@rckflr/mcpwasm

Static MCP host: run untrusted MCP tool.js files sandboxed in QuickJS-wasm (Cloudflare Workers or Node), with explicit host capabilities (fetchOrigin, callInternal, extraCapabilities) and llms.txt executable-skills parsing.

Package versions

14 VERSIONS IN TOTAL
versionpublisheddirect vulnerabilities
0.11.129 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.11.028 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.10.028 Aug, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.9.027 Jul, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.8.010 Jul, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.7.010 Jul, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.6.010 Jul, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.5.010 Jul, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.4.010 Jul, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.3.19 Jul, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.3.09 Jul, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.2.18 Jul, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.2.08 Jul, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
0.1.08 Jul, 2026
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Get started free