Skip to content

r33drichards/mcp-js

v0.3.0 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 4mo MCP Developer Tools
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

javascript mcp mcp-server

Affected surfaces

auth rbac

Summary

AI summary

Added a heap tagging system, migrated JavaScript execution to deno_core, and introduced OPA-gated async fetch() with configurable header injection.

Full changelog

What's Changed

  • Add heap tagging system with concurrent-safe merge operations by @r33drichards in https://github.com/r33drichards/mcp-js/pull/52
  • Migrate from raw V8 to deno_core for JavaScript execution by @r33drichards in https://github.com/r33drichards/mcp-js/pull/53
  • Fix CI builds by prefetching rusty_v8 static library by @r33drichards in https://github.com/r33drichards/mcp-js/pull/54
  • Add OPA-gated fetch() to JavaScript runtime by @r33drichards in https://github.com/r33drichards/mcp-js/pull/55
  • Document OPA-gated fetch() in README by @r33drichards in https://github.com/r33drichards/mcp-js/pull/56
  • Convert fetch() to async using deno_core ops by @r33drichards in https://github.com/r33drichards/mcp-js/pull/60
  • Configure Rust tests to run sequentially by @r33drichards in https://github.com/r33drichards/mcp-js/pull/59
  • Add Docker Compose for OPA and example fetch policy by @r33drichards in https://github.com/r33drichards/mcp-js/pull/57
  • Claude/add mcp js docker 6 pw wp by @r33drichards in https://github.com/r33drichards/mcp-js/pull/61
  • Add header injection rules for fetch requests by @r33drichards in https://github.com/r33drichards/mcp-js/pull/58
  • Add fetch header injection feature with CLI and JSON config support by @r33drichards in https://github.com/r33drichards/mcp-js/pull/62
  • Use ENTRYPOINT + CMD pattern in Dockerfile by @r33drichards in https://github.com/r33drichards/mcp-js/pull/63

Full Changelog: https://github.com/r33drichards/mcp-js/compare/v0.2.2...v0.3.0

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track r33drichards/mcp-js

Get notified when new releases ship.

Sign up free

About r33drichards/mcp-js

A Javascript code execution sandbox that uses v8 to isolate code to run AI generated javascript locally without fear. Supports heap snapshotting for persistent sessions.

All releases →

Related context

Earlier breaking changes

  • v0.12.0 Removes /api/tools endpoint.
  • v0.11.0 Switch license from ISC to GNU Affero General Public License v3

Beta — feedback welcome: [email protected]