MCP Observatory
2m ago Tracked 26,682 Last 2m ago 24h 1,553
github Python analyzed aa2742a

CSOAI-ORG/code-executor-mcp

github

Sandboxed code execution: Python, JavaScript, and shell commands with safety guards, output capture, and timeout protection.

maintainer
CSOAI-ORG
license
MIT
first seen
2026-06-03
last seen
2026-08-02
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged dynamic code execution in CSOAI-ORG/code-executor-mcp
capabilities 7 tools
transport stdio · streamable-http · http verified reported listed in the official MCP registry counts 7 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • execute_code
  • execute_code_docker
  • get_safety_rules
  • list_sandbox_files
  • read_file
  • run_command
  • run_tests
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit aa2742a · analyzer v28 · 15h ago

skills & prompt files 2

code evidence vv1.0.11 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 4

filesystem 1

  • fs CSOAI-ORG-code-executor-mcp-aa2742a/server.py :21 from pathlib import Path

shell / exec 1

  • shell CSOAI-ORG-code-executor-mcp-aa2742a/server.py :17 import subprocess

network 2

  • net CSOAI-ORG-code-executor-mcp-aa2742a/auth_middleware.py :13 import json, os, urllib.request, urllib.error
  • net CSOAI-ORG-code-executor-mcp-aa2742a/server.py :27 import urllib.request as _meter_urlreq

secrets 1

  • secrets CSOAI-ORG-code-executor-mcp-aa2742a/auth_middleware.py :34 key = (api_key or os.environ.get("MEOK_API_KEY", "")).strip()

tool registrations 7

  • execute_code CSOAI-ORG-code-executor-mcp-aa2742a/server.py :286
  • run_command CSOAI-ORG-code-executor-mcp-aa2742a/server.py :348
  • run_tests CSOAI-ORG-code-executor-mcp-aa2742a/server.py :404
  • read_file CSOAI-ORG-code-executor-mcp-aa2742a/server.py :499
  • list_sandbox_files CSOAI-ORG-code-executor-mcp-aa2742a/server.py :572
  • get_safety_rules CSOAI-ORG-code-executor-mcp-aa2742a/server.py :630
  • execute_code_docker CSOAI-ORG-code-executor-mcp-aa2742a/server.py :685

declared dependencies 1

  • mcp@>=1.0.0