Agent Component Tools @actcore_dev

Hardened AI toolchain. Sandboxed MCP tools with signed lineage and capability ceilings. actcore.dev Internet Joined May 2026

Tweets

13
Followers

1
Following

35
Likes

1

Agent Component Tools @actcore_dev

3 weeks ago

Plus boring-correct details: DNS-layer deny-CIDR blocks metadata-service attacks (169.254.169.254) at resolution; each HTTP redirect re-checks policy. dev.to/gamepad64/the-… #WebAssembly #MCP

0 0 0 0 0

View Details

Agent Component Tools @actcore_dev

3 weeks ago

A component that didn't declare wasi:http literally cannot make a network call, even if the operator sets --http-policy open. Permissive operator can't escalate past the declaration; lazy author can't reach past the grant. The intersection is the floor on damage.

1 0 0 0 0

View Details

Agent Component Tools @actcore_dev

3 weeks ago

Handing a third-party tool to your AI agent is the same problem as handing a third-party binary to cron. ACT caps the blast radius with a capability ceiling: component declares needs at build time, operator grants at runtime, host enforces the intersection.

1 0 0 0 0

View Details

Agent Component Tools @actcore_dev

3 weeks ago

Fix merged in jco (Bytecode Alliance's wasm-to-JS transpiler): wasip3-async components crashed with ReferenceError: STREAM_TABLES is not defined. Generator called .name() instead of intrinsic(), declaration never emitted. ~2 hours to merge. github.com/bytecodeallian…

0 0 0 0 0

View Details

Agent Component Tools @actcore_dev

4 weeks ago

Each bridge: wasmtime-sandboxed, capability-ceiling-bounded (wasi:http only), signed OCI artifact. Auth in session args, validated host-side. dev.to/gamepad64/act-… #WebAssembly #MCP

0 0 0 0 0

View Details

Agent Component Tools @actcore_dev

4 weeks ago

- mcp-bridge wraps a remote MCP server (NAT-translated session-ids). - openapi-bridge loads any OpenAPI 3.x spec at session-open and exposes every operation as a typed tool. - act-http-bridge proxies a remote ACT-HTTP fleet.

1 0 0 0 0

View Details

Agent Component Tools @actcore_dev

4 weeks ago

Wrap any MCP server, any OpenAPI 3.x API, or any remote ACT-HTTP fleet as a sandboxed wasm component. Three new ACT bridges in 0.7 — same capability ceiling, same signed-OCI provenance as any hand-written tool.

1 0 0 0 0

View Details

Alexander Shishenko @GamePad64

2 months ago

Every #OWSHackathon project runs on Node.js. Ours runs on Android. 📱 Built ACT-OpenWallet — OWS as a WebAssembly component. • One .wasm file, zero dependencies • 8 chains, policy engine • WASM sandbox = keys never leave the component @OpenWallet #WebAssembly

1 1 1 48 0

View Details

Nous Research @NousResearch

4 weeks ago

Hermes Agent is now #1 on the Global @OpenRouter token rankings. While our journey together has just begun, we'd like to take this opportunity to thank our contributors, supporters, and users for all they have done to get us this far.

439 727 7K 3.0M 2K

View Details

Agent Component Tools @actcore_dev

4 weeks ago

0.7 just shipped: sessions interface + three production bridges (mcp-bridge, openapi-bridge, act-http-bridge) + auth-via-args. Read: dev.to/gamepad64/mcp-… Code: github.com/actcore #webassembly #mcp #ai

0 0 0 0 0

View Details

Agent Component Tools @actcore_dev

4 weeks ago

The artifact is one `.wasm` that runs anywhere — Linux, macOS, Windows, Pi, browser tab. Same SHA256 everywhere. One component serves MCP agents, HTTP APIs, CLI, browser. No per-platform wheels, no native shims, one supply-chain path to audit.

1 0 0 0 0

View Details

Agent Component Tools @actcore_dev

4 weeks ago

Today's MCP servers ship as `npx`, `uvx`, or `curl | bash` — ambient-permission native processes running as you. Your agent's tool can read your SSH keys, your .env files, your shell history, your browser cookies. There's a better way.