Static MCP: Publish Your Tools as Static Files
Run your MCP tools securely in a sandbox.
1What is Static MCP?
Static MCP allows you to publish your tools as static files and run them on-demand in a sandbox environment. This is similar to what static site hosting did for web servers.
2How Does It Work?
Tools are published as static, hash-verified content, and a temporary MCP server is materialized per request. This server evaporates after responding, but its definition remains durable.
3mcpwasm Reference Implementation
mcpwasm is a reference implementation providing a sandboxed runtime for third-party MCP tools. It runs on QuickJS-wasm within Cloudflare Workers and turns any static site into an MCP server.
4Sandbox Security
Each tool runs isolated in a QuickJS WebAssembly sandbox. Access to the platform's internals is limited to an explicit capability injected by the host.
5llms-txt-skills Integration
This repo integrates with the llms-txt-skills standard via two provisional extensions: executable skills and skill attestations, which are adopted in the specification.
6Ease of Use
Point the local runtime at any origin publishing llms.txt. It fetches the file, verifies every tool_sha256, and sandboxes each skill in QuickJS-wasm.
7MCP Client Integration
The runtime is a standard MCP stdio server, usable by any MCP host. Add any publisher and use --lock skills.lock for pin-on-first-use.
8Library Usage
The embeddable host is provided as @rckflr/mcpwasm on npm. This library is the foundation upon which the gateway itself is built.
9Local MCP Runtime
The package also includes a stdio MCP server that runs an origin's skills locally, turning any static site into an MCP server.
10Honest Limits
Discovery runs once per process. Hash verification and the sandbox model are the same as the gateway's. Origin memory is supported and verified against snapshot_sha256.
11Security and Isolation
Each verified skill is loaded in its own QuickJS-wasm context and communicates via MCP over stdin/stdout, ensuring a secure and isolated environment.
12Conclusion and Importance
Static MCP offers an innovative solution for securely and easily publishing and running MCP tools, providing significant convenience and security for developers.
Original article: Hacker News: Show HN — Static MCP: Araçlarınızı Statik Dosyalar Olarak Yayınlayın