# Boxlite Mcp

> Powered by BoxLite - embeddable sandbox with hardware-level isolation and no daemon. The SQLite of sandbox, coming soon as open source.

- **Type:** MCP server
- **Install:** `agentstack add mcp-boxlite-ai-boxlite-mcp`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [boxlite-ai](https://agentstack.voostack.com/s/boxlite-ai)
- **Installs:** 0
- **Category:** [Databases](https://agentstack.voostack.com/c/databases)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [boxlite-ai](https://github.com/boxlite-ai)
- **Source:** https://github.com/boxlite-ai/boxlite-mcp
- **Website:** https://boxlite-labs.github.io/website/

## Install

```sh
agentstack add mcp-boxlite-ai-boxlite-mcp
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# boxlite-mcp

MCP server providing isolated sandbox environments for AI agents.

## The Problem

Today's AI apps don't just generate text – they write and run code, call tools, read your files, and hit the network. Running all of this directly on your machine creates real risks:

- **Security** - Malicious or buggy code can damage your system
- **Privacy** - Sensitive files and credentials are exposed
- **Reliability** - Runaway processes can consume resources or crash your machine

BoxLite solves this by giving AI agents their own isolated VM – full freedom inside, complete safety outside.

## Powered by BoxLite

[BoxLite](https://boxlite-labs.github.io/website/) is an embeddable virtual machine runtime that follows the SQLite philosophy - simple, lightweight, and zero-configuration.

### Why BoxLite?

- **Hardware-level isolation** - True VM security, not just containers. Your AI agent runs in a completely isolated environment.
- **No daemon required** - Unlike Docker, BoxLite doesn't need a background service. Just import and use.
- **Embeddable** - Designed to be embedded directly into your applications, like SQLite for compute.
- **Fast startup** - VMs boot in seconds, not minutes.
- **Cross-platform** - Works on macOS and Linux.

### Use Cases

- **AI Agent Sandboxing** - Let AI agents execute code, browse the web, and use applications safely
- **Secure Code Execution** - Run untrusted code without risk to your host system
- **Browser Automation** - Headless browser with CDP for web scraping and testing
- **Development Environments** - Disposable, reproducible dev environments

## Demo

[▶️ Watch the demo on YouTube](https://youtu.be/JjwLg6ww234)

https://github.com/user-attachments/assets/0685d428-64e4-4a68-adfe-c24dc0dc5ae8

## Available Tools

| Tool | Description |
|------|-------------|
| `computer` | Full Ubuntu desktop with XFCE. Anthropic computer use API compatible. |
| `browser` | Chromium browser with CDP endpoint for Puppeteer/Playwright/Selenium |
| `code_interpreter` | Python code execution sandbox |
| `sandbox` | Generic container for running shell commands |

## Quick Start

### Claude Code

```bash
claude mcp add boxlite -- uvx boxlite-mcp
```

### Claude Desktop

Add to your Claude Desktop configuration (`~/Library/Application Support/Claude/claude_desktop_config.json` on macOS):

```json
{
  "mcpServers": {
    "boxlite": {
      "command": "uvx",
      "args": ["boxlite-mcp"]
    }
  }
}
```

### Manual Installation

```bash
pip install boxlite-mcp
```

## Development

```bash
git clone https://github.com/boxlite-labs/boxlite-mcp.git
cd boxlite-mcp
uv sync --extra dev
uv run pytest
```

### Connect Local Server to Claude Code

```bash
claude mcp add boxlite -s local \
  -e BOXLITE_HOME=$HOME/.boxlite-mcp \
  -- uv run --directory /path/to/boxlite-mcp python -m server
```

> **Note:** Environment variables must be passed via `-e`, not inline in the args. MCP stdio servers bypass the shell, so `VAR=value command` syntax won't work.

### Connect Local Server to Claude Desktop

Add to `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS):

```json
{
  "mcpServers": {
    "boxlite": {
      "command": "uv",
      "args": ["run", "--directory", "/path/to/boxlite-mcp", "python", "-m", "server"],
      "env": {
        "BOXLITE_HOME": "/path/to/.boxlite-mcp"
      }
    }
  }
}
```

## License

Apache-2.0

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [boxlite-ai](https://github.com/boxlite-ai)
- **Source:** [boxlite-ai/boxlite-mcp](https://github.com/boxlite-ai/boxlite-mcp)
- **License:** Apache-2.0
- **Homepage:** https://boxlite-labs.github.io/website/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-boxlite-ai-boxlite-mcp
- Seller: https://agentstack.voostack.com/s/boxlite-ai
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.