python-interpreter-mcp: A MCP server to run scripts
Overview
A lightweight, experimental MCP server designed to execute arbitrary Python scripts in a structured and reproducible environment. It leverages uv to run isolated code snippets through subprocesses.
Tools
run_script- Runs the given script with
uv run script.py. - Input:
code(str): Script to be run
- Return: The stdout of the given script.
- Runs the given script with
Configuration
Usage with OpenAI Agents SDK
async with MCPServerStdio(
params={
"command": "uvx",
"args": ["python-interpreter-mcp"],
}
) as server
...
Usage with Claude Desktop
Add this to your claude_desktop_config.json:
"mcpServers": {
"interpreter": {
"command": "uvx",
"args": ["python-interpreter-mcp"]
}
}
How it works
- A script string is received by the MCP tool
run_script. - A hidden folder is created in cwd, and the script is saved as a
.pyfile inside it. - The script is then executed using
uv run, which ensures dependency isolation. - The stdout of the script is captured and returned as the response.
Usage Warnings
This project is in a very early stage of development.
⚠️ Important notes
- It executes arbitrary Python code, which means it can run anything — including malicious or destructive commands.
- Use only in trusted, sandboxed environments.
- You should always validate, guardrail, or restrict inputs when wiring this into an LLM.
Metadata
Release files for python-interpreter-mcp 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| python_interpreter_mcp-0.1.0.tar.gz | 10.3 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| python_interpreter_mcp-0.1.0-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 14.1 kB
Release files / python_interpreter_mcp-0.1.0.tar.gz
| Download URL | python_interpreter_mcp-0.1.0.tar.gz |
|---|---|
| Size | 10.3 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
55249e32e5e91c300cf87b87ecf2d16334d4e49c2c9d5d6963c5307c55cdb9a3
|
|
BLAKE2b-256 checksum How to use checksums |
836ab37a96c7a9f97a36d0aae157b7933d53118347cb8c2644ca2331531bcea0
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.6.14
|
Release files / python_interpreter_mcp-0.1.0-py3-none-any.whl
| Download URL | python_interpreter_mcp-0.1.0-py3-none-any.whl |
|---|---|
| Size | 3.8 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
b6e9895b21c5fea066161460101aa1ff63659274b55d2cb82fbe61c0dccc0404
|
|
BLAKE2b-256 checksum How to use checksums |
8bf03f271e6b489dc096e1115771344f0619ac7932e1105e7f4c6dd1a335fd3b
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
uv/0.6.14
|
Security for python-interpreter-mcp 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.