# Static MCP: Publish Your Tools as Static Files

Run your MCP tools securely in a sandbox.

- **Source:** [Hacker News: Show HN](https://news.ycombinator.com)
- **Published:** 2026-07-27
- **Topic:** [Software & Engineering](https://brifing.si/c/engineering)
- **Original article:** <https://github.com/MauricioPerera/mcpwasm>
- **On Brifing:** https://brifing.si/s/fdbfd68b-e9b9-4a8c-895d-b2d1e3de2bba

## What is Static MCP?

Static MCP allows you to publish your tools as static files and run them on-demand in a sandbox environment. This is similar to what static site hosting did for web servers.

## How Does It Work?

Tools are published as static, hash-verified content, and a temporary MCP server is materialized per request. This server evaporates after responding, but its definition remains durable.

## mcpwasm Reference Implementation

mcpwasm is a reference implementation providing a sandboxed runtime for third-party MCP tools. It runs on QuickJS-wasm within Cloudflare Workers and turns any static site into an MCP server.

## Sandbox Security

Each tool runs isolated in a QuickJS WebAssembly sandbox. Access to the platform's internals is limited to an explicit capability injected by the host.

## llms-txt-skills Integration

This repo integrates with the llms-txt-skills standard via two provisional extensions: executable skills and skill attestations, which are adopted in the specification.

## Ease of Use

Point the local runtime at any origin publishing llms.txt. It fetches the file, verifies every tool_sha256, and sandboxes each skill in QuickJS-wasm.

## MCP Client Integration

The runtime is a standard MCP stdio server, usable by any MCP host. Add any publisher and use --lock skills.lock for pin-on-first-use.

## Library Usage

The embeddable host is provided as @rckflr/mcpwasm on npm. This library is the foundation upon which the gateway itself is built.

## Local MCP Runtime

The package also includes a stdio MCP server that runs an origin's skills locally, turning any static site into an MCP server.

## Honest Limits

Discovery runs once per process. Hash verification and the sandbox model are the same as the gateway's. Origin memory is supported and verified against snapshot_sha256.

## Security and Isolation

Each verified skill is loaded in its own QuickJS-wasm context and communicates via MCP over stdin/stdout, ensuring a secure and isolated environment.

## Conclusion and Importance

Static MCP offers an innovative solution for securely and easily publishing and running MCP tools, providing significant convenience and security for developers.

## Sources covering this story

- https://github.com/MauricioPerera/mcpwasm — 

---

_Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._