https://github.com/hyper-mcp-rs/hyper-mcp
📦️ A fast, secure MCP server that extends its capabilities through WebAssembly plugins.
https://github.com/hyper-mcp-rs/hyper-mcp
ai extism llm mcp mcp-server oci
Last synced: 3 days ago
JSON representation
📦️ A fast, secure MCP server that extends its capabilities through WebAssembly plugins.
- Host: GitHub
- URL: https://github.com/hyper-mcp-rs/hyper-mcp
- Owner: hyper-mcp-rs
- License: apache-2.0
- Created: 2025-01-10T11:45:03.000Z (over 1 year ago)
- Default Branch: main
- Last Pushed: 2026-06-04T23:12:20.000Z (9 days ago)
- Last Synced: 2026-06-05T01:07:48.388Z (9 days ago)
- Topics: ai, extism, llm, mcp, mcp-server, oci
- Language: Rust
- Homepage:
- Size: 81.5 MB
- Stars: 878
- Watchers: 12
- Forks: 65
- Open Issues: 9
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
- awesome - hyper-mcp-rs/hyper-mcp - 📦️ A fast, secure MCP server that extends its capabilities through WebAssembly plugins. (Rust)
- awesome-mcp - hyper-mcp-rs/hyper-mcp - hyper-mcp is a fast, secure MCP server that extends its capabilities through WebAssembly plugins, supporting multiple MCP protocols and enabling AI integration across diverse environments. (MCP Frameworks and libraries / Rust)
README
[](https://crates.io/crates/hyper-mcp)
[](#license)
[](https://github.com/hyper-mcp-rs/hyper-mcp/issues)
# hyper-mcp
A fast, secure MCP server that extends its capabilities through WebAssembly plugins.
## What is it?
hyper-mcp makes it easy to add AI capabilities to your applications. It works with Claude Desktop, Cursor IDE, and other MCP-compatible apps. Write plugins in your favorite language, distribute them through container registries, and run them anywhere - from cloud to edge.
## Features
- Write plugins in any language that compiles to WebAssembly
- Distribute plugins via standard OCI registries (like Docker Hub)
- Built on [Extism](https://github.com/extism/extism) for rock-solid plugin support
- Sanboxing with WASM: ability to limit network, filesystem, memory access
- Lightweight enough for resource-constrained environments
- Support `stdio` transport protocol
- Deploy anywhere: serverless, edge, mobile, IoT devices
- Cross-platform compatibility out of the box
- Support tool name prefix to prevent tool names collision
- Dynamic plugin loading and unloading (configurable)
## Security
Built with security-first mindset:
- Sandboxed plugins that can't access your system without permission
- Memory-safe execution with resource limits
- Secure plugin distribution through container registries
- Fine-grained access control for host functions
- OCI plugin images are signed at publish time and verified at load time with [sigstore](https://www.sigstore.dev/).
## Installation
### Prerequisites
**cosign** — required for loading plugins from OCI registries (`oci://` URLs).
hyper-mcp verifies the cryptographic signature of every OCI plugin before loading it to ensure the plugin has not been tampered with and comes from a trusted source. This verification is performed by shelling out to the [cosign](https://github.com/sigstore/cosign) CLI, which must be installed and available on your `PATH`.
Install cosign by following the official instructions: ****
> **Note:** If you only use `file://`, `http://`, `https://`, or `s3://` plugin URLs, cosign is not needed. You can also bypass signature verification for OCI plugins by setting `insecure_skip_signature: true` in your config or the `HYPER_MCP_INSECURE_SKIP_SIGNATURE=true` environment variable, but this is **not recommended** for production use.
### Install from Homebrew
hyper-mcp is published on Homebrew for macOS and Linux in two places:
**Homebrew core** — no tap setup required:
```sh
brew install hyper-mcp
```
**Our own tap (`hyper-mcp-rs/tap`)** — bumped automatically on every GitHub Release, so it picks up new versions immediately:
```sh
brew install hyper-mcp-rs/tap/hyper-mcp
```
Both install the same binary. Prefer the core formula unless you want the absolute latest release the moment it ships.
### Pre-built binaries (GitHub Releases)
Download the latest release for your platform from [GitHub Releases](https://github.com/hyper-mcp-rs/hyper-mcp/releases):
Chose the version that you want and download the architecture-specific binary.
| Platform | Architecture | Download |
|---|---|---|
| macOS | Apple Silicon (ARM64) | hyper-mcp-aarch64-apple-darwin.tar.gz |
| Linux | ARM64 | hyper-mcp-aarch64-unknown-linux-gnu.tar.gz |
| Linux | x86_64 | hyper-mcp-x86_64-unknown-linux-gnu.tar.gz |
| Windows | x86_64 | hyper-mcp-x86_64-pc-windows-msvc.zip |
**macOS / Linux:**
Donwload the `.tar.gz` file, extract it, and place `hyper-mcp` in `/usr/local/bin`.
**Windows:**
Download the `.zip` file, extract it, and place `hyper-mcp.exe` somewhere on your `PATH`.
### Install from crates.io
If you have [Rust](https://rustup.rs/) installed, you can install hyper-mcp directly from [crates.io](https://crates.io/crates/hyper-mcp):
```sh
cargo install hyper-mcp
```
## Getting Started
1. Create your config file:
- Linux: `$HOME/.config/hyper-mcp/config.json`
- Windows: `{FOLDERID_RoamingAppData}\hyper-mcp\config.json`. Eg: `C:\Users\Alice\AppData\Roaming\hyper-mcp\config.json`
- macOS: `$HOME/Library/Application Support/hyper-mcp/config.json`
```json
{
"plugins": {
"time": {
"url": "oci://ghcr.io/hyper-mcp-rs/time-plugin:latest",
"description": "Get current time and do time calculations"
},
"qr_code": {
"url": "oci://ghcr.io/hyper-mcp-rs/qrcode-plugin:latest",
"description": "Generate QR codes from text"
},
"hash": {
"url": "oci://ghcr.io/hyper-mcp-rs/hash-plugin:latest"
},
"myip": {
"url": "oci://ghcr.io/hyper-mcp-rs/myip-plugin:latest",
"description": "Get your current public IP address",
"runtime_config": {
"allowed_hosts": ["1.1.1.1"]
}
},
"fetch": {
"url": "oci://ghcr.io/hyper-mcp-rs/fetch-plugin:latest",
"runtime_config": {
"allowed_hosts": ["*"],
"memory_limit": "100 MB",
}
}
}
}
```
> 📖 **For detailed configuration options including authentication setup, runtime configuration, and advanced features, see [RUNTIME_CONFIG.md](./RUNTIME_CONFIG.md)**
Supported URL schemes:
- `oci://` - for OCI-compliant registries (like Docker Hub, GitHub Container Registry, etc.). Requires [cosign](https://docs.sigstore.dev/cosign/system_config/installation/) for signature verification (see [Prerequisites](#prerequisites))
- `file://` - for local files
- `http://` or `https://` - for remote files
- `s3://` - for Amazon S3 objects (requires that you have your AWS credentials set up in the environment)
2. Start the server:
```sh
$ hyper-mcp
```
- Uses `stdio` transport protocol.
- If you want to debug, use `RUST_LOG=debug`.
- If you're loading unsigned OCI plugin, you need to set `insecure_skip_signature` flag or env var `HYPER_MCP_INSECURE_SKIP_SIGNATURE` to `true`
> **Running in SSE/streamable-http**: To do this, wrap `hyper-mcp` in one of the many proxies that supports the network transports **AND** that creates an instance of `hyper-mcp` per client connection.
## Output Logging
hyper-mcp automatically logs all output to daily rolling log files for debugging and monitoring purposes.
**Log Location:**
- Linux: `$HOME/.config/hyper-mcp/logs/mcp-server.log`
- Windows: `{FOLDERID_RoamingAppData}\hyper-mcp\logs\mcp-server.log`
- macOS: `$HOME/Library/Application Support/hyper-mcp/logs/mcp-server.log`
**Custom Log Path:**
You can override the default log directory by setting the `HYPER_MCP_LOG_PATH` environment variable:
```sh
export HYPER_MCP_LOG_PATH=/path/to/your/logs
hyper-mcp
```
**Log Levels:**
Control the verbosity of logs using the `RUST_LOG` environment variable:
```sh
# Info level (default)
RUST_LOG=info hyper-mcp
# Debug level (verbose, useful for troubleshooting)
RUST_LOG=debug hyper-mcp
# Warn level (only warnings and errors)
RUST_LOG=warn hyper-mcp
```
**Features:**
- Daily log rotation (new file created each day)
- Non-blocking writes to prevent performance impact
- Includes timestamps, line numbers, and target information
- Safe for use with stdio transport (logs don't interfere with MCP communication)
## Using with Cursor IDE
You can configure hyper-mcp either globally for all projects or specifically for individual projects.
1. For project-scope configuration, create `.cursor/mcp.json` in your project root:
```json
{
"mcpServers": {
"hyper-mcp": {
"command": "/path/to/hyper-mcp"
}
}
}
```
2. Set up hyper-mcp in Cursor's settings:
3. Start using tools through chat:
## Using with Claude Desktop
Every [GitHub Release](https://github.com/hyper-mcp-rs/hyper-mcp/releases) ships an **MCP Bundle** (`.mcpb`) for each platform alongside the raw binaries:
| Platform | Bundle |
|---|---|
| macOS (Apple Silicon) | `hyper-mcp-aarch64-apple-darwin.mcpb` |
| Linux (x86_64) | `hyper-mcp-x86_64-unknown-linux-gnu.mcpb` |
| Linux (ARM64) | `hyper-mcp-aarch64-unknown-linux-gnu.mcpb` |
| Windows (x86_64) | `hyper-mcp-x86_64-pc-windows-msvc.mcpb` |
Download the bundle for your platform and double-click it (or drag it into Claude Desktop) to get a one-click install dialog. Claude Desktop will prompt you for:
- **Plugin config file** — path to your `config.json`/`config.yaml` listing the WASM plugins to load (see [Getting Started](#getting-started) and [`config.example.json`](./config.example.json)).
- **Enable dynamic plugin loading** (optional).
- **Skip OCI signature verification** (optional, not recommended).
> The bundle contains only the `hyper-mcp` binary. Loading `oci://` plugins still requires [cosign](#prerequisites) on your `PATH` unless you enable "Skip OCI signature verification".
The bundle manifest lives in [`mcpb/manifest.json`](./mcpb/manifest.json) and is packed per-platform by the release workflow.
## Using with Claude Code
The quickest way is a direct add (requires `hyper-mcp` already installed via Homebrew/cargo):
```sh
claude mcp add hyper-mcp -- hyper-mcp --config-file /path/to/config.json
```
Or install it from our plugin marketplace:
```text
/plugin marketplace add hyper-mcp-rs/hyper-mcp
/plugin install hyper-mcp@hyper-mcp-rs
/reload-plugins
```
The marketplace catalog ([`.claude-plugin/marketplace.json`](./.claude-plugin/marketplace.json)) and plugin ([`plugins/hyper-mcp`](./plugins/hyper-mcp)) live in this repo. See the [plugin README](./plugins/hyper-mcp/README.md) for prerequisites and configuration.
## Available Plugins
We maintain several plugins to get you started:
### V1 Plugins
These plugins use the v1 plugin interface. While still supported, new plugins should use the v2 interface.
- [time](https://github.com/hyper-mcp-rs/time-plugin): Get current time and do time calculations (Rust)
- [qr_code](https://github.com/hyper-mcp-rs/qr-code-plugin): Generate QR codes (Rust)
- [hash](https://github.com/hyper-mcp-rs/hash-plugin): Generate various types of hashes (Rust)
- [myip](https://github.com/hyper-mcp-rs/myip-plugin): Get your current IP (Rust)
- [crypto_price](https://github.com/hyper-mcp-rs/crypto-price-plugin): Get cryptocurrency prices (Go)
- [fs](https://github.com/hyper-mcp-rs/fs-plugin): File system operations (Rust)
- [github](https://github.com/hyper-mcp-rs/github-plugin): GitHub plugin (Go)
- [eval_py](https://github.com/hyper-mcp-rs/eval-py-plugin): Evaluate Python code with RustPython (Rust)
- [memory](https://github.com/hyper-mcp-rs/memory-plugin): Let you store & retrieve memory, powered by SQLite (Rust)
- [crates-io](https://github.com/hyper-mcp-rs/crates-io-plugin): Get crate general information, check crate latest version (Rust)
- [gomodule](https://github.com/hyper-mcp-rs/gomodule-plugin): Get Go modules info, version (Rust)
- [qdrant](https://github.com/hyper-mcp-rs/qdrant-plugin): keeping & retrieving memories to Qdrant vector search engine (Rust)
- [gitlab](https://github.com/hyper-mcp-rs/gitlab-plugin): GitLab plugin (Rust)
- [meme_generator](https://github.com/hyper-mcp-rs/meme-generator-plugin): Meme generator (Rust)
- [think](https://github.com/hyper-mcp-rs/think-plugin): Think tool(Rust)
- [maven](https://github.com/hyper-mcp-rs/maven-plugin): Maven plugin (Rust)
- [serper](https://github.com/hyper-mcp-rs/serper-plugin): Serper web search plugin (Rust)
### V2 Plugins
These plugins use the v2 plugin interface. New plugins should use this interface.
- [arxiv](https://github.com/hyper-mcp-rs/arxiv-plugin): Search arXiv papers (Rust)
- [context7](https://github.com/hyper-mcp-rs/context7-plugin): Lookup library documentation (Rust)
- [defuddle](https://github.com/hyper-mcp-rs/defuddle-plugin): Get the main content of any page as Markdown (Rust)
- [fetch](https://github.com/hyper-mcp-rs/fetch-plugin): Basic webpage fetching (Rust)
- [monty](https://github.com/hyper-mcp-rs/monty-plugin): A minimal, secure Python interpreter written in Rust for use by AI (Rust)
- [rstime](https://github.com/hyper-mcp-rs/rstime-plugin): Get current time and do time calculations (Rust)
- [sqlite](https://github.com/hyper-mcp-rs/sqlite-plugin): Interact with SQLite (Rust)
### Community-built plugins
- [hackernews](https://github.com/hungran/hyper-mcp-hackernews-tool): This plugin connects to the Hacker News API to fetch the current top stories and display them with their titles, scores, authors, and URLs.
- [release-monitor-id](https://github.com/ntheanh201/hyper-mcp-release-monitor-id-tool): This plugin retrieves project ID from release-monitoring.org, which helps track versions of released software.
- [yahoo-finance](https://github.com/phamngocquy/hyper-mcp-yfinance): This plugin connects to the Yahoo Finance API to provide stock prices (OHLCV) based on a company name or ticker symbol.
- [rand16](https://github.com/dabevlohn/rand16): This plugen generates random 16 bytes buffer and provides it in base64uri format - very usable for symmetric cryptography online.
## Documentation
- **[Built-in Tools Reference](./BUILT_IN_TOOLS.md)** - Documentation for the `hyper_mcp-*` tools including:
- `hyper_mcp-list_plugins` — list all loaded plugins
- `hyper_mcp-load_plugin` — dynamically load a plugin at runtime
- `hyper_mcp-unload_plugin` — dynamically unload a plugin at runtime
- **[Runtime Configuration Guide](./RUNTIME_CONFIG.md)** - Comprehensive guide to configuration options including:
- Authentication setup (Basic, Token, and Keyring)
- Plugin runtime configuration
- Security considerations and best practices
- Platform-specific keyring setup for macOS, Linux, and Windows
- Troubleshooting authentication issues
- **[Skip Tools Pattern Guide](./SKIP_TOOLS_GUIDE.md)** - Comprehensive guide to filtering tools using regex patterns:
- Pattern syntax and examples
- Common use cases and best practices
- Environment-specific filtering strategies
- Advanced regex techniques
- Migration and troubleshooting
## Creating Plugins
For comprehensive instructions on creating plugins, see [CREATING_PLUGINS.md](./CREATING_PLUGINS.md).
For ready-to-use plugin templates in Rust and Go, see [TEMPLATES.md](./TEMPLATES.md).
## License
[Apache 2.0](./LICENSE)
## Star History
[](https://www.star-history.com/#hyper-mcp-rs/hyper-mcp&Date)