Kilntainers is an MCP server that gives LLM agents isolated Linux sandboxes for executing shell commands.
🧰 Multiple backends: Containers (Docker, Podman), cloud-hosted micro-VMs (Modal, E2B), and WebAssembly sandboxes (WASM BusyBox, or any WASM module).
🏝️ Isolated per agent: Every agent gets its own dedicated sandbox — no shared state, no cross-contamination.
🧹 Ephemeral: Sandboxes live for the duration of the MCP session, then are shut down and cleaned up automatically.
🔒 Secure by design: The agent communicates with the sandbox over MCP — it doesn’t run inside it. No agent API keys, code, or prompts are exposed to the sandbox.
🔌 Simple MCP interface: A single MCP tool, sandbox_exec, lets your agent run any Linux command.
📈 Scalable: Scale from a few agents on your laptop to thousands running in parallel in the cloud.