Skip to directory

Cloudflare Container Sandbox MCP

Cloudflare

Streamable HTTP7 documented tools9

About Cloudflare Container Sandbox MCP

Cloudflare’s hosted MCP server provisions short-lived per-user containers where an AI client can run code, manage files, and inspect or clone repositories.

What you can use it for

  • Run short-lived Python or Node tasks in an isolated sandbox.
  • Explore or process user-provided data inside the sandbox.
  • Create and inspect generated files.
  • Clone and inspect a repository and run development commands in the temporary environment.
Connection and setup
Hosting
remote
Transport
Streamable HTTP
Endpoint
https://containers.mcp.cloudflare.com/mcp
Authentication
Cloudflare OAuth, completed in the client browser when prompted. The repository says OAuth is built in.

Requirements

  • An MCP client that supports remote Streamable HTTP and OAuth.
  • A Cloudflare account for OAuth authorization.
  • Sandbox contents are ephemeral; the repository guarantees container lifetime only for approximately 10 minutes.

Setup steps

  1. Add remote MCP endpoint https://containers.mcp.cloudflare.com/mcp to the client using Streamable HTTP or automatic transport detection.
  2. Complete Cloudflare OAuth in the browser when prompted.
  3. Call container_initialize to start/restart the sandbox.
  4. Use container_file_write/container_exec for the requested work and container_file_read/container_files_list to inspect outputs. The container may not persist beyond about 10 minutes.
  5. Avoid destructive file or shell actions unless explicitly requested; container_file_delete and container_exec can change or remove sandbox contents. No connection test was performed.
Tools 7

Cloudflare maintainer README lists all seven stored tools for ephemeral container lifecycle, file access and command execution.

  • container_initialize

    (Re)start the user sandbox container; the README says containers are ephemeral and only guaranteed to last about 10 minutes.

    01
  • container_ping

    Ping a container for connectivity.

    02
  • container_file_write

    Write a file in the container.

    03
  • container_files_list

    List files in the work directory.

    04
  • container_file_read

    Read a file or directory.

    05
  • container_file_delete

    Delete a file or directory.

    06
  • container_exec

    Run a shell command in the container; can execute arbitrary code.

    07
Limitations and notes
  • Containers are ephemeral, do not save state, and are only guaranteed to last approximately 10 minutes. Save needed outputs outside the sandbox before it expires.
  • container_exec runs shell commands and can run arbitrary code; file write/delete tools modify sandbox data.
  • The repository marks the service work in progress and says tools may be added. The list is complete as of the checked source, not a guarantee against future changes.
  • No exact tool input/output JSON schemas, rate limits, or per-user plan restrictions for the hosted MCP were documented in the inspected pages. Cloudflare
  • The older /sse URL is an alias to Streamable HTTP, not the deprecated HTTP+SSE transport; prefer /mcp.
  • No connection test was performed.
Original sources
  • official tool reference

    Cloudflare maintainer README lists seven tools for container lifecycle, files and shell execution. The sandbox is ephemeral, OAuth protected, and arbitrary code execution occurs inside its container.

  • official documentation or source

    Cloudflare maintainer README lists seven tools for container lifecycle, files and shell execution. The sandbox is ephemeral, OAuth protected, and arbitrary code execution occurs inside its container.

Documentation checked 2026-10-28T13:04:25.000Z. Connection has not been runtime tested.

Similar tools