Code Execution MCP Server

MCP Run Python

Name: MCP Run Python
Author: pydantic

Run Python code in a secure sandbox via MCP tool calls

Scan flagged something by pydantic15,495MITPythonBeginnerstdio

View on GitHub Install Guide

Install

No auto-install command available for this server.

Check the GitHub repository for setup instructions

Safety Report

43% Scan flagged something

3 passed 4 warnings

Security

Authentication

details

No authentication on the sandbox execution endpoint by default; relies on caller trust

Warning

CORS Policy

details

HTTP transport mode available; CORS configuration not documented

Info

Rate Limiting

details

No rate limiting documented for the sandbox execution endpoint

Warning

Known CVEs

details

Project explicitly retired due to security: 'no safe way to run Python within Pyodide safely' — Python code can execute arbitrary JavaScript. Consider Monty (github.com/pydantic/monty) as replacement.

Warning

Code Quality

Dependency Audit

details

Minimal dependencies; runs Python in Pyodide/Deno WebAssembly sandbox. NOTE: project retired — arbitrary JavaScript execution possible via Pyodide. Maintainers now recommend Monty instead.

Pass

Code Source

details

Open source; originally in pydantic/pydantic-ai, now at pydantic/mcp-run-python (archived/retired)

Pass

License

details

MIT License (Pydantic organization)

Pass

Community

Maintenance Status

details

Project has been retired by maintainers. Replacement is pydantic/monty.

Warning

Learn about our security methodology →

Compatibility

Claude CodeMCP stdio transport works; project retired so no ongoing support

Partial

CursorStandard MCP stdio config should work; not explicitly documented

Partial

VS CodeNo documented VS Code integration

Not Tested

WindsurfNo documented Windsurf integration

Not Tested

Claude DesktopShould work via stdio transport; project is retired

Partial

Tools Provided (1)

run_python_code

Executes Python code in a sandboxed WebAssembly environment (Pyodide/Deno). Automatically detects and installs required dependencies, captures stdout/stderr, handles async code, and returns detailed error reports. WARNING: project retired due to security issues — Pyodide allows arbitrary JavaScript execution.

Frequently Asked Questions

What is MCP Run Python?

Run Python code in a secure sandbox via MCP tool calls

What tools does MCP Run Python provide?

MCP Run Python provides 1 tools including run_python_code. Each tool can be called by AI agents to perform specific operations.

Is MCP Run Python safe to use?

We cannot tell you that, and nobody scanning at this scale can. What we did in March 2026 was shallow-clone MCP Run Python and run five keyword searches over its source: auth identifiers, CORS configuration, rate-limit identifiers, the dependency manifest against a hardcoded list of 18 known-vulnerable packages, and unguarded eval/exec calls. At least one matched — the specific finding is in the scan report on this page. A text search cannot follow a variable, judge intent, or tell you what a server does once it is running, so "nothing matched" is not "safe". What the scan does and does not cover is written out at /mcp/security.

What are alternatives to MCP Run Python?

Similar MCP servers include Serena, DesktopCommanderMCP, Container Use. Each serves a similar purpose but may differ in features, language, and compatibility.

Similar MCP Servers

Serena

Scan flagged something

by oraios

A fully-featured coding agent that relies on symbolic code operations by using language servers.

code execution Python stdio

21.6k 39 tools

View

DesktopCommanderMCP

Scan flagged something

by wonderwhy-er

A swiss-army-knife that can manage/execute programs and read/write/search/edit code and text files.

code execution TypeScript stdio

claude mcp add desktopcommandermcp -- npx -y desktop-commander

5.7k 25 tools

View

Container Use

Not scanned

by dagger

Containerized environments for coding agents. Multiple agents can work independently, isolated in fresh containers and git branches. No conflicts, many experiments. Full execution history, terminal access to agent environments, git workflow. Any agent/model/infra stack.

code execution Go stdio

3.6k 13 tools

View

Was this helpful?

Free AI writing tools

Check a draft for AI tells, then fix what the check finds.

AI Humanizer

make the text read naturally

AI Detector

Free, unlimited

Stay Updated on MCP Servers

New servers, safety alerts, and install guides — weekly.