Back to MCP Trust Indexm8ven
24
/ 100
1 month ago
pulsemcp

Code Executor

Secure sandboxed TypeScript/Python execution with Docker isolation and token-efficient wrapper generation

→ aberemia24/code-executor-mcp· npm: code-executor-mcp· 213 installs· listed on pulsemcp
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

PulseMCP

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 2 critical, 8 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 5 credentials: ANTHROPIC_API_KEY, GEMINI_API_KEY, GROK_API_KEY, OPENAI_API_KEY, PERPLEXITY_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies2 critical8 high1 medium5 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalhandlebars@4.7.8GHSA-2w6w-674q-4c4q

Handlebars.js has JavaScript Injection via AST Type Confusion

criticalvitest@4.0.8GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

high@modelcontextprotocol/sdk@1.22.0GHSA-345p-7cg4-v4c7

@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse

high@modelcontextprotocol/sdk@1.22.0GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@1.22.0GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configALLOWED_PROJECTS— "": "/home/user/projects:/tmp"
🔐 secretANTHROPIC_API_KEY— 2. Direct Anthropic API (paid) - Fallback if MCP sampling unavailable (requires )
configAUDIT_LOG_PATH— "": "/home/user/.code-executor/audit.log",
configCODE_EXECUTOR_AI_BASE_URL
configCODE_EXECUTOR_AI_PROVIDER— echo "=gemini" >> .env
configCODE_EXECUTOR_ALLOWED_MODELS
configCODE_EXECUTOR_ALLOWED_SYSTEM_PROMPTS
configCODE_EXECUTOR_CONFIG_PATH
configCODE_EXECUTOR_CONTENT_FILTERING_ENABLED
configCODE_EXECUTOR_MAX_SAMPLING_ROUNDS— export =10
configCODE_EXECUTOR_MAX_SAMPLING_TOKENS— export =10000
configCODE_EXECUTOR_SAMPLING_ENABLED— export =true
configCODE_EXECUTOR_SAMPLING_TIMEOUT_MS
configCODE_EXECUTOR_SKIP_DANGEROUS_PATTERNS
configDENO_PATH— "": "/path/to/.deno/bin/deno"
configDOCKER_CONTAINER
configENABLE_AUDIT_LOG— "": "true",
configENABLE_HEALTH_CHECK
🔐 secretGEMINI_API_KEY— echo "=your_key_here" >> .env
🔐 secretGROK_API_KEY
configHEALTH_CHECK_HOST
configHEALTH_CHECK_PORT
configMCP_CONFIG_PATH— "": "/full/path/to/this/.mcp.json",
🔐 secretOPENAI_API_KEY
🔐 secretPERPLEXITY_API_KEY
configPOOL_MAX_CONCURRENT
configPOOL_QUEUE_SIZE
configPOOL_QUEUE_TIMEOUT_MS
configPYTHON_SANDBOX_READY— export =true
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/code-executor-mcp-1t5r0a)](https://m8ven.ai/mcp/code-executor-mcp-1t5r0a)
commit: 9421b827dd26de8b441f7c60783f5d61578b2eb2
code hash: 1c981bc38bc30477d8fc33f8057ca512420923bc491e95ece3e3987d0ad1b2bd
verified: 6/27/2026, 8:51:07 AM
view raw JSON →