Skip to content

GraalPy sandboxed MCP server#57

Draft
msimacek wants to merge 16 commits intomainfrom
msimacek/mcp
Draft

GraalPy sandboxed MCP server#57
msimacek wants to merge 16 commits intomainfrom
msimacek/mcp

Conversation

@msimacek
Copy link
Contributor

Add a MCP server that provides the ability to evaluate python code in a sadboxed envrionment. The sandboxing options are configurable. See the added README for usage.

@oracle-contributor-agreement oracle-contributor-agreement bot added the OCA Verified All contributors have signed the Oracle Contributor Agreement. label Feb 26, 2026
environment. It supports the full Python language including the standard library and third-party packages without
native (C/rust) extensions.

# Sandboxing
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

## Sandbox Characteristics

This section reads less like a conceptual explanation of sandboxing and more like a list of current constraints / limits. I would suggest one of these:
Sandbox Characteristics
Sandboxing: Current Implementation
Sandboxing Capabilities and Limits
Current Sandboxing Behavior


# Sandboxing

- Each tool invocation is ran as a separate GraalVM isolate, with an independent heap. The maxiumum heap size is limited
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

is ran -> is run


# Sandboxing

- Each tool invocation is ran as a separate GraalVM isolate, with an independent heap. The maxiumum heap size is limited
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maxiumum -> maximum

# Virtual environments and third-party package support

It is possible to make the MCP server use a virtual environment with third-party packages that don't contain native
extensions. The virtual environment must be created using a GraalPy standalone distribution of the same version as this
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggestion for the second sentence:

The virtual environment must be created using a GraalPy standalone distribution that matches the version of the MCP server.

Copy link
Member

@olyagpl olyagpl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Text review from docs team :)

Co-authored-by: Olga Gupalo <olga.gupalo@oracle.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

OCA Verified All contributors have signed the Oracle Contributor Agreement.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants