateful IPython kernel. A code block can contain any combination of Python code, shell commands, and programmatic MCP tool calls. Kernels can be sandboxed with sandbox-runtime, enforcing filesystem and network restrictions at OS level.
It generates Python APIs for MCP server tools via mcpygen, and supports application-level approval of individual tool calls and shell commands during code execution. ipybox runs locally on your computer, enabling protected access to your local data and tools.
[!NOTE] Next generation ipybox
This is the next generation of ipybox, a complete rewrite. Older versions are maintained on the 0.6.x branch and can be obtained with
pip install ipybox<0.7.
Documentation:
- 📚 Documentation
- 🏗️ Architecture
- 🤖 llms.txt
- 🤖 llms-full.txt
Capabilities
| Capability | Description |
|---|---|
| Stateful execution | State persists across executions in IPython kernels |
| Unified execution | Combine Python code, shell commands, and programmatic MCP tool calls in a code block |
| Shell command execution | Run shell commands via !cmd syntax, capture output into Python variables |
| Programmatic MCP tool calls | MCP tools called via generated Python API ("code mode"), not JSON directly |
| Python tool API generation | Typed functions and Pydantic models generated from MCP tool schemas via mcpygen |
| Application-level approval | Individual approval of tool calls and shell commands during code execution |
| Lightweight sandboxing | Optional kernel isolation via Anthropic's sandbox-runtime |
| Local execution | No cloud dependencies, everything runs locally on your machine |
Usage
| Component | Description |
|---|---|
| Python SDK | Python API for building applications on ipybox |
| MCP server | ipybox as MCP server for code actions and programmatic tool calling |
| Claude Code plugin | Plugin that bundles the ipybox MCP server and a code action skill |
[!TIP] Freeact agent
Freeact is a general-purpose agent built on ipybox.
Reviews
No reviews yet. Be the first.
Related
@remote-mcp/example
@remote-mcp/example MCP server
vulnerable-mcp-server-malicious-code-exec
A simple MCP server with a get_qotd tool that fetches quotes from a free API
vulnerable-mcp-server-malicious-tools
A simple MCP server to fetch and display latest status of Atlassian services
mh install mcps/ipybox