Back to Home
buremba icon

1mcp

Verified Safe

by buremba

Overview

Orchestrates AI agent tool calls by executing JavaScript/TypeScript code in a WASM sandbox, reducing LLM context bloat and managing security policies.

Installation

Run Command
npx 1mcp serve

Environment Variables

  • RELAY_MCP_URL
  • NEXT_PUBLIC_RELAY_MCP_URL
  • TIMEOUT_MS
  • MAX_MEMORY_MB
  • MAX_STDOUT_BYTES
  • DOCKER_CONTAINER
  • RELAY_BIND

Security Notes

The project demonstrates robust security considerations with a multi-layered approach, including WASM sandbox isolation (QuickJS/Pyodide), cryptographic signing of execution capsules (Ed25519), and double-enforcement of network and filesystem policies (browser and server). Path traversal protections and IP literal blocking are implemented. The specification indicates that critical security issues identified in development have been addressed. However, it notes that upstream MCP servers are fully trusted by the relay server (requiring external security measures for those services) and current rate limiting is basic (queue depth of 100). Code execution uses `vm.evalCode` within the sandboxed runtime, which is controlled by the capsule builder.

Similar Servers

Stats

Interest Score62
Security Score9
Cost ClassLow
Avg Tokens2000
Stars29
Forks4
Last Update2025-12-08

Tags

AIWASMSandboxLLM OrchestrationContext Reduction