diff --git a/Dockerfile b/Dockerfile
index 7cda70178b..c3687d77e4 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,6 +14,10 @@ ENV LD_PRELOAD=/usr/lib/libjemalloc.so.2
 COPY --from=ghcr.io/astral-sh/uv:0.6.13 /uv /uvx /bin/
 RUN uv --version
 
+# Add `deno` for better MCP isolation
+RUN apk add --no-cache deno
+RUN deno --version
+
 RUN mkdir -p /app && chown node:node /app
 WORKDIR /app
 
diff --git a/Dockerfile.multi b/Dockerfile.multi
index c106b5e5fa..b3324b3f53 100644
--- a/Dockerfile.multi
+++ b/Dockerfile.multi
@@ -67,6 +67,9 @@ FROM base-min AS api-build
 # Add `uv` for extended MCP support
 COPY --from=ghcr.io/astral-sh/uv:0.6.13 /uv /uvx /bin/
 RUN uv --version
+# Add `deno` for better MCP isolation
+RUN apk add --no-cache deno
+RUN deno --version
 WORKDIR /app
 # Install only production deps
 RUN npm ci --omit=dev
@@ -79,4 +82,4 @@ COPY --from=client-build /app/client/dist ./client/dist
 WORKDIR /app/api
 EXPOSE 3080
 ENV HOST=0.0.0.0
-CMD ["node", "server/index.js"]
\ No newline at end of file
+CMD ["node", "server/index.js"]