MCP100 IndexSDK
WatchlistFirst-party MCP

Deuz SDK

by Deuz AI

Reviewed October 5, 2026

SDKSoftware & Technology

Watchlist tracking

Reviewed for relevance and future tracking value.

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Follow package releases and MCP tool abstractions as the SDK changes

Reviewed · Documentation review; complete setup workflow not independently tested

Best fit

TypeScript teams building durable multi-provider agents and swarms

What we know

Zero-dependency TypeScript SDK for models, agents, swarms, durable execution, memory, hybrid RAG, MCP tool calling, approvals and CodeAct sandboxes.

Maintenance / activity evidence

  • Observed (UTC)chore(bench): remove the 1.8.0 research notes

Tracking evidence observed Oct 5, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Activity source · commits ↗Activity source · releases ↗

Verification gaps / watch-outs

  • Installation and comprehensive security have not been independently audited.
  • Application-defined tool and sandbox authority. Writes: Depends on configured MCP/tools/sandboxes.
  • Provider/tool-specific.
  • Sensitive access: Provider credentials, Application data
  • The SDK can orchestrate tools, durable actions and sandboxes; application policy and approvals define the boundary.
Security source · repository notice ↗

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

697 repository stars

Stars observed Sep 25, 2026.

Preserve any already-reviewed adoption metrics in MCP100. Batch 4 did not refresh package downloads because the package-stats provider had insufficient credits.

Preserve any already-reviewed adoption metrics in MCP100. Batch 4 did not refresh package downloads because the package-stats provider had insufficient credits.

All limitations / Review context

Which MCP tool interfaces and agent runtimes does the current SDK support?

The bounded assessment reviewed the official README, repository notices, security policy path, and security page for known material public-tracking blockers. No such blocker was identified. This is a public-tracking assessment, not an installation safety certification.

  • The SDK can orchestrate tools, durable actions and sandboxes; application policy and approvals define the boundary.
  • Application-defined tool and sandbox authority.
  • Provider/tool-specific.
  • Prompts/data flow to configured model providers and external tools.
  • Reviewed write actions: Depends on configured MCP/tools/sandboxes
  • Sensitive access: Provider credentials, Application data
  • Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
  • A project-specific SECURITY.md policy was not available at the fetched official path; the review remains limited to published repository notices.
  • No installation, runtime, client matrix, or complete tool-contract audit was performed in this review.
  • The fetched official SECURITY.md path returned HTTP 404; it was not treated as positive evidence.
  • Provider/tool/sandbox risk depends on application configuration.

Original activity observations

  • 2026-09-26T18:59:19Z: chore(bench): remove the 1.8.0 research notes
Technical identity
github.com/deuz-ai/deuz-sdk
Exact implementation source
https://github.com/deuz-ai/deuz-sdk ↗
Reviewed resource type
SDK
Repository identity
deuz-ai/deuz-sdk
Package identity
npm:@deuz-sdk/core

Evidence & Sources

Evidence basis
Recorded source evidence
Setup runtime verification
Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed · Latest source observation

  • GitHub repository ↗

    deuz-ai/deuz-sdk

    Recorded repository material and project history.

    Includes references whose attribution is not established.