About Pydeno
Pydeno is an MCP server published by bmsuisse in the Agents category: run AI-generated JavaScript from Python, securely, in a sandbox: real V8 in a supervised, OS-sandboxed worker process (Seatbelt, Landlock, seccomp), with your Python functions as the only way out.
The repository has 1 stars and 0 forks, with the last commit 7 days ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
From source
git clone https://github.com/bmsuisse/pydenoThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Ask AI
✦
Ask AI about Pydeno
Powered by Claude · Grounded in docs
I know everything about Pydeno. Ask me about installation, configuration, usage, or troubleshooting.
Security checks
6 checks have not been run yet.
Releases
v0.13.2v0.13.2 · 10 Oct 2026Fixed `IsolatedRuntime`'s pump loop now kills the worker on any `BaseException`, not just `Exception`. A `KeyboardInterrupt` (or similar) escaping mid-command left the worker alive and the runtime looking usable; a later, unrelated call…
v0.13.1v0.13.1 · 9 Oct 2026Fixed A host function that returns a value whose own `__iter__`/`__len__` raises while being encoded no longer kills the runtime. It now surfaces as an ordinary catchable guest-side error, and the runtime stays usable afterwards. No guest…
v0.13.0v0.13.0 · 8 Oct 2026Fixed The `pydeno` CLI caps total console output at 1 MiB (`--max-output SIZE`), then prints one `[truncated]` line (#150). Sandbox hardening seccomp: a `clone` that sets any `CLONE_NEW*` flag is refused with `EPERM`; thread creation is…
v0.12.1v0.12.1 · 8 Oct 2026Fixes for #139-#143 and #140 (free-threaded wheels are no longer published; IsolatedRuntime refuses free-threaded builds unless PYDENO_ALLOW_FREE_THREADED=1). See CHANGELOG.md.
v0.12.0v0.12.0 · 8 Oct 2026See CHANGELOG.md (0.12.0): opt-in fork-from-template start, tool_timeout, experimental ToolProcess, AgentSandbox mode="script" (#144), on_unserializable (#145), expose_host_errors (#146).