sandbox_createLABSCO SUMMARY
Secrets can be attached but never created or read through the model.
That line is drawn on purpose: the server binds existing team secrets to a sandbox under an environment variable, and secret_list returns metadata only — raw values stay in the SDK and console rather than an agent transcript. Combine that with per-sandbox egress rules and the network log, and an agent running unreviewed code has a boundary you can inspect afterwards.
What it is
An MCP server for Superserve sandboxes: isolated Firecracker microVMs created, driven and destroyed from any MCP client, targeted per call by sandbox id.
What you get
- sandbox_create, sandbox_list, sandbox_info, sandbox_update and sandbox_kill — lifecycle, with metadata filters and egress rules you can change after creation
- sandbox_exec — run a shell command and get stdout, stderr and the exit code; it auto-resumes a paused sandbox
- sandbox_files_read, sandbox_files_write, sandbox_files_list and sandbox_files_download_dir — file access, with a 1 MiB read cap, 8 MiB inline write cap and 10 MiB zipped directory download
- sandbox_pause and sandbox_resume — state is preserved while paused
- sandbox_preview_url — publish a port and get a public or private signed URL back
- sandbox_network_log — audit what the sandbox connected out to
- sandbox_template_list and sandbox_template_create — prebuilt base images, and custom ones with your own vCPU, memory and disk shape
- secret_list, sandbox_attach_secret and sandbox_detach_secret — bind stored team secrets to a sandbox under an env var; secret creation is deliberately not exposed
Requirements
A Superserve API key in SUPERSERVE_API_KEY, set in the client's env block — clients do not inherit it from your shell. Runs locally over stdio via npx @superserve/mcp, or as a hosted Streamable HTTP endpoint at https://mcp.superserve.ai with the key as a bearer token. The hosted endpoint does not support OAuth yet, so clients that require it will not connect.
Setup effort
One command plus a key — npx -y @superserve/mcp, then supply credentials
USE CASES
01
Running code you do not trust
Create a sandbox with egress rules, execute inside it, then delete the whole machine.
02
Showing someone what you just built
Publish the port the app is listening on and hand over a signed preview URL.
03
Getting the output back to your machine
Read a single file, or download a whole directory as a zip.
04
Letting a job use an API key without exposing it
Bind a stored team secret to the sandbox as an env var; the value never enters the conversation.
19 tools
Listed in project docs. Your client may show a different list.
sandbox_updatesandbox_listsandbox_infosandbox_execsandbox_files_readsandbox_files_writesandbox_files_listsandbox_files_download_dirsandbox_pausesandbox_resumesandbox_killsandbox_preview_urlsandbox_network_logsandbox_template_listsandbox_template_createsecret_listsandbox_attach_secretsandbox_detach_secretBEFORE YOU INSTALL
What to know first
Tools you get
19 tools named in the project's documentation.
Requires
- npx on PATH
- SUPERSERVE_API_KEY in your environment
Where it runs
All 6 documented clients run the server on your machine.
INSTALLATION
Connect your client
Server setup
npx
TERMINAL
npx -y @superserve/mcpHosted endpoint
ENDPOINT URL
https://mcp.superserve.aiAdd this hosted endpoint to your MCP client using the credentials listed under Requirements.
MCP Clients
Claude Code
CLAUDE CODE · TERMINAL
claude mcp add superserve --env SUPERSERVE_API_KEY=<YOUR_SUPERSERVE_API_KEY> -- npx -y @superserve/mcpClaude Desktop, Cursor, Windsurf
JSON
{
"mcpServers": {
"superserve": {
"command": "npx",
"args": [
"-y",
"@superserve/mcp"
],
"env": {
"SUPERSERVE_API_KEY": "<YOUR_SUPERSERVE_API_KEY>"
}
}
}
}VS Code
VS CODE · JSON
{
"inputs": [
{
"id": "superserve-key",
"type": "promptString",
"description": "Superserve API key",
"password": true
}
],
"servers": {
"superserve": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@superserve/mcp"
],
"env": {
"SUPERSERVE_API_KEY": "${input:superserve-key}"
}
}
}
}Codex
CODEX · TOML
[mcp_servers.superserve]
command = "npx"
args = ["-y", "@superserve/mcp"]
env_vars = ["SUPERSERVE_API_KEY"]
