tpt-mcpbox

Local-first, zero-trust MCP proxy and WebAssembly tool runtime. Routes MCP JSON-RPC between AI agents and tools, enforces capability-based security policy, and runs untrusted tool logic in isolated Wasm sandboxes.