Skip to main content

A production-grade MCP server providing a persistent Python REPL with multi-session support, sandboxing, and timeout protection.

Project description

🐍 mcp-python-repl

A production-grade MCP server providing a persistent Python REPL with multi-session support, sandboxing, and timeout protection.

Built for LLM agents that need to execute Python code across multiple turns with variables that persist between calls.

✨ Features

Feature Description
Multi-session Isolated sessions with unique IDs — run parallel workflows
Persistent namespace Variables survive across calls within a session
Timeout protection Configurable execution timeout (SIGALRM on Unix)
Sandboxing Optional mode blocks dangerous modules (subprocess, socket, etc.)
Package install Install pip packages on-the-fly (prefers uv for speed)
File execution Run .py files inside the persistent session
Dual transport stdio (local) and streamable-http (remote)
Full introspection List variables, get history, check server status
Env-based config All settings via REPL_* environment variables

🚀 Quick Start

With Claude Desktop / Cursor (stdio)

Add to your MCP config:

{
  "mcpServers": {
    "python-repl": {
      "command": "uvx",
      "args": ["mcp-python-repl"]
    }
  }
}

With uv (local dev)

# Clone and run
git clone https://github.com/soufiane-aazizi/mcp-python-repl.git
cd mcp-python-repl
uv run mcp-python-repl

HTTP transport (remote / multi-client)

REPL_TRANSPORT=streamable-http REPL_PORT=8000 uv run mcp-python-repl

🛠️ Tools

Code Execution

Tool Description
repl_run_code Execute Python code with persistent namespace
repl_run_file Execute a .py file in the session
repl_install_package Install a pip package (uses uv if available)

Namespace Management

Tool Description
repl_list_namespace List all variables in a session
repl_get_variable Get the full value of a variable
repl_set_variable Inject a variable from JSON
repl_delete_variable Delete a specific variable
repl_clear_namespace Clear all variables in a session

Session Management

Tool Description
repl_list_sessions List all active sessions
repl_delete_session Delete a session and its data

Debugging

Tool Description
repl_get_history Get execution history for a session
repl_server_status Server config, Python version, session count

🔄 How Persistence Works

Call 1:  repl_run_code(code="data = [1,2,3]; total = sum(data); result = total")
         → returns: {"result": 6, "session_id": "a1b2c3d4e5f6", "new_variables": ["data", "total"]}

Call 2:  repl_run_code(code="doubled = [x*2 for x in data]; result = doubled", session_id="a1b2c3d4e5f6")
         → returns: {"result": [2,4,6], "new_variables": ["doubled"]}

Important: The result variable is for returning output to the caller. It does NOT persist. Use named variables instead.

⚙️ Configuration

All settings are configurable via environment variables:

Variable Default Description
REPL_TIMEOUT 30 Max execution time in seconds
REPL_MAX_SESSIONS 50 Maximum concurrent sessions
REPL_SESSION_TTL 120 Session expiry in minutes
REPL_MAX_OUTPUT 1048576 Max stdout/stderr capture (bytes)
REPL_SANDBOX false Enable sandboxing (true/false)
REPL_TRANSPORT stdio Transport: stdio or streamable-http
REPL_HOST 127.0.0.1 HTTP host (when using HTTP transport)
REPL_PORT 8000 HTTP port (when using HTTP transport)
REPL_WORKDIR cwd Working directory for executions

Sandbox Mode

When REPL_SANDBOX=true, the following modules are blocked:

subprocess, shutil, ctypes, socket, http.server, xmlrpc, ftplib, smtplib, telnetlib, webbrowser

And the following builtins are removed: exec, eval, compile, __import__ (replaced with a restricted version).

🧪 Development

# Install dev dependencies
uv sync --extra dev

# Run tests
uv run pytest -v

# Lint
uv run ruff check src/ tests/

# Test with MCP Inspector
npx @modelcontextprotocol/inspector uv run mcp-python-repl

📦 Project Structure

mcp-python-repl/
├── src/mcp_python_repl/
│   ├── __init__.py       # Package metadata
│   ├── config.py         # Env-based configuration
│   ├── session.py        # Multi-session manager with TTL
│   ├── executor.py       # Python code executor (timeout + sandbox)
│   └── server.py         # MCP server with all tools
├── tests/
│   └── test_core.py      # Unit + integration tests
├── pyproject.toml        # uv/hatch project config
├── LICENSE               # MIT
└── README.md

📄 License

MIT — See LICENSE.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

mcp_python_repl-0.1.1.tar.gz (67.7 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

mcp_python_repl-0.1.1-py3-none-any.whl (13.8 kB view details)

Uploaded Python 3

File details

Details for the file mcp_python_repl-0.1.1.tar.gz.

File metadata

  • Download URL: mcp_python_repl-0.1.1.tar.gz
  • Upload date:
  • Size: 67.7 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/6.2.0 CPython/3.11.13

File hashes

Hashes for mcp_python_repl-0.1.1.tar.gz
Algorithm Hash digest
SHA256 6bad093b544ce65c95f177b49d62eee1b357ecac20d851399371a8ceb77b1426
MD5 4500e1640e6b4c01e88149c36a5952ee
BLAKE2b-256 660349ceaf15d84d4e34c9a72c9c16ad29036d46cc0ee63a6ceec588cfdb1ad6

See more details on using hashes here.

File details

Details for the file mcp_python_repl-0.1.1-py3-none-any.whl.

File metadata

File hashes

Hashes for mcp_python_repl-0.1.1-py3-none-any.whl
Algorithm Hash digest
SHA256 c7f6441e2d8399c6acc3f2b9b72662fd4a87ee687c10ae874031256ae180314f
MD5 b0629bedf8b95c4809917bb3c187f887
BLAKE2b-256 46d9e9e47e7a9352f098ecd4a148d4623ec5bcec58c88d77a2e689f02dd509c8

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page