hyper-mcp-rs/hyper-mcp

What it solves

hyper-mcp is a fast and secure Model Context Protocol (MCP) server that allows users to extend AI applications (like Claude Desktop and Cursor IDE) with custom capabilities. It solves the problem of safely running third-party tools and plugins without giving them full access to the system, while allowing developers to write plugins in multiple languages.

How it works

The project uses WebAssembly (WASM) to run plugins in a secure, sandboxed environment. It is built on Extism, which allows plugins to be written in any language that compiles to WASM. These plugins can be distributed via standard OCI registries (like Docker Hub) and are verified using sigstore/cosign to ensure they haven't been tampered with.

Who it’s for

Developers who want to add tools to their AI agents or IDEs using the Model Context Protocol, and users who want to install secure, sandboxed plugins for their AI assistants.

Highlights

• WASM Sandboxing: Limits network, filesystem, and memory access for security.
• OCI Distribution: Plugins can be distributed and loaded via container registries.
• Multi-language Support: Supports any language that compiles to WebAssembly.
• Cryptographic Verification: Uses cosign to verify OCI plugin signatures at load time.
• Cross-platform: Works across macOS, Linux, and Windows.
• Dynamic Loading: Supports loading and unloading plugins at runtime.