docker-aicodebox
Agent-agnostic base image for putting any terminal AI coding agent (claude-code, pi, opencode...) on the network. Bolt on a 20-line adapter, get an HTTP API, OpenAI-compatible /v1/chat/completions, MCP server, Telegram bot, and cron scheduler. One container. Same surfaces. Swap the brain — you don't fork this, you FROM it.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
psyb0t
Source: github_repo_search
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
AICODEBOX_MCP_MODE_PORTruns as a sidecar uvicorn on AICODEBOX_MCP_MODE_PORT (default 8081)AICODEBOX_MCP_MODEPOST /mcp — MCP server (mounted only when =1; auth via AICODEBOX_MCP_MODE_TOKEN, separate from the API bearer)AICODEBOX_API_MODE_PORTAICODEBOX_API_MODE=1. Boots a FastAPI server on :8080 (override with ) with:AICODEBOX_ADAPTERpkg.module:Class reference to your AgentAdapter subclassAICODEBOX_AVAILABLE_MODELSRequired for API mode. CSV list returned by /openai/v1/models and shown in the telegram /model picker. API mode refuses to boot without it; telegram /model picker degrades to a "set this env var" reply.AICODEBOX_AVAILABLE_EFFORTSOverride the effort/--thinking list exposed via /effort (comma-separated)ANTHROPIC_MODELAICODEBOX_WORKSPACERoot dir for all per-chat / per-job workspacesAICODE_WORKSPACEAICODEBOX_TELEGRAM_MODE_TOKENAICODEBOX_TELEGRAM_MODE=1 + =<bot:token>. Drop the bot into a chat, talk to it, get answers. Features:AICODEBOX_CRON_MODE_FILEAICODEBOX_CRON_MODE=1 + =/path/to/cron.yaml. 6-field croniter schedules, per-job workspace, optional telegram notification.AICODEBOX_CRON_MODE1 + AICODEBOX_CRON_MODE_FILE=/path/to/cron.yaml. 6-field croniter schedules, per-job workspace, optional telegram notification.AICODEBOX_TELEGRAM_MODE_CONFIGPath to the telegram config yamlTELEGRAM_CHAT_IDAICODEBOX_CRON_MODE_HISTORY_DIRWhere each run writes meta.json, stdout.log, stderr.log, result.txtAICODEBOX_TELEGRAM_MODE_OVERRIDESPer-chat override store (model/effort/system prompts)Tool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
5/5 tools missing one or more hints — run_prompt (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_files (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); read_file (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +2 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Destructive tools are labelled
1 tool perform destructive updates without destructiveHint — delete_file deletes at line 171 (os.remove(full))
Add destructiveHint:true to any tool whose handler calls .delete(), .upsert(), .update(), unlink, rm, DELETE, DROP, REPLACE INTO, or any operation that overwrites existing data.
Tool test coverage
Only 1/5 tools referenced in tests (20%)
Write tests that reference each tool by name so every tool has at least one test.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/psyb0t/docker-aicodebox)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check