CodeCall Plugin

npm install @frontmcp/plugin-codecall

import { FrontMcp } from '@frontmcp/sdk';
import { CodeCallPlugin } from '@frontmcp/plugin-codecall';

@FrontMcp({
  plugins: [
    CodeCallPlugin.init()
  ]
})
export class MyServer {}

const result = await mcp.callTool('executeCode', {
  code: `
    const sum = numbers.reduce((a, b) => a + b, 0);
    return { sum, average: sum / numbers.length };
  `,
  context: {
    numbers: [1, 2, 3, 4, 5]
  }
});
// { sum: 15, average: 3 }

new CodeCallPlugin({
  // Enclave instance
  enclave: new Enclave({
    timeout: 5000,
    memoryLimit: 64 * 1024 * 1024
  }),

  // Allowed tools in code
  tools: {
    fetch: async (url) => {
      if (!isAllowed(url)) throw new Error('URL not allowed');
      return fetch(url).then(r => r.json());
    },
    log: console.log
  },

  // Code validation
  validation: {
    maxLength: 10000,
    blockedPatterns: ['eval', 'Function']
  }
})

new CodeCallPlugin({
  enclave: new Enclave(),
  tools: {
    // Database access
    db: {
      query: async (sql) => db.query(sql),
      findUser: async (id) => db.users.find(id)
    },

    // HTTP requests
    http: {
      get: async (url) => fetch(url).then(r => r.json()),
      post: async (url, data) => fetch(url, {
        method: 'POST',
        body: JSON.stringify(data)
      }).then(r => r.json())
    },

    // Utilities
    utils: {
      parseDate: (str) => new Date(str),
      formatCurrency: (n) => `$${n.toFixed(2)}`
    }
  }
})

new CodeCallPlugin({
  enclave: new Enclave({
    security: {
      astGuard: true,
      prototypeProtection: true,
      resourceLimits: true
    }
  })
})

const ALLOWED_URLS = [
  'https://api.example.com',
  'https://data.example.com'
];

new CodeCallPlugin({
  tools: {
    fetch: async (url) => {
      const parsed = new URL(url);
      if (!ALLOWED_URLS.some(u => url.startsWith(u))) {
        throw new Error('URL not allowed');
      }
      return fetch(url).then(r => r.json());
    }
  }
})

new CodeCallPlugin({
  validation: {
    // Use AST Guard
    astGuard: true,

    // Custom validators
    validators: [
      (code) => {
        if (code.includes('while(true)')) {
          throw new Error('Infinite loops not allowed');
        }
      }
    ]
  }
})

new CodeCallPlugin({
  enclave: new Enclave(),
  vectorDb: vectoriaDb,
  codeScanning: {
    enabled: true,
    blockSimilarToMalicious: true
  }
})