mcp-v8 MCP server
Run JavaScript and TypeScript in sandboxed V8 isolates with policy-controlled host capabilities.
57 stars
Reviews
Write oneNobody has reviewed mcp-v8 yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
mcp-v8 tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it
- –Code scanpackage could not be scannedn/a
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 12 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
What the publisher says
From the mcp-v8 repository's README, as published. We do not edit it. Read it on GitHub
mcp-v8 — a JavaScript/TypeScript runtime for AI agents
mcp-v8 is a Model Context Protocol server, written in Rust, that lets an AI agent run JavaScript and TypeScript in a sandboxed V8 isolate. Instead of wiring up dozens of narrow tools, you give the agent one tool — run_js — and it writes code: looping, branching, transforming data, and calling other tools, often with far fewer tokens than equivalent tool-call chains.
In its default stateful mode the V8 heap is saved as a content-addressed snapshot, so an agent can build up state across many turns. Host capabilities (network, filesystem, subprocess, WebAssembly, module imports, and calls to other MCP servers) are all off by default and unlocked only by explicit OPA/Rego policies.
Why mcp-v8
- One tool, unbounded capability. The agent runs a program, not a fixed menu of tools.
- Durable state. Heap snapshots persist variables and objects across calls.
- Secure by default. fetch, filesystem, subprocess, and external imports are denied until you grant them via policy.
- Kernel-enforced confinement. Opt-in --sandbox-manifest confines the whole process with a nono capability manifest (Landlock on Linux, Seatbelt on macOS) as defense in depth beneath the policy layer.
- Production-ready. stdio / Streamable HTTP / SSE transports, a REST sidecar, async execution with pagination, JWKS auth, and Raft-replicated clustering.
Documentation
Maintainers: see Publishing to the MCP Registry for the Docker-backed registry manifest and automated release process.
Full documentation lives at **** (built from site-docs/) — tutorials, how-to guides, concept explanations, and complete reference for the CLI flags, HTTP API, and MCP tools.
Quick start
Install
# Server
curl -fsSL https://raw.githubusercontent.com/r33drichards/mcp-js/main/install.sh | sudo bash
# Optional CLI client
curl -fsSL https://raw.githubusercontent.com/r33drichards/mcp-js/main/install-cli.sh | sudo bashInstalls to /usr/local/bin. Supported platforms: Linux x8664/arm64 and macOS Apple Silicon. You can also nix run github:r33drichards/mcp-js, use Docker (see the docker-compose..yml stacks), or build from source.
Prefer a hosted server? Deploy on Railway — the repo's railway.json configures the build, healthcheck, and restart policy, and RAILWAY.md walks through the volume, variables, and one-click template setup.
Connect an MCP client
# Claude Code (stdio)
claude mcp add mcp-v8 -- mcp-v8 --directory-path /tmp/mcp-v8-heaps # stateful
claude mcp add mcp-v8 -- mcp-v8 --stateless # statelessFor Claude Desktop / Cursor, add to the client's mcpServers config:
{ "mcpServers": { "js": { "command": "mcp-v8", "args": ["--stateless"] } } }Then ask the agent: "Run this JavaScript: console.log([1,2,3].map(x => x2))"*.
Run over HTTP
mcp-v8 --stateless --http-port 8080
# MCP endpoint: POST http://localhost:8080/mcpShortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Install directly
claude mcp add mcp-js -- docker run -i --rm docker.io/wholelottahoopla/mcp-js:0.21.0-rc.2
mcp-v8: common questions
- Is mcp-v8 MCP server safe?
- Yes, by our scan: it is graded A (88/100). Read the mcp-v8 safety report
- How do I install mcp-v8?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does mcp-v8 need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is mcp-v8 maintained?
- The last commit was 13 days ago (2026-09-08). The latest release is v0.21.0-rc.2.
- What can I use instead of mcp-v8?
- Servers from other publishers that do the same job: SSH — policy-gated remote access MCP server.
Alternatives to mcp-v8
Same job from other publishers: the closest match first, then the best rated.
- SSH — policy-gated remote accessPolicy-gated, audited SSH for Linux and Windows hosts: roles, approvals, and an audit log.not reviewedEstablishedB