Crabrix

Crabrix 🦀 An end-to-end encrypted, temporary Rust workspace for AI agents and people. Share a link. Edit together. Run locally in a browser or Crabrix. Open Playground · Setup & guide · GitHub

Crabrix is a JavaScript/TypeScript library and a standalone MCP server. No iPhone, app account or cloud compiler is required. An agent can create a room, read or change its source and pass its complete link to another agent or person. Open the link on the web to see the same live editor. The native Crabrix app is an optional companion for iPhone/iPad and offline Rust projects.

See the practical two-agent walkthrough for development, interviews and teaching, including actual local Run/Debug and permission checks. The 0.5.0 release qualification states what was tested against production.

*Illustration of a shared development and review workflow. Real editor captures appear below.*

Why Crabrix

• Encrypted before it leaves your device. Every room is encrypted with AES-256-GCM on the client. The key lives after # in the link, a part that browsers and HTTP clients never send. The relay forwards and briefly keeps only ciphertext, in memory, and forgets it when the room ends. There is no account and no project storage.
• People and agents get their own links. Share gives people a link that opens the live editor in the browser or the Crabrix app. Connect AI gives an agent its own link, with the same access (edit or view only) and the same expiry. An agent link cannot be turned into other links.
• Works with the agents you use. Claude Code, Codex and Cursor join through Crabrix MCP on your computer, so the key never leaves it. Claude, Grok and other clients with remote MCP can add the agent link as a server URL with nothing to install.
• Code runs on your device, only when you allow it. The relay never compiles or runs code. Run and Debug happen in the browser or the Crabrix app, and an agent can start them only after a person approves that device, for at most ten minutes.
• Safe to hand off. Every edit names the revision it was based on, so a stale edit is refused instead of overwriting someone's work. Everyone in the room sees each participant's name, cursor and selection.
• Temporary by design. A room lives one to 24 hours. Save a copy when you need it; Crabrix is not a repository.

What can you do with it?

Install

npm install crabrix

or start an MCP server without a global install

npx -y crabrix@0.5.0

Node.js 22+. ESM, CommonJS and TypeScript declarations are included. The released bundle has no runtime npm dependencies and no installation scripts. First-time installation and live sharing need network access.

Use as a library

import { Crabrix } from 'crabrix';

const agent = new Crabrix({ name: 'Review agent' }); try { const created = await agent.create({ name: 'Small Rust exercise', lifetimeMinutes: 60, files: { 'main.rs': 'fn main() { println!("Hello, Crabrix! 🦀"); }\n' }, }); // The complete link is secret. Deliver it only to the intended recipient. const handoff = await agent.share('edit'); // Your application's own UI can display handoff.link and handoff.expiresAt. const file = await agent.read('main.rs'); await agent.apply({ expectedRevision: file.revision, changes: [{ path: file.path, text: file.text.replace('Hello', 'Welcome') }], }); const latest = await agent.read('main.rs'); await agent.select(latest.path, 0, 9, latest.revision); // A second agent can call connect(handoff.link), without the phone app. } finally { agent.close(); // Leave the room; the recipient keeps access until expiry. }

CommonJS: const { Crabrix } = require('crabrix'). ESM, CommonJS and the programmatic MCP factory share one implementation; mixed imports preserve constructor identity and do not load duplicate bundled Yjs copies. Use a separate instance per room. snapshot() returns validated source plus its revision; status() returns expiry, participants and selections without the secret link or source text. share('view') creates no new room: it returns the separate view capability when this client created the room. A joined edit participant cannot invent a view capability, and view access cannot become edit access. endRoom() is available only to the creator in its current connection.

Use through MCP

Crabrix MCP is the server named crabrix from the npm package crabrix. A room has two kinds of links, and both end with the room:

Anyone in the room gets an agent link for their own access from Connect AI on the website or in the app, and crabrix_handoff returns one next to the person link.

Way 1: Crabrix MCP on your computer (end-to-end)

Install Crabrix MCP once, then paste an agent link (or a person link) into the chat and ask the agent to work in that room. The agent calls crabrix_connect, decrypts the room on your computer and joins it as a named participant. It can also create a room itself with crabrix_create and give you the link to open in the browser or on your phone.

Way 2: Remote MCP, nothing to install

In the web Playground, choose Connect AI, pick your agent and follow its steps; the agent link is filled into every command.

The trade-off is stated before the link is shown: while an agent is connected this way, Crabrix's server decrypts that room in memory to serve it. It logs nothing, stores nothing and cannot run code, and the session ends when the agent disconnects, after 30 idle minutes or with the room. The Crabrix app gives only local agent links, which this path refuses. To keep the key off every server, use Way 1.

Check a setup with crabrix doctor, or npx -y crabrix@0.5.0 doctor. It reports the version, Node, DNS, TLS, relay reachability and proxy variables. It opens no room, reads no source and changes no setting; add --json for a machine-readable report.

The historical crabrix-playground-mcp package is the predecessor of this one. Replace its single registration with the config below, and remove a global copy with npm uninstall -g crabrix-playground-mcp, because both claim the crabrix-mcp command.

Claude Code plugin

/plugin marketplace add sergii-ziborov/crabrix-sdk

/plugin install crabrix@crabrix

The plugin starts npx -y crabrix@0.5.0 and adds a crabrix-handoff skill for sharing, reviewing and running Rust. It needs Node.js 22+. Outside a session, use claude plugin marketplace add and claude plugin install with the same arguments.

Any client with local stdio MCP

{

"mcpServers": { "crabrix": { "command": "npx", "args": ["-y", "crabrix@0.5.0"] } } }

In Claude Code without the plugin, the equivalent is claude mcp add --transport stdio crabrix -- npx -y crabrix@0.5.0.

Ask your assistant to create a Playground, then open its complete private link. The MCP server exposes eighteen tools: crabrix_create, crabrix_connect, crabrix_status, crabrix_snapshot, crabrix_read_file, crabrix_apply_changes, crabrix_select, crabrix_plan_changes (read-only), crabrix_apply_operations, crabrix_handoff, crabrix_disconnect, crabrix_end_room, crabrix_runtime_clients, crabrix_runtime_request, crabrix_runtime_start, crabrix_runtime_inspect (read-only), crabrix_runtime_control and crabrix_runtime_job (the earlier combined form). Stdio stdout contains only MCP messages; help/version output is explicitly requested. crabrix serve-http [--port 8090] [--host 127.0.0.1] runs the remote MCP behind agent links, as crabrix.com does, for use behind your own TLS proxy.

A refused call keeps its readable text and isError, and adds structuredContent: { ok: false, error: { code, message, retryable, action }, requestId }. Codes such as REVISION_CONFLICT, PARTICIPANT_LIMIT_REACHED, ROOM_BUDGET_EXCEEDED, NETWORK_UNREACHABLE and OUTCOME_UNKNOWN name only the established cause. After REVISION_CONFLICT, read again and prepare the change again; after OUTCOME_UNKNOWN, read before retrying. Library calls throw CrabrixError with the same fields, and the Rust and Go clients expose the code. Successful results keep their existing shape.

Rooms with stable file IDs

Crabrix is moving shared rooms to a second document format in which every file has a stable ID and its path is only a field. A rename never loses an edit made at the same moment, a deleted file keeps its text in a recovery list until someone purges it, and reading a room never fails because of concurrent changes: a path two people claimed shows as a conflict-… name, and a project that cannot run lists why in blocked. Rooms are still created in format 1 by default; format: 2 on crabrix_create is for testing until Crabrix switches. Older SDKs and apps cannot open a format 2 room: the relay answers 426, which this SDK reports as CLIENT_UPDATE_REQUIRED.

In a format 2 room, crabrix_status and crabrix_snapshot add `forma