onlyboxes

Name: onlyboxes Review
Item: onlyboxes
Rating: 2.0
Author: Aaron Matthews

Skill Communication Poor

Works inClaude Code

Poor Scanned — metadata only

Provides a sandboxed code execution environment for individuals and small teams via MCP, enabling safe AI-driven code execution without infrastructure comple…

Onlyboxes is a self-hosted code-execution sandbox for individuals and small teams. It runs a control-plane console plus horizontally scalable worker nodes and exposes its tools over both a REST API and MCP — pythonExec (run Python), terminalExec (stateful terminal sessions), and readImage (model-readable images) — so a client like Claude Code can run code in isolated, per-account containers.

Run Python from Claude in an isolated container via the pythonExec MCP tool
Open a stateful terminal session for multi-step commands via terminalExec
Give a small team account-isolated sandboxes for AI-driven code execution

41 starsAGPL-3.0 (check with legal)FreeQuick setup

Below standard — Significant caveats apply. Not recommended without careful review of the security and evaluation sections.

Why it matters

Provides a sandboxed code execution environment for individuals and small teams via MCP, enabling safe AI-driven code execution without infrastructure complexity.

Best for

Small teams and individual developers who need isolated code execution environments for AI workflows without managing cloud infrastructure.

Works in

Claude Code Claude Cowork Claude Chat

Source

https://github.com/Coooolfan/onlyboxes

By Coooolfan

How to Get It

Option 1: Claude Desktop App (Code Mode)Click the + button next to the prompt box → Plugins → Add plugin. Search and click Install. Skills work in Claude Code only.

Option 2: Paste into Claude CodeCopy the command below and paste it into your conversation. Claude will install it.

Instructions to paste into Claude

# Self-hosted, not a Claude plugin. Single-machine Linux deploy (needs Docker, Compose v2, systemd, Python 3):
curl -fsSL https://onlybox.es/install.sh | bash
# then add the MCP endpoint http://127.0.0.1:8089/mcp in Claude with an access token

First thing to try

After installing, paste this into Claude:

Help me run Python from Claude in an isolated container via the pythonExec MCP tool

CostFree

Trust Signals Auto-scanned

Stars41Contributors2Last updated2026-07-31LicenseAGPL-3.0 (check with legal)Known CVEsNone foundSources: GitHub Advisory Database + OSV.dev · Scanned 2026-08-05 · scanner vattempted-no-data

Community Pulse Active

Discussed on Hacker News, Reddit

[Dev] Giveaway 15 promo codes for Only Boxes KLWP Pro Presets — Reddit · 69 pts
[Promotion] Only Boxes for KLWP Pro Giveaway — Reddit · 13 pts
[Promotion] [KLWP] [THEME] ONLY BOXES FOR KLWP — Reddit · 5 pts

3 mentions across 1 sources

Reviewer notes

Auto-scanned review. These are observations, not a security certification.

catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 33 GitHub stars; 2 contributors; last commit 16d ago; license AGPL-3.0.

Things to check

Recently discovered. Looks promising but has limited community feedback so far. We added it early so you can evaluate it before the crowd finds it.
License (AGPL-3.0) may restrict commercial use. Check with your legal team.

How to evaluate tools before deploying →

Data shown here comes from public APIs and automated scanning. Reviewer notes reflect one person's experience. This is not a security certification or legal recommendation. Always evaluate tools according to your own organization's policies.

Evaluation Scores

Evaluation

Ease of Use

1/5

Versatility

2/5

Reliability

3/5

Security

3/5

Overall score2.05 / 5.00 PoorEvaluatedJul 2026

catalog_hygiene stale-eval refresh: Scored from trust signals (evidence-eval-v1): 33 GitHub stars; 2 contributors; last commit 16d ago; license AGPL-3.0.

← Back to the Claude Observatory