wassette
View on GitHubWassette: A security-oriented runtime that runs WebAssembly Components via MCP
Microsoft's security-oriented MCP runtime that loads WebAssembly components from OCI registries and exposes them as sandboxed agent tools. Built on Wasmtime with capability-based permissions, so untrusted tools run isolated from the host. Early development, Rust, MIT.
Use Cases
Extend AI agents with new tools without leaving the chat windowRun untrusted third-party tools inside a Wasmtime sandboxLoad WebAssembly components from OCI registries as MCP toolsApply fine-grained capability and permission policies to agent toolsRegister an MCP server with GitHub Copilot, Claude Code, or Codex CLIIsolate agent tool execution with browser-grade sandboxing
Built With
- Language
- Rust
- Frameworks
- wasmtime · wasmtime-wasi · rmcp · mcp-sdk · tokio · oci-client · oci-wasm · rustls · serde
Tags
mcp · mcp-server · wasm · webassembly · wasmtime · sandbox · security · permissions · oci · oci-artifacts · capabilities · component-model · rust · ai-agents · tool-use · isolation