hyper-mcp

MCP server · GitHub · ★ 881 · graded 2026-10-23Source linked

📦️ A fast, secure MCP server that extends its capabilities through WebAssembly plugins.

No outside reports on file

Running a custom Rust server with untrusted or community WebAssembly plugins carries moderate to high risk of code execution, data exposure, and AI manipulation unless you audit plugins carefully and isolate the server.

Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee.

Was this verdict for Hyper MCP helpful?

What it can access

Local filesReads & writes local foldersREVIEW
Command executionNo shell command runner notedLOW
Network reachConnects to outside service APINOTED
CredentialsNo API token requiredLOW
Package sourceGitHub (hyper-mcp-rs/hyper-mcp)PUBLIC

Inferred from this listing’s public package details and description. Check the project’s source before installing.

Install

No npm or PyPI package is listed. Install from source: github.com/hyper-mcp-rs/hyper-mcp ↗

All setup options ↓

Check this skill Watch it in my stack Compare Add to allowlist README badge View project

About Hyper MCP

Hyper-MCP is a Model Context Protocol server written in Rust that lets Claude and other AI assistants connect to external tools and data sources. It can load plugins written in WebAssembly (a portable code format) to extend what capabilities the AI can access.

Who it’s for

Developers who want to build fast, pluggable integrations between AI assistants and backend systems. Best for teams comfortable with Rust, WebAssembly, and managing custom server infrastructure.

Alternatives

Anthropic's official MCP servers (memory, file system, web search) — built and maintained by Anthropic
stdlib's MCP implementations (Node.js, Python) — more mainstream language options with larger communities
LangChain or LlamaIndex tools — alternative frameworks for connecting AI to external systems

Setup

Check these steps against the project’s own instructions before running anything.

Follow the project's README. The GitHub repository should contain installation and configuration instructions for running the Rust-based server and loading WebAssembly plugins.

Why this grade

CC — Moderate risk signals

Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.

Popularity and upkeep

33/100

GitHub stars: 881
Listing last refreshed: 2026-10-29

These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.

Security reports

No reports found for this package in our research (last checked 2026-10-30).

Check a specific version →

Risks to watch for

Arbitrary code execution: WebAssembly plugins run inside the server; malicious or buggy plugins could harm the host system or access local files
Network access: The server can make outbound requests on behalf of the AI; it could reach internal APIs or services it shouldn't
Prompt injection: Unfiltered user input passed through plugins could trick the AI into ignoring safety guidelines
Data leaks: Plugins or the server itself might log, cache, or return sensitive information (API keys, database contents) to the AI or back to users
Supply chain risk: Dependencies (Rust crates, WebAssembly modules) could contain hidden backdoors or vulnerabilities

How to lower the risk

Least-privilege permissions

Run the server under a dedicated, low-privilege system user with minimal file and network access
Only load plugins from trusted sources; never auto-update plugins without review

Network isolation

Restrict outbound connections to specific, pre-approved APIs and domains
Run the server inside a container or VM with limited network access to the host

Monitoring

Log all plugin loads, API calls, and data requests; review logs regularly
Set up alerts for unusual network activity or file access patterns

Red flags to watch for

Plugins requesting broad filesystem or network permissions
Lack of documentation or source code for plugins
Large or obfuscated WebAssembly binaries (hard to audit)
Unexpected outbound traffic or high CPU/memory use

Questions

How do I install Hyper MCP?

Hyper MCP does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/hyper-mcp-rs/hyper-mcp.

Are there security reports about Hyper MCP?

No reports found for this package in our research (last checked 2026-10-30). Hyper MCP currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include arbitrary code execution, network access, prompt injection.

Is Hyper MCP actively maintained?

Hyper MCP has 881 GitHub stars. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/hyper-mcp-rs/hyper-mcp before pinning it in production.

What are alternatives to Hyper MCP?

Notable alternatives to Hyper MCP include Anthropic's official MCP servers, stdlib's MCP implementations, LangChain. You can also compare Hyper MCP side by side with other MCP servers in the Related tools section on this page.

Maintain or use Hyper MCP? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.

GitHub README Markdown:

markdown

[![AgentArmorHQ Risk Grade for Hyper MCP](https://agentarmorhq.com/api/badge/hyper-mcp-rs-hyper-mcp)](https://agentarmorhq.com/skills/hyper-mcp-rs-hyper-mcp)

HTML embed:

html

<a href="https://agentarmorhq.com/skills/hyper-mcp-rs-hyper-mcp"><img src="https://agentarmorhq.com/api/badge/hyper-mcp-rs-hyper-mcp" alt="AgentArmorHQ Risk Grade for Hyper MCP" height="20" /></a>

Terminal check:

terminal

curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "hyper-mcp-rs-hyper-mcp"

Share with your security lead

Need sign-off to use hyper-mcp? Copy this note for Slack, a ticket or a pull request.

### AgentArmorHQ Security Review Memo: hyper-mcp
- **Listing URL:** https://agentarmorhq.com/skills/hyper-mcp-rs-hyper-mcp
- **Type:** App connector
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 881 GitHub stars

#### Permission & Blast-Radius Signals
- **Local files:** Reads & writes local folders
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** No API token required
- **Package source:** GitHub (hyper-mcp-rs/hyper-mcp)

#### Recommended Hardened Setup
- **Source Repo:** https://github.com/hyper-mcp-rs/hyper-mcp
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.

_Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee._

Key facts

Type: App connector
Publisher: hyper-mcp-rs
Source code: github.com/hyper-mcp-rs/hyper-mcp
Est. context load: ~500 tokens / turn (~3 tool schemas, 0.25% of 200k context)
Popularity: 881 GitHub stars
Last updated: 2026-10-29
Last graded: 2026-10-23

Community

Discussions for Hyper MCP

Ask questions or share configuration tips. Governed by our Community Rules & Terms.

No posts match this filter yet.

Be the first to ask a question or share a working tip.

Was this listing for Hyper MCP helpful?

Check before you install, in Claude

Your assistant answers Block, Review or No known issues for any package before it installs it.

Get this check inside Claude