# box MCP server

> Runs MCP servers inside isolated Docker sandboxes with read-only filesystems and strict network policies to secure AI agent tool execution.

- Repository: https://github.com/lowcache/mcp-box
- Page: https://hostedmcp.org/servers/lowcache/mcp-box
- Transport: —
- Stars: 15
- License: MIT

## FAQ

### How does mcp-box protect my host system?

It uses Docker sandboxes with a read-only root filesystem, dropped Linux capabilities, and per-profile network policies to ensure only specifically mounted folders are writable.

### Do I need Nix to use mcp-box?

No, Nix is entirely optional. If Nix is not present, the tool automatically pulls pinned OCI images from the GitHub Container Registry.

### What are the main dependencies for running mcp-box?

The only hard requirement is Docker Engine, which must be active and running on your local host.