$git clone https://github.com/hyper-mcp-rs/hyper-mcp</div>
| 1 | <div align="center"> |
| 2 | <picture> |
| 3 | <img alt="hyper-mcp logo" src="./assets/logo.png" width="50%"> |
| 4 | </picture> |
| 5 | </div> |
| 6 | |
| 7 | <div align="center"> |
| 8 | |
| 9 | [](https://crates.io/crates/hyper-mcp) |
| 10 | [](#license) |
| 11 | [](https://github.com/hyper-mcp-rs/hyper-mcp/issues) |
| 12 |  |
| 13 | |
| 14 | <a href="https://trendshift.io/repositories/13451" target="_blank"><img src="https://trendshift.io/api/badge/repositories/13451" alt="hyper-mcp-rs%2Fhyper-mcp | Trendshift" style="width: 250px; height: 55px;" width="250" height="55"/></a> |
| 15 | |
| 16 | </div> |
| 17 | |
| 18 | # hyper-mcp |
| 19 | |
| 20 | A fast, secure MCP server that extends its capabilities through WebAssembly plugins. |
| 21 | |
| 22 | ## What is it? |
| 23 | |
| 24 | hyper-mcp makes it easy to add AI capabilities to your applications. It works with Claude Desktop, Cursor IDE, and other MCP-compatible apps. Write plugins in your favorite language, distribute them through container registries, and run them anywhere - from cloud to edge. |
| 25 | |
| 26 | ## Features |
| 27 | |
| 28 | - Write plugins in any language that compiles to WebAssembly |
| 29 | - Distribute plugins via standard OCI registries (like Docker Hub) |
| 30 | - Built on [Extism](https://github.com/extism/extism) for rock-solid plugin support |
| 31 | - Sanboxing with WASM: ability to limit network, filesystem, memory access |
| 32 | - Lightweight enough for resource-constrained environments |
| 33 | - Support `stdio` transport protocol |
| 34 | - Deploy anywhere: serverless, edge, mobile, IoT devices |
| 35 | - Cross-platform compatibility out of the box |
| 36 | - Support tool name prefix to prevent tool names collision |
| 37 | - Dynamic plugin loading and unloading (configurable) |
| 38 | |
| 39 | ## Security |
| 40 | |
| 41 | Built with security-first mindset: |
| 42 | |
| 43 | - Sandboxed plugins that can't access your system without permission |
| 44 | - Memory-safe execution with resource limits |
| 45 | - Secure plugin distribution through container registries |
| 46 | - Fine-grained access control for host functions |
| 47 | - OCI plugin images are signed at publish time and verified at load time with [sigstore](https://www.sigstore.dev/). |
| 48 | |
| 49 | ## Installation |
| 50 | |
| 51 | ### Prerequisites |
| 52 | |
| 53 | **cosign** — required for loading plugins from OCI registries (`oci://` URLs). |
| 54 | |
| 55 | hyper-mcp verifies the cryptographic signature of every OCI plugin before loading it to ensure the plugin has not been tampered with and comes from a trusted source. This verification is performed by shelling out to the [cosign](https://github.com/sigstore/cosign) CLI, which must be installed and available on your `PATH`. |
| 56 | |
| 57 | Install cosign by following the official instructions: **<https://docs.sigstore.dev/cosign/system_config/installation/>** |
| 58 | |
| 59 | > **Note:** If you only use `file://`, `http://`, `https://`, or `s3://` plugin URLs, cosign is not needed. You can also bypass signature verification for OCI plugins by setting `insecure_skip_signature: true` in your config or the `HYPER_MCP_INSECURE_SKIP_SIGNATURE=true` environment variable, but this is **not recommended** for production use. |
| 60 | |
| 61 | ### Install from Homebrew |
| 62 | |
| 63 | hyper-mcp is published on Homebrew for macOS and Linux in two places: |
| 64 | |
| 65 | **Homebrew core** — no tap setup required: |
| 66 | |
| 67 | ```sh |
| 68 | brew install hyper-mcp |
| 69 | ``` |
| 70 | |
| 71 | **Our own tap (`hyper-mcp-rs/tap`)** — bumped automatically on every GitHub Release, so it picks up new versions immediately: |
| 72 | |
| 73 | ```sh |
| 74 | brew install hyper-mcp-rs/tap/hyper-mcp |
| 75 | ``` |
| 76 | |
| 77 | Both install the same binary. Prefer the core formula unless you want the absolute latest release the moment it ships. |
| 78 | |
| 79 | ### Pre-built binaries (GitHub Releases) |
| 80 | |
| 81 | Download the latest release for your platform from [GitHub Releases](https://github.com/hyper-mcp-rs/hyper-mcp/releases): |
| 82 | |
| 83 | Chose the version that you want and download the architecture-specific binary. |
| 84 | |
| 85 | | Platform | Architecture | Download | |
| 86 | |---|---|---| |
| 87 | | macOS | Apple Silicon (ARM64) | hyper-mcp-aarch64-apple-darwin.tar.gz | |
| 88 | | Linux | ARM64 | hyper-mcp-aarch64-unknown- |