54rt1n/container-mcp

A secure, container-based implementation of the Model Context Protocol (MCP) for executing tools on behalf of large language models.
## Overview
Container-MCP provides a sandboxed environment for safely executing code, running commands, accessing files, and performing web operations requested by large language models. It implements the MCP protocol to expose these capabilities as tools that can be discovered and called by AI systems in a secure manner.
The architecture uses a domain-specific manager pattern with multi-layered security to ensure tools execute in isolated environments with appropriate restrictions, protecting the host system from potentially harmful operations.
## Key Features
Multi-layered Security
Container isolation using Podman/Docker
AppArmor profiles for restricting access
Firejail sandboxing for additional isolation
Resource limits (CPU, memory, execution time)
Path traversal prevention
Allowed extension restrictions
MCP Protocol Implementation
Standardized tool discovery and execution
Resource management
Async execution support
Domain-Specific Managers
BashManager: Secure command execution
PythonManager: Sandboxed Python code execution
FileManager: Safe file operations
WebManager: Secure web browsing and scraping
KnowledgeBaseManager: Structured document storage with semantic search
ListManager: Organized list and collection management
MarketManager: Stock and cryptocurrency data via Yahoo Finance
RssManager: RSS and Atom feed fetching
Configurable Environment
Extensive configuration via environment variables
Custom environment support
Development and production modes
## Available Tools
### System Operations
#### system_run_command
Executes bash commands in a secure sandbox environment.
Parameters:
command (string, required): The bash command to execute
working_dir (string, optional): Working directory (ignored in sandbox)
Returns:
stdout (string): Command standard output
stderr (string): Command standard error
exit_code (integer): Command exit code
success (boolean): Whether command completed successfully
json
"stdout": "file1.txt\nfile2.txt\n",
"stderr": "",
"exit_code": 0,
"success": true
#### system_run_python
Executes Python code in a secure sandbox environment.
Parameters:
code (string, required): Python code to execute
working_dir (string, optional): Working directory (ignored in sandbox)
Returns:
output (string): Print output from the code
error (string): Error output from the code
result (any): Optional return value (available if code sets _ variable)
success (boolean): Whether code executed successfully
json
"output": "Hello, world!\n",
"error": "",
"result": 42,
"success": true
#### system_env_var
Gets environment variable values.
Parameters:
var_name (string, optional): Specific variable to retrieve
Returns:
variables (object): Dictionary of environment variables
requested_var (string): Value of the requested variable (if var_name provided)
json
"variables": {
"MCP_PORT": "8000",
"SANDBOX_ROOT": "/app/sandbox"
},
"requested_var": "8000"
#### health_check
Gets server health status and system information.
Parameters: None
Returns:
status (string): Server health status
timestamp (string): Current ISO timestamp