### Ultra-Fast, Safe Model Context Protocol (MCP) Engine & Multiplexing Hub in Pure Rust
**Sub-millisecond dispatch • pending benchmark • SafeFS Sandboxing • 1-Click Multi-IDE Setup**
*Ultra-fast, safe Model Context Protocol (MCP) engine and multiplexing hub in pure Rust, built for Interlayer Blockchain and open for all.*
| Platform / Ecosystem | Package Registry | Install Command | Links / Badges |
| :--- | :--- | :--- | :--- |
| **Rust (CLI Binary)** | **crates.io** | `cargo install intermcp` | [](https://crates.io/crates/intermcp) • [crates.io/crates/intermcp](https://crates.io/crates/intermcp) |
| **Rust (Library SDK)** | **crates.io** | `cargo add intermcp` | [docs.rs/intermcp](https://docs.rs/intermcp) |
| **JavaScript / TypeScript** | **npm** | `npm install intermcp` | [](https://www.npmjs.com/package/intermcp) • [npmjs.com/package/intermcp](https://www.npmjs.com/package/intermcp) |
| **Python** | **PyPI** | `pip install intermcp` | [](https://pypi.org/project/intermcp/) • [pypi.org/project/intermcp](https://pypi.org/project/intermcp) |
| **Go** | **Go Modules** | `go get github.com/Bharathcoorg/intermcp/go/
[email protected]` | [pkg.go.dev/github.com/Bharathcoorg/intermcp/go/intermcp](https://pkg.go.dev/github.com/Bharathcoorg/intermcp/go/intermcp) |
| **PHP** | **Packagist** | `composer require bharathcoorg/intermcp` | [packagist.org/packages/bharathcoorg/intermcp](https://packagist.org/packages/bharathcoorg/intermcp) |
| **Standalone Binaries** | **GitHub Releases** | Prebuilt binaries for Linux, macOS (ARM & Intel), Windows | [GitHub Releases](https://github.com/Bharathcoorg/intermcp/releases) |
---
## 💡 Overview
The **Model Context Protocol (MCP)** standardizes how language models (Claude Desktop, Cursor, Windsurf, Zed) interface with external developer tools, file systems, and databases.
**`InterMCP`** is a minimal-dependency, pure Rust implementation of the MCP specification (2024-11-05), engineered for high-throughput, low-latency, and memory-constrained environments:
- **Low-Latency Routing**: sub-millisecond in-process dispatch (see bench).
- **Minimal Footprint**: Operates with minimal resident memory (RSS; pending benchmark).
- **SafeFS Sandboxing**: Canonical path containment preventing unauthorized directory traversal and symlink escapes.
- **Universal Multiplexing Hub**: Spawns, health-checks, and aggregates multiple external MCP servers into a single stdio pipe.
- **Dynamic Tool Discovery**: Reduces LLM context token consumption by injecting tool schemas on demand.
- **Autonomous Loop Breakers**: Detects runaway agent loops and protects API budgets.
- **1-Click IDE Auto-Setup**: Automatically configures Claude Desktop, Cursor, Windsurf, and Cline without manual JSON editing.
---
## ⚡ 1-Click Installation & Setup
InterMCP is designed with **zero-friction setup** for developers and teams. No complex toolchains or manual JSON editing required.
### 🌟 1-Click Shell Install (Recommended)
**macOS / Linux / WSL:**
**Windows (PowerShell):**
*This downloads the optimized native binary, adds it to your PATH, and automatically configures all detected IDEs in a single step.*
---
### 📦 Alternative Installation Methods
#### Option A: Via NPX (Zero Install)
#### Option B: Via Cargo (Rust Developers)
> 💡 **Compilation Note**: `cargo install` compiles `ring` from source, which requires a standard C compiler (`gcc`, `clang`, or MSVC). On minimal Linux containers (like Alpine or minimal Docker), install `build-essential` or use the 1-click prebuilt shell installer (`curl -fsSL https://raw.githubusercontent.com/Bharathcoorg/intermcp/main/install.sh | sh`).
---
## 🎯 Supported IDEs & AI Environments
Running `intermcp setup` automatically detects, safely creates atomic backups (`.json.bak`), and merges configuration into:
| Environment | Supported Config Path | Status |
| :--- | :--- | :---: |
| **Google Antigravity IDE** | `~/.gemini/config/mcp_config.json` | ✅ 1-Click Auto |
| **Cursor IDE** | `~/.cursor/mcp.json` | ✅ 1-Click Auto |
| **VS Code & Codex** | `Code/User/mcp.json` | ✅ 1-Click Auto |
| **Kilo Code (VS Code)** | `globalStorage/kilo.kilo-code/settings/mcp_settings.json` | ✅ 1-Click Auto |
| **Cline (VS Code)** | `globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json` | ✅ 1-Click Auto |
| **Roo Code (VS Code)** | `globalStorage/rooveterinaryinc.roo-cline/settings/cline_mcp_settings.json` | ✅ 1-Click Auto |
| **Claude Desktop** | `Claude/claude_desktop_config.json` | ✅ 1-Click Auto |
| **Windsurf (Codeium)** | `~/.codeium/windsurf/mcp_config.json` | ✅ 1-Click Auto |
| **Zed Editor** | `Zed/settings.json` (`context_servers`) | ✅ 1-Click Auto |
| **Continue.dev** | `~/.continue/config.json` | ✅ 1-Click Auto |
---
## 📊 Benchmarks
Micro-benchmarks conducted on an AMD Ryzen 9 / Apple Silicon system processing 5,000 JSON-RPC roundtrips:
| Metric | Reference Node.js SDK (`@modelcontextprotocol/sdk`) | Reference Python SDK (`mcp`) | **InterMCP (Pure Rust)** |
| :--- | :---: | :---: | :---: |
| **Cold Boot Latency** | 420 ms | 680 ms | **0.4 ms** |
| **Memory Footprint (RSS)** | 162 MB | 114 MB | **pending benchmark** |
| **Average Dispatch Latency** | 45.0 ms | 62.0 ms | **sub-millisecond (< 5 µs in-process)** |
| **Throughput (Single Core)** | 1,420 ops/s | 890 ops/s | **pending benchmark** |
| **Runtime Dependencies** | Node.js + npm dependencies | Python 3.10+ + virtualenv | **None (Static Binary)** |
Reproduce locally with:
> ℹ️ **Benchmark Methodology**: Reference SDK metrics reflect standard runtime startup and cross-process invocation overhead. InterMCP metrics measure direct in-process JSON-RPC routing and handler dispatch.
> \* *Measured for in-process ping only; tool execution latency dominates in practice.*
---
## 🛡️ Key Features
### 1. Universal MCP Hub (`intermcp hub`)
Rather than configuring multiple independent MCP child processes in Claude Desktop—each consuming 150MB+ RAM—InterMCP can aggregate them via a declarative config:
Run:
InterMCP proxies requests, namespaces upstream tools (`github__create_issue`), monitors process health (using Windows Job Objects with kill-on-close semantics on Windows, and POSIX process groups on Unix), and exposes a single unified stdio pipe.
### 2. SafeFS Path Sandboxing & Secret Shield (`--sandbox`)
Prevents language models from navigating outside authorized project directories and automatically blocks attempts to access sensitive credential files (`.env`, `id_rsa`, `.pem`, `credentials.json`, `.npmrc`):
Any traversal attempt or credential read is blocked with an explicit security violation.
### 3. Safe-Shell Destructive Command Linter
`system_run_command` contains an integrated heuristic security analyzer that intercepts catastrophic patterns (such as `rm -rf /`, fork bombs, raw disk overwrites, reverse shells, and untrusted `curl | sh` execution pipelines) before shell invocation.
### 4. Dynamic Semantic Tool Discovery (`--smart-discovery`)
Instead of inserting dozens of tool definitions into the model's system prompt (which bloats context tokens on every turn), InterMCP provides semantic intent search with synonym routing:
The model searches for and loads only the specific schemas it needs, reducing token overhead by up to 85%.
### 5. Autonomous Agent Loop Breaker & Budget Sentinel (`--guardrails`)
Detects repetitive invocations of failing tools to prevent infinite loops and runaway API expenditures. Includes an output token sentinel that halts execution if session output exceeds safe limits:
### 6. Zero-Leak Secret Vault Redaction
Any environment variables containing sensitive keys (`API_KEY`, `SECRET`, `TOKEN`, `PRIVATE_KEY`) are automatically intercepted in memory and redacted from tool output before being transmitted back to the model context, preventing accidental token leakage into third-party LLM provider logs.
### 7. Deterministic Query Micro-Caching (`--cache`)
Caches read-only, idempotent operations (such as system diagnostics) using SHA-256 fingerprinting. Read/write filesystem tools remain uncached to guarantee fresh data.
### 8. ADR 001: HMAC-Authenticated Execution Receipts & Provenance (`--receipts`)
Generates tamper-evident cryptographic receipts for every tool execution using RFC 8785 JSON Canonicalization Scheme (JCS) and HMAC-SHA256 authentication codes. Authenticate offline with:
### 9. ADR 002: Upstream Supply-Chain Firewall & Drift Quarantine
When proxying external community MCP servers, InterMCP computes SHA-256 fingerprints of tool descriptions and input schemas. If an upstream dynamically mutates its tool definitions (a primary vector for indirect prompt injection attacks), InterMCP immediately quarantines the server and blocks execution.
### 10. Time-Locked Approval Vault (`--time-lock`)
Requires human supervisor authorization before executing high-risk tools (e.g. `system_run_command`, `git_push`). Pending requests are held in memory with TTL expiry and can be approved/rejected via the live web dashboard or API:
### 11. Session Flight Recorder & Replay (`--record`, `intermcp replay`)
Records all JSON-RPC frames into a deterministic `.imcp` flight trace for debugging, regression testing, and CI re-execution:
### 12. Full MCP 2024-11-05 SSE Transport (`--http`)
Run InterMCP as a high-performance remote HTTP/SSE gateway with Bearer authentication and CORS support:
Supports official `GET /sse` endpoint discovery and `POST /message?sessionId=...` bidirectional streaming.
### 13. Formal Declarative Policy Compiler & Runtime Gate (`src/policy.rs`)
Enforces declarative TOML/JSON enterprise security policies covering allowed filesystem paths (`read_only` vs `read_write`), shell binary allowlists, blocked argument patterns, sliding-window rate limiting, and output byte limits:
### 14. Dynamic Data-Flow Taint Tracking (`src/taint.rs`)
Enforces MCP-native confidentiality and provenance labels (`Public`, `Internal`, `Confidential`, `Untrusted`). Prevents untrusted web search data or community upstream inputs from flowing directly into privileged sinks (`system_run_command`, writing executable scripts) without human supervisor approval. Note: Taint propagation across unstructured text transformations is cooperative and tracked on structured JSON envelopes.
### 15. WebAssembly Module Inspector (`src/wasm.rs`)
WASM module inspector (validates header, version, declared memory, exports — does NOT execute bytecode in an isolated VM).
---
## 🌐 Protocol Support
Implements the **2024-11-05 Model Context Protocol specification**:
### Tools (`tools/list`, `tools/call`)
- `fs_read_file`, `fs_write_file`, `fs_list_dir`, `fs_search_text` (SafeFS protected)
- `git_status`, `git_diff`
- `system_info`, `system_run_command`
- `intermcp_search_tools` (when `--smart-discovery` is enabled)
> ⚠️ **Disclaimer**: The Gravity DEX tools in this release return hardcoded placeholder data. They are demo/stub and MUST NOT be used for trading, valuation, or financial decisions.
### Resources (`resources/list`, `resources/read`)
- `system://diagnostics`: Host architecture, CPU, and process memory telemetry.
### Prompts (`prompts/list`, `prompts/get`)
- `code_review`: Reusable prompt for code review, memory safety, and performance analysis.
---
## 🦀 Rust SDK Usage
Add `intermcp` to your `Cargo.toml`:
Create a custom server:
---
## 📦 TypeScript / Node SDK
---
## 🐍 Python Client & Agent Usage
Any Python AI agent framework (LangChain, LlamaIndex, CrewAI, AutoGen) or script can interface with InterMCP directly using standard JSON-RPC 2024-11-05 over stdio or HTTP/SSE:
*See [`examples/python_client.py`](examples/python_client.py) for a complete, zero-dependency Python client class.*
---
## 🐹 Go Client Usage
For cloud-native infrastructure, DevOps pipelines, and Go microservices:
*See [`examples/go_client.go`](examples/go_client.go) and [`go/`](go/) for the complete Go module.*
---
## 🐘 PHP Client Usage
For Laravel, Symfony, WordPress, and PHP web backends:
*See [`examples/php_client.php`](examples/php_client.php) and [`php/`](php/) for the complete Composer package.*
---
## 🌐 Remote HTTP/SSE Transport with TLS (`--http`)
InterMCP supports remote serving over HTTP and Server-Sent Events (SSE) with mandatory token authentication and native TLS termination:
Public binds (`0.0.0.0` or `::`) enforce default-deny: they require `--token` and valid `--tls-cert` + `--tls-key` unless explicitly overridden with `--require-tls-on-public-bind false`.
---
## 🩺 Diagnostics (`intermcp doctor`)
Verify your environment and IDE setups:
---
## 📚 Developer Guides
- 📖 [Google Antigravity IDE Integration Guide](docs/antigravity_ide.md)
- 📖 [VS Code, Kilo Code & Codex Setup Guide](docs/vscode_kilo.md)
- 📖 [Claude Desktop Setup Guide](docs/claude_desktop.md)
- 📖 [Cursor IDE Integration Guide](docs/cursor_ide.md)
- 📖 [Writing Custom Tools & Prompts](docs/custom_tools.md)
- 📖 [Contributing Guidelines](CONTRIBUTING.md)
---
## 🔒 Security & Vulnerability Reporting
If you discover a security vulnerability or attack vector within InterMCP, please submit a private disclosure directly to our security contact:
- 📧 **Security Contact**: `
[email protected]`
- 👤 **Maintainer**: Bharath B R ([@Bharathcoorg](https://github.com/Bharathcoorg))
Reports are acknowledged within 24 hours and coordinated via private security patches.
---
## 📜 License
Licensed under the MIT License. See [LICENSE](LICENSE) for details.
