What domain-specific managers are available?

Managers include BashManager, PythonManager, FileManager, WebManager, KnowledgeBaseManager, ListManager, MarketManager (Yahoo Finance), and RssManager.

Does web_browse require additional dependencies?

Yes, `web_browse` requires Playwright browser binaries. Outside the container, install them with `python -m playwright install chromium` (or `playwright install`).

What credentials does it need?

It reads `MCP_PORT`, `SANDBOX_ROOT` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

Container MCP Server

A podman ubuntu 24.04 container that serves a MCP server; with file, code execution, bash shell, knowledgebase, and more.

Local serverstdioPython

What is the Container MCP Server?

A podman ubuntu 24.04 container that serves a MCP server; with file, code execution, bash shell, knowledgebase, and more.

What you get

A secure, container-based implementation of the Model Context Protocol (MCP) for executing tools on behalf of large language models.

Container-MCP provides a sandboxed environment for safely executing code, running commands, accessing files, and performing web operations requested by large language models. It implements the MCP protocol to expose these capabilities as tools that can be discovered and called by AI systems in a secure manner.

Multi-layered Security —
Container isolation using Podman/Docker
AppArmor profiles for restricting access
Firejail sandboxing for additional isolation
Resource limits (CPU, memory, execution time)
Path traversal prevention

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
system_run_command
system_run_python
system_env_var
health_check
fs_read
fs_write
fs_list
fs_delete
fs_move
fs_apply_diff	Applies a unified diff patch to a file in the sandbox filesystem.
web_search
web_scrape
web_browse	Note: web_browse requires Playwright browser binaries. Outside the container, install them with python -m playwright install chromium (or playwright install).
kb_create_document	Creates a new document in the knowledge base with optional metadata and content.

Configuration

Variable	Description	Required
MCP_PORT	Configuration value read at startup.	Optional
SANDBOX_ROOT	Configuration value read at startup.	Optional

Example prompts to try

“Use Container to system run command.”
“Use Container to system run python.”
“Use Container to system env var.”

Frequently asked questions

It uses container isolation via Podman/Docker, AppArmor profiles, Firejail sandboxing, resource limits (CPU, memory, execution time), path traversal prevention, and allowed extension restrictions.