AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
MCP unreviewed MIT Self-run

Mcpd

mcp-substructureai-mcpd · by substructureai

Turn your sandbox into an MCP server

↗ Repository
— No reviews yet
0 installs
12 views
0.0% view→install

Install

$ agentstack add mcp-substructureai-mcpd

Open-source listing, not yet scanned by AgentStack. Follow the source repository for install instructions.

Security review

⚠ Flagged

1 finding(s); flagged for manual review. · v0.1.0 How review works →

  • • Prompt-injection patterns
  • • Secret / credential exfiltration
  • • Dangerous shell & filesystem operations
  • • Untrusted network calls
  • • Known-malicious package signatures
  • high Pipes remote content directly into a shell (remote code execution).

What it can access

  • ● Network access Used
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Reliability & compatibility

— Not yet reviewed
0 installs to date
— no reviews yet
● 25d ago

Declared compatibility

Claude CodeClaude DesktopCursorWindsurf

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Mcpd? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

mcpd

Built by substructure.ai

Pairs well with subs: an agent harness for the cloud.

Turn your sandbox into an MCP server.

Execute tools inside your sandbox, so your agent harness can run elsewhere.

Install

curl -fsSL https://subs.dev/mcpd.sh | bash

Quick start

Start an MCP server with a single bash tool:

mcpd --tool '{
  "name": "bash",
  "title": "Bash",
  "description": "Run a bash command. This is a sandbox environment you can use for anything.",
  "inputSchema": {
    "type": "object",
    "required": ["command"],
    "properties": {
      "command": { "type": "string", "description": "The command to run." }
    }
  },
  "_meta": {
    "dev.subs/exec": { "argv": ["/bin/bash", "-lc", "{command}"] }
  }
}' \
--no-auth \
--bind "127.0.0.1:8080"

Connect a harness

subs, in subs.toml. Declare the connection, then give it to an agent:

curl -fsSL https://subs.dev/cli.sh | bash
[mcp.sandbox]
url = "http://127.0.0.1:8080/mcp"

[agent.coder]
llm = "openrouter"
model = "deepseek/deepseek-v4-flash-0731"
system = "You are a coding agent."
mcp = ["mcp.sandbox"]

Hand the connection its token once. It never appears in the file:

subs auth mcp.sandbox
subs chat coder -c subs.toml

Claude Code

claude mcp add --transport http sandbox http://127.0.0.1:8080/mcp \
  --header "Authorization: Bearer $MCPD_TOKEN"

Codex, in ~/.codex/config.toml:

[mcp_servers.sandbox]
url = "http://127.0.0.1:8080/mcp"
bearer_token_env_var = "MCPD_TOKEN"

Cursor, in ~/.cursor/mcp.json or .cursor/mcp.json:

{
  "mcpServers": {
    "sandbox": {
      "url": "http://127.0.0.1:8080/mcp",
      "headers": { "Authorization": "Bearer ${env:MCPD_TOKEN}" }
    }
  }
}

More examples

See [examples/](examples/) for config that mimics the tools of other popular harnesses.

License

MIT — see [LICENSE](LICENSE).

Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Write a review

Versions

  • v0.1.0 Imported from the upstream source.

More in Integrations