Overview
Features
Multi-language support
Supports Python 3.11, Java 17, C 12, C++ 12, Node.js 20, and Rust 1.72 via dedicated Docker images.
Docker sandboxing
Isolated containers with network disabled, read-only FS, tmpfs writable areas, CPU/memory/process limits, and non-root execution.
MCP protocol: run_code
Exposes a run_code tool to execute arbitrary code via the MCP protocol.
Logging
All execution logs are emitted to stderr to keep MCP client IO clean.
CI-ready
Automated tests for executors via GitHub Actions.
Pre-pulled images
Setup instructions include pre-pulling language runtimes to minimize first-run latency.
Extensible language support
Extending to new languages involves selecting a Docker image, implementing an executor, registering it in main.go, writing tests, and pre-pulling the image.
Who Is This For?
- Claude Desktop users:Integrate Onyx to run arbitrary code securely within Docker sandboxes from Claude Desktop.
- AI workflow developers:Embed Onyx in AI pipelines to execute code safely as part of workflows.




