pypi ipyboxstdioApache-2.0updated 2mo ago
ipybox is a unified execution environment for Python code, shell commands, and programmatic MCP tool calls.
What can you do with ipybox?
ipybox
mcp-name: io.github.gradion-ai/ipybox
ipybox is a unified execution environment for Python code, shell commands, and programmatic MCP tool calls.
Overview
ipybox executes code blocks in a stateful IPython kernel. A code block can contain any combination of Python code, shell commands, and programmatic MCP tool calls. Kernels can be sandboxed with sandbox-runtime, enforcing filesystem and network restrictions at OS level.
It generates Python APIs for MCP server tools via mcpygen, and supports application-level approval of individual tool calls and shell commands during code execution. ipybox runs locally on your computer, enabling protected access to your local data and tools.
[!NOTE] Next generation ipybox
This is the next generation of ipybox, a complete rewrite. Older versions are maintained on the 0.6.x branch and can be obtained with
pip install ipybox<0.7.
Documentation:
- 📚 Documentation
- 🏗️ Architecture
- 🤖 llms.txt
- 🤖 llms-full.txt
Capabilities
| Capability | Description |
|---|---|
| Stateful execution | State persists across executions in IPython kernels |
| Unified execution | Combine Python code, shell commands, and programmatic MCP tool calls in a code block |
| Shell command execution | Run shell commands via !cmd syntax, capture output into Python variables |
| Programmatic MCP tool calls | MCP tools called via generated Python API ("code mode"), not JSON directly |
| Python tool API generation | Typed functions and Pydantic models generated from MCP tool schemas via mcpygen |
| Application-level approval | Individual approval of tool calls and shell commands during code execution |
| Lightweight sandboxing | Optional kernel isolation via Anthropic's sandbox-runtime |
| Local execution | No cloud dependencies, everything runs locally on your machine |
Usage
| Component | Description |
|---|---|
| Python SDK | Python API for building applications on ipybox |
| MCP server | ipybox as MCP server for code actions and programmatic tool calling |
| Claude Code plugin | Plugin that bundles the ipybox MCP server and a code action skill |
[!TIP] Freeact agent
Freeact is a general-purpose agent built on ipybox.
Install
Add ipybox to your client. Pick the one you use.
claude mcp add ipybox -- uvx ipyboxcodex mcp add ipybox -- uvx ipyboxamp mcp add ipybox -- uvx ipybox{
"mcpServers": {
"ipybox": {
"command": "uvx",
"args": [
"ipybox"
]
}
}
}Add to `claude_desktop_config.json`, then restart Claude Desktop.
{
"mcpServers": {
"ipybox": {
"command": "uvx",
"args": [
"ipybox"
]
}
}
}Add to `~/.cursor/mcp.json`, or `.cursor/mcp.json` for a single project.
code --add-mcp '{"name":"ipybox","command":"uvx","args":["ipybox"]}'Or add the block manually to `.vscode/mcp.json` under `servers`.
{
"mcpServers": {
"ipybox": {
"command": "uvx",
"args": [
"ipybox"
]
}
}
}Add to `~/.codeium/windsurf/mcp_config.json`.
{
"mcpServers": {
"ipybox": {
"command": "uvx",
"args": [
"ipybox"
]
}
}
}Add to `cline_mcp_settings.json` via the MCP Servers panel.
{
"mcpServers": {
"ipybox": {
"command": "uvx",
"args": [
"ipybox"
]
}
}
}Add to `~/.gemini/settings.json`.
{
"mcpServers": {
"ipybox": {
"type": "local",
"command": "uvx",
"args": [
"ipybox"
],
"tools": [
"*"
]
}
}
}Add to `~/.copilot/mcp-config.json`, or run `/mcp add` inside the CLI.
{
"context_servers": {
"ipybox": {
"command": {
"path": "uvx",
"args": [
"ipybox"
]
}
}
}
}Add to your Zed `settings.json`.
uvx ipyboxRun `goose configure`, choose **Add Extension → Command-line Extension**, and paste this command.
Score
39 / 100
Incomplete
- Documentation12/25
- Maintenance22/25
- Trust16/20
- Capability0/15
- Install experience12/15
- Documents what it does and how to connect
- Has a resolvable package or endpoint
- Exposes at least one tool, prompt or resource
- README has substantive content
- Includes a code example
- Documents its configuration
- Mentions credentials or security posture
- Last commit 82 days ago
- Has a release history
- Repository is not archived
- Licensed Apache-2.0
- Namespace verified in the official MCP registry
- Claimed by its owner
- Published under an organisation
- 0 tool(s) documented
- Provides prompt templates
- Provides resources
- 12 documented install method(s)
- Published to a package registry
- Offers a hosted endpoint — no local install
Version history
| Versions | Published |
|---|---|
| 0.9.2Latest | Jun 1, 2026 |
| 0.9.1 | Mar 24, 2026 |
| 0.9.0 | Mar 21, 2026 |
| 0.8.2 | Mar 15, 2026 |
| 0.8.1 | Mar 13, 2026 |
| 0.8.0 | Mar 4, 2026 |
| 0.7.7 | Mar 3, 2026 |
| 0.7.6 | Mar 2, 2026 |
| 0.7.5 | Feb 21, 2026 |
| 0.7.4 | Feb 9, 2026 |
| 0.7.3 | Feb 5, 2026 |
| 0.7.2 | Jan 5, 2026 |
| 0.7.1 | Dec 10, 2025 |
| 0.7.0 | Dec 9, 2025 |
| 0.6.7 | Nov 25, 2025 |
| 0.6.6 | Sep 14, 2025 |
| 0.6.5 | Sep 14, 2025 |
| 0.6.3-p2 | Sep 14, 2025 |
| auto | Sep 14, 2025 |
| 0.6.3-p1 | Sep 14, 2025 |
| 0.6.3 | Sep 13, 2025 |