kiln-ai/kilntainers

为每个代理提供一个临时的Linux沙盒——通过MCP

Kilntainers 是一个 MCP 服务器，为 LLM 代理提供隔离的 Linux 沙盒以执行 shell 命令。

• 🧰 多个后端： 容器（Docker、Podman）、云托管的微型虚拟机（Modal、E2B）和WebAssembly沙箱（WASM BusyBox，或任何WASM模块）。
• 🏝️ 每个代理者隔离： 每个代理都有自己的专用沙箱——没有共享状态，也没有交叉污染。
• 🧹 Ephemeral： 沙盒在MCP会话期间持续运行，随后自动关闭并清理。
• 🔒 设计上安全： 代理通过MCP与沙箱通信——它不运行在内部。不会向沙箱暴露代理的API密钥、代码或提示。
• 🔌 简单的MCP接口： 一个MCP工具sandbox_exec，允许您的代理运行任何Linux命令。
• 📈 可扩展： 从笔记本上的几个代理扩展到数千个并行运行的云端。

为什么是窑炉？

代理已经非常擅长终端操作，通过利用常见的Linux工具如grep、find、jq、awk等，可以节省数千个令牌。

Give Every Agent an Ephemeral Linux Sandbox — via MCP

Kilntainers is an MCP server that gives LLM agents isolated Linux sandboxes for executing shell commands.

• 🧰 Multiple backends: Containers (Docker, Podman), cloud-hosted micro-VMs (Modal, E2B), and WebAssembly sandboxes (WASM BusyBox, or any WASM module).
• 🏝️ Isolated per agent: Every agent gets its own dedicated sandbox — no shared state, no cross-contamination.
• 🧹 Ephemeral: Sandboxes live for the duration of the MCP session, then are shut down and cleaned up automatically.
• 🔒 Secure by design: The agent communicates with the sandbox over MCP — it doesn’t run inside it. No agent API keys, code, or prompts are exposed to the sandbox.
• 🔌 Simple MCP interface: A single MCP tool, sandbox_exec, lets your agent run any Linux command.
• 📈 Scalable: Scale from a few agents on your laptop to thousands running in parallel in the cloud.

Why Kilntainers?

Agents are already excellent at using terminals, and can save thousands of tokens by leveraging common Linux utilities like grep, find, jq, awk, etc. However giving an agent access to the host OS is a security nightmare, and running thousands of parallel agents on a service is painful. Kilntainers gives every agent its own isolated, ephemeral sandbox.

Quick Start

Install and run from CLI:

# install
uv tool install kilntainers
# starts with defaults: stdio MCP server, Docker, and Debian-slim (see options below)
kilntainers

Add to your MCP client (Claude, Cursor, etc.):

{
  "mcpServers": {
    "kilntainers": {
      "command": "kilntainers"
    }
  }
}

How It Works