A fully-featured, GUI-powered local LLM Agent sandbox with complete MCP protocol support. Features both CLI and full desktop environment, enabling AI agents to operate browsers, terminal, and other desktop applications just like humans. Based on E2B oss code.

EdgeBox - The Local Desktop Sandbox for AI Agents

Release简体中文

A fully-featured, GUI-powered local LLM Agent sandbox with complete support for the MCP protocol.

Empower your Large Language Models (LLMs) with true "Computer Use" capabilities.

EdgeBox is a powerful desktop application that brings the cloud-based sandbox capabilities of E2B (e2b.dev) to your local machine. Based on the open-source E2B Code Interpreter project, EdgeBox transforms the sandbox into a locally-running environment, giving you full control over your AI agent's development and execution environment.

What makes EdgeBox unique: While most open-source sandbox projects only provide a terminal/CLI, EdgeBox offers both a command-line shell AND a full graphical (GUI) desktop environment via an integrated VNC viewer. This means your LLM Agent is no longer just a code executor—it's a digital worker that can operate browsers, use VS Code, and interact with desktop applications, just like a human.

The EdgeBox Main Application Dashboard

Computer Use Demo: types "google.com", presses Enter, and captures screenshot - showing computer use capabilities.

🤔 Why Choose EdgeBox?

Feature EdgeBox Other OSS Sandboxes (e.g., codebox)
Environment 🖥️ Local 🖥️ Local
Interface GUI + CLI CLI-Only
Capability Computer Use & Code Interpreter Code Interpreter
Data Privacy 100% Private ✅ 100% Private
Latency ⚡️ Near-Zero ⚡️ Near-Zero
Integration MCP Compliant Proprietary API

📖 Table of Contents

  • EdgeBox - The Local Desktop Sandbox for AI Agents
    • 🤔 Why Choose EdgeBox?
    • 📖 Table of Contents
    • 🚀 Core Features
      • 1. 💻 Full Desktop Environment (Computer Use)
      • 2. 🐚 Complete Code Interpreter & Shell
      • 3. 🔗 Seamless LLM Agent Integration (via MCP)
    • 🛠️ Available MCP Tools
      • 📟 Core Tools (CLI Mode - Always Available)
      • 🖱️ Desktop Tools (GUI Mode - When GUI Tools Enabled)
    • 🏗️ Architecture
    • 📋 Prerequisites
    • 🛠️ Installation
    • 🎯 Usage
      • Quick Start
      • MCP Client Configuration
      • Instructing Your LLM Agent
      • Multi-Session Concurrent Sandboxes
    • 🔐 Security
    • 📄 License
    • 🙏 Acknowledgments
    • 🔗 Related Projects
    • 📞 Support

🚀 Core Features

EdgeBox exposes all its capabilities through the MCP protocol, organized into three core modules for your LLM Agent.

1. 💻 Full Desktop Environment (Computer Use)

  • VNC Remote Desktop: Access a complete, interactive Ubuntu desktop environment.
  • Pre-installed Applications: Comes with Google Chrome, VS Code, and other essential tools out of the box.
  • GUI Automation: Your agent can programmatically control the mouse and keyboard to interact with any desktop application.
  • Visual Perception: Built-in screenshot capabilities provide visual context to the agent, enabling it to "see" and react to the GUI.

An interactive VNC session with VS Code and a browser.

2. 🐚 Complete Code Interpreter & Shell

  • Secure Code Execution: Safely run AI-generated code in an isolated Docker container.
  • Full Shell Access: A fully-featured bash terminal allows the execution of any Linux command.
  • Isolated Filesystem: Each session gets a separate filesystem with full support for creating, reading, writing, and deleting files.
  • Multi-language Support: Native support for Python, JavaScript (Node.js), and other runtimes.

3. 🔗 Seamless LLM Agent Integration (via MCP)

  • Standardized Protocol: All sandbox features are exposed via the MCP (Model Context Protocol) HTTP interface.
  • Broad Client Compatibility: Easily connect to any LLM client that supports MCP, such as Claude Desktop, OpenWebUI, LobeChat, and more.
  • Multi-Session Management: Create and manage multiple, isolated sandbox sessions concurrently using the x-session-id header.

🛠️ Available MCP Tools

EdgeBox exposes its capabilities through MCP tools, organized into two categories:

📟 Core Tools (CLI Mode - Always Available)

Code Execution Tools - Execute code in various languages:

  • execute_python - Execute Python code in isolated environment
  • execute_typescript - Execute TypeScript/JavaScript code
  • execute_r - Execute R code for statistical analysis
  • execute_java - Execute Java code
  • execute_bash - Execute Bash scripts

Shell Commands - Interact with the Linux environment:

  • shell_run - Run shell commands (stateful, persistent environment)
  • shell_run_background - Run commands in background with process management

Filesystem Operations - Manage files and directories:

  • fs_list - List files in directories
  • fs_read - Read file contents
  • fs_write - Write content to files
  • fs_info - Get file metadata and information
  • fs_watch - Monitor directory changes in real-time

🖱️ Desktop Tools (GUI Mode - When GUI Tools Enabled)

Mouse Controls - Programmatic mouse interaction:

  • desktop_mouse_click - Perform mouse clicks (left/right/middle)
  • desktop_mouse_double_click - Double-click actions
  • desktop_mouse_move - Move cursor to coordinates
  • desktop_mouse_scroll - Scroll up/down with configurable amount
  • desktop_mouse_drag - Drag from one position to another

Keyboard Controls - Text input and key combinations:

  • desktop_keyboard_type - Type text with clipboard support for non-ASCII
  • desktop_keyboard_press - Press specific keys (Return, Escape, Tab, etc.)
  • desktop_keyboard_combo - Execute key combinations (Ctrl+C, Alt+Tab, etc.)

Window Management - Control desktop applications:

  • desktop_get_windows - List all windows with titles and IDs
  • desktop_switch_window - Focus specific windows
  • desktop_maximize_window - Maximize windows
  • desktop_minimize_window - Minimize windows
  • desktop_resize_window - Resize windows to specific dimensions

Visual & Application Control:

  • desktop_screenshot - Capture desktop screenshots (PNG format)
  • desktop_launch_app - Launch applications by name
  • desktop_wait - Add delays between actions

Note: Desktop tools are only available when GUI Tools are enabled in EdgeBox settings. Core tools are always available regardless of GUI settings.

🏗️ Architecture

EdgeBox is designed to provide a seamless and powerful local execution environment for LLM agents.

[LLM Agent (Claude, GPT, etc.)] <- MCP (HTTP Stream) -> [EdgeBox App] <- Docker API -> [Isolated Sandbox Container (Desktop + Shell)]

  • Frontend: Electron + React + TypeScript + Tailwind CSS
  • Backend: Node.js + Dockerode (for Docker API)
  • Containerization: Docker
  • UI Components: Radix UI

📋 Prerequisites

  • Docker Desktop: Must be installed and running.

🛠️ Installation

  1. Download EdgeBoxDownload the latest release for your platform from the Releases page.

  2. Install & Run Docker DesktopEnsure Docker Desktop is installed and running before starting EdgeBox.

  3. Run EdgeBox

    • Windows: Run EdgeBox.exe
    • macOS: Open EdgeBox.app
    • Linux: Run the AppImage or install the .deb/.rpm package.

🎯 Usage

Quick Start

  1. Launch EdgeBox and ensure Docker is running.
  2. Check the dashboard to verify all components (Docker, MCP Server) are healthy.
  3. Add the EdgeBox MCP configuration to your LLM client.

MCP Client Configuration

Add EdgeBox to your LLM client with this configuration:

{
  "mcpServers": {
    "edgebox": {
      "url": "http://localhost:8888/mcp"
    }
  }
}

Instructing Your LLM Agent

Once configured, you can give your LLM agent natural language instructions like:

  • Code Execution: "Write a Python script to analyze this CSV file and show me the output."
  • File Operations: "Create a new folder called 'project', and inside it, create a file named main.py."
  • Computer Use: "Open the browser, navigate to 'github.com', search for 'EdgeBox', and then take a screenshot for me."

Multi-Session Concurrent Sandboxes

Easily manage multiple isolated environments by specifying an x-session-id in your MCP request headers.

Example configuration for different tasks:

{
  "mcpServers": {
    "edgebox-default": {
      "url": "http://localhost:8888/mcp"
    },
    "edgebox-data-analysis": {
      "url": "http://localhost:8888/mcp",
      "headers": {
        "x-session-id": "data-analysis"
      }
    },
    "edgebox-web-scraping": {
      "url": "http://localhost:8888/mcp",
      "headers": {
        "x-session-id": "web-scraping"
      }
    }
  }
}

🔐 Security

  • Container Isolation: Every sandbox session runs in a separate Docker container.
  • Resource Limits: Configurable CPU and memory constraints prevent resource abuse.
  • Network Isolation: Container networking is controlled to protect the host machine.

📄 License

See the LICENSE file for details.

🙏 Acknowledgments

  • E2B Team: For creating the fantastic open-source E2B Code Interpreter project that inspired EdgeBox.
  • Docker: For the powerful containerization technology.
  • Electron: For making cross-platform desktop apps possible.

🔗 Related Projects

  • E2B Code Interpreter - The original project that served as our foundation.
  • FastMCP - An implementation of the Model Context Protocol (MCP).

📞 Support

MCP Server · Populars

MCP Server · New