Skip to main content

boxlite-mcp

MCP server providing isolated sandbox environments for AI agents.

The Problem

Today's AI apps don't just generate text – they write and run code, call tools, read your files, and hit the network. Running all of this directly on your machine creates real risks:

  • Security - Malicious or buggy code can damage your system
  • Privacy - Sensitive files and credentials are exposed
  • Reliability - Runaway processes can consume resources or crash your machine

BoxLite solves this by giving AI agents their own isolated VM – full freedom inside, complete safety outside.

Powered by BoxLite

BoxLite is an embeddable virtual machine runtime that follows the SQLite philosophy - simple, lightweight, and zero-configuration.

Why BoxLite?

  • Hardware-level isolation - True VM security, not just containers. Your AI agent runs in a completely isolated environment.
  • No daemon required - Unlike Docker, BoxLite doesn't need a background service. Just import and use.
  • Embeddable - Designed to be embedded directly into your applications, like SQLite for compute.
  • Fast startup - VMs boot in seconds, not minutes.
  • Cross-platform - Works on macOS and Linux.

Use Cases

  • AI Agent Sandboxing - Let AI agents execute code, browse the web, and use applications safely
  • Secure Code Execution - Run untrusted code without risk to your host system
  • Browser Automation - Headless browser with CDP for web scraping and testing
  • Development Environments - Disposable, reproducible dev environments

Demo

▶️ Watch the demo on YouTube

https://github.com/user-attachments/assets/0685d428-64e4-4a68-adfe-c24dc0dc5ae8

Available Tools

Tool Description
computer Full Ubuntu desktop with XFCE. Anthropic computer use API compatible.
browser Chromium browser with CDP endpoint for Puppeteer/Playwright/Selenium
code_interpreter Python code execution sandbox
sandbox Generic container for running shell commands

Quick Start

Claude Code

claude mcp add boxlite -- uvx boxlite-mcp

Claude Desktop

Add to your Claude Desktop configuration (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):

{
  "mcpServers": {
    "boxlite": {
      "command": "uvx",
      "args": ["boxlite-mcp"]
    }
  }
}

Manual Installation

pip install boxlite-mcp

Development

git clone https://github.com/boxlite-labs/boxlite-mcp.git
cd boxlite-mcp
uv sync --extra dev
uv run pytest

Connect Local Server to Claude Code

claude mcp add boxlite -s local \
  -e BOXLITE_HOME=$HOME/.boxlite-mcp \
  -- uv run --directory /path/to/boxlite-mcp python -m server

Note: Environment variables must be passed via -e, not inline in the args. MCP stdio servers bypass the shell, so VAR=value command syntax won't work.

Connect Local Server to Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):

{
  "mcpServers": {
    "boxlite": {
      "command": "uv",
      "args": ["run", "--directory", "/path/to/boxlite-mcp", "python", "-m", "server"],
      "env": {
        "BOXLITE_HOME": "/path/to/.boxlite-mcp"
      }
    }
  }
}

License

Apache-2.0

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

iflow_mcp_boxlite_ai_boxlite_mcp-0.2.5.tar.gz (17.9 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

File details

Details for the file iflow_mcp_boxlite_ai_boxlite_mcp-0.2.5.tar.gz.

File metadata

  • Download URL: iflow_mcp_boxlite_ai_boxlite_mcp-0.2.5.tar.gz
  • Upload date:
  • Size: 17.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: uv/0.10.0 {"installer":{"name":"uv","version":"0.10.0","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Debian GNU/Linux","version":"13","id":"trixie","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}

File hashes

Hashes for iflow_mcp_boxlite_ai_boxlite_mcp-0.2.5.tar.gz
Algorithm Hash digest
SHA256 f4941e6fc40be567da7e1f1061d09512cc523d189a49f19cd92bc6de424c9def
MD5 afa3725d55d7a39a07e1a4632501106e
BLAKE2b-256 c2b2804c640c0dde2ddf0259432def85bf7d4c736e8a26b0d937799fee969e7d

See more details on using hashes here.

File details

Details for the file iflow_mcp_boxlite_ai_boxlite_mcp-0.2.5-py3-none-any.whl.

File metadata

  • Download URL: iflow_mcp_boxlite_ai_boxlite_mcp-0.2.5-py3-none-any.whl
  • Upload date:
  • Size: 17.4 kB
  • Tags: Python 3
  • Uploaded using Trusted Publishing? No
  • Uploaded via: uv/0.10.0 {"installer":{"name":"uv","version":"0.10.0","subcommand":["publish"]},"python":null,"implementation":{"name":null,"version":null},"distro":{"name":"Debian GNU/Linux","version":"13","id":"trixie","libc":null},"system":{"name":null,"release":null},"cpu":null,"openssl_version":null,"setuptools_version":null,"rustc_version":null,"ci":null}

File hashes

Hashes for iflow_mcp_boxlite_ai_boxlite_mcp-0.2.5-py3-none-any.whl
Algorithm Hash digest
SHA256 8b843ddf59b1aee098f91cd7d29dbc110f81f7f48f9ffe950672d7454601575a
MD5 e16137d0688cfb1f8e751b2c652c7d73
BLAKE2b-256 5bf7773acb7cc10862e15b7d2e843e03b2c5195ecfb44dcc5d3b8c58e8ce4dbf

See more details on using hashes here.

Release history Release notifications | RSS feed

This release

0.2.5 This release

2 files

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page