Eryx

What it does

Eryx provides a highly secure, Wasmtime-powered sandbox for executing untrusted Python code. It allows developers to embed a full CPython 3.14 environment within Rust, Python, or JavaScript applications while maintaining strict control over memory, CPU, and networking. It is designed for scenarios where user-provided scripts must be run safely without compromising the host system.

Tools

• execute: Runs a Python script in a secure sandbox and returns stdout/stderr.
• session_manage: Persists Python state between executions for REPL-style interaction.
• callback_registry: Defines strongly-typed async functions the sandboxed Python can call on the host.
• snapshot_state: Captures and restores the entire Python runtime state via serialization.

Installation

Eryx is typically used as a library. For the MCP server implementation, add the corresponding binary to your claude_desktop_config.json once installed via cargo.

Supported hosts

• Claude Desktop