Enterprise Connectors
SandboxAPI logo. SandboxAPI MCP server connector.

SandboxAPI MCP Server

Execute code in 8 languages (Python, JS, TS, Go, Java, C++, C, Bash) in gVisor sandboxes.

Last Updated
Jan 1, 2024
Category
other
Enterprise-grade security
SSO & authentication ready
Full governance & audit logs

What is the SandboxAPI MCP Server?

The SandboxAPI MCP server gives AI agents structured, permission-aware access to SandboxAPI through the Model Context Protocol. With 0 pre-built actions, agents can read, create, and update SandboxAPI data on behalf of authorized users.

Willow ships the SandboxAPI MCP server as part of an enterprise control plane. Every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to a full audit trail, and integrates with Splunk and Loki for SIEM visibility. Connect from Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, or any custom agent. Install once, distribute org-wide, and see exactly how SandboxAPI is being used by every AI agent in your stack.

Customize Tools

Edit descriptions, modify arguments, select tools, or add new ones

Edit descriptions
Change arguments
Select tools
Create New

Set Up Your SandboxAPI MCP Server in Minutes

Add the following configuration to your MCP client. Authentication is handled via OAuth. Compatible with Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code, n8n, and any MCP-compatible agent.

Claude Desktop

claude_desktop_config.json
{
  "mcpServers": {
    "willow-io-github-michielderuiter-sandboxapi-mcp": {
      "type": "http",
      "url": "https://<org>.mcp-s.com/mcp/mcp/io-github-michielderuiter-sandboxapi-mcp"
    }
  }
}

Cursor

.cursor/mcp.json
{
  "mcpServers": {
    "willow-io-github-michielderuiter-sandboxapi-mcp": {
      "type": "http",
      "url": "https://<org>.mcp-s.com/mcp/mcp/io-github-michielderuiter-sandboxapi-mcp"
    }
  }
}

Claude Code

CLI
claude mcp add willow-io-github-michielderuiter-sandboxapi-mcp --transport http https://<org>.mcp-s.com/mcp/mcp/io-github-michielderuiter-sandboxapi-mcp

n8n

HTTP Request Node
{
  "url": "https://<org>.mcp-s.com/mcp/mcp/io-github-michielderuiter-sandboxapi-mcp",
  "method": "POST"
}

Or click "Install with Willow" above to set up automatically with SSO and RBAC preconfigured.

Enterprise Governance for SandboxAPI

Willow adds the layer SandboxAPI and every other SaaS doesn't ship out of the box: every call runs behind SSO (Okta, Azure AD), enforces RBAC and least-privilege at runtime, writes to full audit logs, and detects shadow AI usage across your stack. One MCP gateway. Any agent. Every tool.

SandboxAPI MCP Server FAQ

What is the SandboxAPI MCP server?

The SandboxAPI MCP server is a Model Context Protocol implementation that lets AI agents like Claude, Cursor, and ChatGPT read and write SandboxAPI data through a standardized interface. Willow hosts and governs this server so enterprises can roll it out without a security review backlog.

How is Willow's SandboxAPI MCP server different from the official one?

The official SandboxAPI MCP server is scoped to a single user's account and does not include enterprise governance. Willow's version adds SSO, RBAC, audit logging, shadow AI detection, and centralized control over which actions agents can take across the entire org.

Which AI clients work with the SandboxAPI MCP server?

Claude Desktop, Claude Code, Cursor, ChatGPT, VS Code with MCP support, n8n, and any custom agent built with OpenAI Agents SDK, LangChain, Vercel AI SDK, or Anthropic SDK.

Is the SandboxAPI MCP server secure? How does Willow handle authentication?

Every call runs behind your existing SSO (Okta, Azure AD). Per-user OAuth scopes the agent to exactly what that user can do in SandboxAPI, nothing more. No credentials reach the LLM. Every action writes to an audit trail.

Can I limit which SandboxAPI actions agents can take?

Yes. Willow lets you scope agents to specific actions, specific projects, or specific environments. Toggle actions on or off in the dashboard, or enforce policy via infrastructure-as-code through GitHub.

How do I detect shadow SandboxAPI MCP servers in my org?

Willow's browser extension and discovery service surface unmanaged MCP servers, skills, and AI agents across the org. If a developer installed an unapproved SandboxAPI MCP locally, you'll see it.

What does the SandboxAPI MCP server cost?

Pricing depends on org size and deployment model (SaaS, dedicated cloud, self-host). See withwillow.ai/pricing or contact sales for a quote.

How do I install the SandboxAPI MCP server with Willow?

Install via the Willow Connect Panel in one click, or paste the JSON snippet above into your Claude Desktop, Cursor, or Claude Code config. SSO and RBAC inherit from your existing Willow setup.

Compare Willow MCP Gateway

See how Willow stacks up against other MCP platforms on governance, security, and enterprise readiness.

Your agents are already in the wild.

Give them a Basecamp. Go from AI chaos to AI work, in minutes.

SandboxAPI MCP Server | Willow