hyperterse

mcp
Security Audit
Pass
Health Pass
  • License — License: Apache-2.0
  • Description — Repository has a description
  • Active repo — Last push 0 days ago
  • Community trust — 80 GitHub stars
Code Pass
  • Code scan — Scanned 12 files during light audit, no dangerous patterns found
Permissions Pass
  • Permissions — No dangerous permissions requested
Purpose
This tool is a declarative framework for building production-grade Model Context Protocol (MCP) servers. It allows developers to easily expose database queries and custom logic as secure AI-ready tools.

Security Assessment
Overall risk: Medium. The framework itself acts as a secure bridge to user data, supporting multiple database adapters (PostgreSQL, MongoDB, Redis) and requiring per-tool authentication. However, the default installation method relies on piping a remote web script directly to bash (`curl | bash`), which is a common vector for supply-chain attacks if the host server is ever compromised. No hardcoded secrets, dangerous OS-level permissions, or malicious code patterns were found during the automated scan.

Quality Assessment
The project is highly active and healthy, with its most recent updates pushed just today. It is backed by a solid community trust indicator of 80 GitHub stars. The repository is fully compliant with open-source standards, utilizing the well-defined Apache-2.0 license, and provides clear, comprehensive documentation.

Verdict
Use with caution: the codebase is clean, well-licensed, and actively maintained, but you should strongly consider alternative installation methods over the provided `curl | bash` command.
SUMMARY

The MCP framework. Connect your data to your agents.

README.md
Hyperterse - connect your data to your agents.

Hyperterse

The declarative framework for performant MCP servers.
WebsiteDocumentationQuick StartExamplesGitHub


Hyperterse is a tool-first MCP framework for building AI-ready backend surfaces from declarative config.

You define tools and adapters in the filesystem, and Hyperterse handles compile-time validation, script bundling, runtime execution, auth, caching, and observability.

What Hyperterse is for

  • Exposing database queries and custom logic as MCP tools
  • Running a production MCP server over Streamable HTTP
  • Keeping tool definitions declarative while still supporting TypeScript handlers/transforms

Core capabilities

  • Filesystem discovery: each app/tools/*/config.terse becomes one project tool.
  • Execution models: DB-backed tools (use + statement) or script-backed tools (handler).
  • Database adapters: PostgreSQL, MySQL, MongoDB, Redis.
  • Per-tool auth: built-in allow_all and api_key, plus custom plugins.
  • In-memory caching: global defaults + per-tool overrides.
  • Observability: OpenTelemetry tracing/metrics + structured logging.

Quick Start

Install

curl -fsSL https://hyperterse.com/install | bash

Initialize

hyperterse init

Generated starter structure:

.
├── .hyperterse
├── .agents/
│   └── skills/
│       ├── hyperterse-docs/
│       │   └── SKILL.md
│       └── hyperterse-agents/
│           └── SKILL.md
└── app/
    └── tools/
        └── hello-world/
            ├── config.terse
            └── handler.ts

Start

hyperterse start

With live reload:

hyperterse start --watch

Verify health

curl http://localhost:8080/heartbeat

Expected response:

{ "success": true }

5) List MCP entry tools

curl -s -X POST http://localhost:8080/mcp \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "method": "tools/list",
    "id": 1
  }' | jq

By design, Hyperterse exposes two transport-layer tools:

  • search - discover project tools by natural language
  • execute - execute a project tool by name

6) Discover project tools

curl -s -X POST http://localhost:8080/mcp \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "method": "tools/call",
    "params": {
      "name": "search",
      "arguments": {
        "query": "hello world greeting"
      }
    },
    "id": 2
  }' | jq

Search hits include name, description, relevance_score, and inputs.

Execute a project tool

curl -s -X POST http://localhost:8080/mcp \
  -H "Content-Type: application/json" \
  -d '{
    "jsonrpc": "2.0",
    "method": "tools/call",
    "params": {
      "name": "execute",
      "arguments": {
        "tool": "hello-world",
        "inputs": { "name": "Hyperterse" }
      }
    },
    "id": 3
  }' | jq

Validate and build

hyperterse validate
hyperterse build -o dist
hyperterse serve dist/

Configuration model

Project layout

my-project/
├── .hyperterse
├── app/
│   ├── adapters/
│   │   └── primary-db.terse
│   └── tools/
│       ├── get-user/
│       │   ├── config.terse
│       │   ├── input.ts
│       │   └── output.ts
│       └── get-weather/
│           ├── config.terse
│           └── handler.ts
└── package.json

Root config (.hyperterse)

name: my-service
server:
  port: 8080
  log_level: 3
tools:
  search:
    limit: 10
  cache:
    enabled: true
    ttl: 60

Tool Examples

DB-backed tool

description: "Get user by ID"
use: primary-db
statement: |
  SELECT id, name, email
  FROM users
  WHERE id = {{ inputs.user_id }}
inputs:
  user_id:
    type: int
auth:
  plugin: api_key
  policy:
    value: "{{ env.API_KEY }}"

Script-backed tool

description: "Get weather by city"
handler: "./handler.ts"
inputs:
  city:
    type: string
auth:
  plugin: allow_all

Supported input types:

  • string
  • int
  • float
  • boolean
  • datetime

Each tool must define exactly one execution mode:

  • use (adapter-backed), or
  • handler (script-backed)

Runtime model

All MCP interaction happens through Streamable HTTP at /mcp (JSON-RPC 2.0), including tools, prompts, resources, completion, and subscriptions.

Execution pipeline:

  1. Tool resolution
  2. Authentication
  3. Input transform (optional)
  4. Execution (DB or handler)
  5. Output transform (optional)
  6. Response serialization

MCP spec compliance

Hyperterse implements the Model Context Protocol (MCP) specification 2025-11-25.

Compliance status by component:

Spec component Status
Base protocol (JSON-RPC 2.0)
Lifecycle (initialize/initialized)
Tools (list, call, listChanged)
Resources (list, read, subscribe, updated)
Prompts (list, get, listChanged)
Completion (ref/prompt, ref/resource)
Pagination (cursor/nextCursor) ⚠️
Tool result content types (image, audio, resource_link) ⚠️

Text content for tool results is supported; image, audio, and resource links are optional. Pagination applies when tools, prompts, or resources exceed typical small-to-medium counts.

Security notes

  • Use {{ env.VAR_NAME }} for secrets and connection strings.
  • {{ inputs.field }} statement substitution is textual; enforce strict input schemas and safe query patterns.
  • Configure tool-level auth explicitly for production use.

Documentation map

Contributing

  1. Fork the repo.
  2. Create a feature branch.
  3. Add or update tests.
  4. Run validation locally.
  5. Open a PR.

See CONTRIBUTING.md and CODE_OF_CONDUCT.md.


The declarative framework for performant MCP servers.
WebsiteGitHubDocumentation

Reviews (0)

No results found