Should we add startup flags to encourage better security? Similar to this package: https://github.com/pydantic/pydantic-ai/tree/main/mcp-run-python
deno run \
-N -R=node_modules -W=node_modules --node-modules-dir=auto \
jsr:@pydantic/mcp-run-python [stdio|sse|warmup]
What they have to say in that link:
- -N -R=node_modules -W=node_modules (alias of --allow-net --allow-read=node_modules --allow-write=node_modules) allows network access and read+write access to ./node_modules. These are required so pyodide can download and cache the Python standard library and packages
- –node-modules-dir=auto tells deno to use a local node_modules directory
