dsvxmedia/warden

Sandboxed, egress-controlled MCP server. Runs agent-requested shell commands inside a locked-down, ephemeral Docker container: non-root, capabilities dropped, read-only fs, resource-limited, no network by default, audit-logged before execution. Every security claim verified against a live container, not just documented.

0Stars on the repository
1Mods indexed here, across every type
29d agoLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown

warden

01

dsvxmedia/warden

MCP server Claude CodeCodexCursor +2

MCP server "warden" as configured in dsvxmedia/warden. Runs src/index.js with node.

0 29d ago A tokens not measured original MIT