grade F

10 days ago

pulsemcp

Code Executor

Secure sandboxed TypeScript/Python execution with Docker isolation and token-efficient wrapper generation

→ aberemia24/code-executor-mcp · listed on pulsemcp

Install from

PulseMCP

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Reads files from sensitive locations

Touches: /.dockerenv, /.dockerenv

🚨

Known vulnerabilities in dependencies: 1 critical, 7 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 7 credentials: ANTHROPIC_API_KEY, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN, GEMINI_API_KEY, GROK_API_KEY, OPENAI_API_KEY, PERPLEXITY_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configALLOWED_PROJECTS— "": "/home/user/projects:/tmp"

🔐 secretANTHROPIC_API_KEY— 2. Direct Anthropic API (paid) - Fallback if MCP sampling unavailable (requires )

configAUDIT_LOG_PATH— "": "/home/user/.code-executor/audit.log",

configAWS_ACCESS_KEY_ID

🔐 secretAWS_SECRET_ACCESS_KEY

🔐 secretAWS_SESSION_TOKEN

configCODE_EXECUTOR_AI_BASE_URL

configCODE_EXECUTOR_AI_PROVIDER— echo "=gemini" >> .env

configCODE_EXECUTOR_ALLOWED_MODELS

configCODE_EXECUTOR_ALLOWED_MODELS_GEMINI

configCODE_EXECUTOR_ALLOWED_MODELS_OPENAI

configCODE_EXECUTOR_ALLOWED_SYSTEM_PROMPTS

configCODE_EXECUTOR_CONFIG_PATH

configCODE_EXECUTOR_CONTENT_FILTERING_ENABLED

configCODE_EXECUTOR_MAX_SAMPLING_ROUNDS— export =10

configCODE_EXECUTOR_MAX_SAMPLING_TOKENS— export =10000

configCODE_EXECUTOR_SAMPLING_ENABLED— export =true

configCODE_EXECUTOR_SAMPLING_TIMEOUT_MS

configCODE_EXECUTOR_SKIP_DANGEROUS_PATTERNS

configDATABASE_URL

configDB_HOST

configDB_PORT

configDENO_PATH— "": "/path/to/.deno/bin/deno"

configDOCKER_CONTAINER

configENABLE_AUDIT_LOG— "": "true",

configENABLE_HEALTH_CHECK

🔐 secretGEMINI_API_KEY— echo "=your_key_here" >> .env

🔐 secretGROK_API_KEY

configHEALTH_CHECK_HOST

configHEALTH_CHECK_PORT

configLOG_PATH

configMCP_CONFIG_PATH— "": "/full/path/to/this/.mcp.json",

configMYSQL_URL

🔐 secretOPENAI_API_KEY

🔐 secretPERPLEXITY_API_KEY

configPOOL_MAX_CONCURRENT

configPOOL_QUEUE_SIZE

configPOOL_QUEUE_TIMEOUT_MS

configPOSTGRES_URL

configPROJECT_ROOT

configPYTHON_SANDBOX_READY— export =true

configREDIS_URL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/aberemia24-code-executor-mcp-16hcgn)](https://m8ven.ai/mcp/aberemia24-code-executor-mcp-16hcgn)

commit: 9421b827dd26de8b441f7c60783f5d61578b2eb2

code hash: 1c981bc38bc30477d8fc33f8057ca512420923bc491e95ece3e3987d0ad1b2bd

verified: 4/11/2026, 1:50:14 PM

view raw JSON →