MCP Wrapper logo

MCP Wrapper

by tibzejoker

MCP Wrapper is a secure sandbox for executing Node.js and Python scripts with file system isolation. It provides a controlled environment to run potentially untrusted code.

View on GitHub

Last updated: N/A

What is MCP Wrapper?

MCP Wrapper is a secure sandbox designed to execute Node.js and Python scripts in an isolated environment. It prevents scripts from accessing the host system's file system directly and restricts network access.

How to use MCP Wrapper?

To use MCP Wrapper, first install the dependencies using npm install. Then, you can start the tests using npm run start. The project structure includes a /server directory for the main server code, a /wrapper directory for the sandbox and wrappers, and a /mount directory for the virtual mount point for scripts.

Key features of MCP Wrapper

  • Complete file system isolation

  • Multi-language support (Node.js and Python)

  • Customizable environment variables

  • Path virtualization

  • Prevention of out-of-sandbox access

  • Unauthorized network access blocking

Use cases of MCP Wrapper

  • Executing untrusted code safely

  • Running user-provided scripts in a controlled environment

  • Testing code with restricted access

  • Isolating processes for security purposes

  • Creating a secure plugin system

FAQ from MCP Wrapper

What languages are supported?

Currently, MCP Wrapper supports Node.js and Python.

How is the file system isolated?

The file system is isolated by creating a virtual mount point and restricting access to the host system's file system.

Can I customize the environment variables?

Yes, you can customize the environment variables for the scripts executed in the sandbox.

How are network requests handled?

Network access is blocked by default to prevent unauthorized access. Specific network access can be configured if needed.

What kind of security tests are included?

The project includes tests for file operations in Node.js and Python, security restrictions, and HTTP requests.