Skip to content

r33drichards/mcp-js

MCP Developer Tools

A Model Context Protocol server that runs JavaScript/TypeScript in a sandboxed V8 isolate, providing durable state and policy‑gated capabilities for AI agents

Rust Latest v0.18.1 · 24d ago Security brief →

Features

  • Execute arbitrary JavaScript/TypeScript in an isolated V8 engine with async support
  • Persist and restore heap snapshots for durable, stateful agent sessions
  • Policy‑controlled access to network, filesystem, subprocesses, and WebAssembly

Recent releases

View all 36 releases →
No immediate action
v0.18.1 New feature

OAuth client credentials

Review required
v0.14.0 New feature
RCE / SSRF

File upload support

No immediate action
v.0.13.0 New feature

Blob/File/FormData fetch support

Review required
v0.12.0 Breaking risk
Auth Breaking upgrade

/api/tools removal

No immediate action
v0.11.0 Breaking risk

AGPLv3 license + heap limit removal

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
49
Forks
9
Languages
Rust Nix Python

Install & Platforms

Install via
shell-script docker-compose nix
Platforms
linux macos arm64

Beta — feedback welcome: [email protected]