# 使用 Homebrew, winget 安装 wassette

查看 wassette 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

## 安装

```sh
sudo av install brew:wassette
```

其他安装命令:

### macOS

- Homebrew (100%):

```sh
brew install wassette
```

  证据: local Homebrew formula metadata

### Windows

- winget (92%):

```sh
winget install --id Microsoft.Wassette -e
```

  证据: Windows Package Manager source index: Microsoft.Wassette from https://cdn.winget.microsoft.com/cache/source.msix

## 软件包事实

- **软件包键:** brew:wassette
- **软件包管理器:** Homebrew
- **软件包管理器页面:** <https://formulae.brew.sh/formula/wassette>
- **版本:** 0.5.0
- **来源摘要:** Security-oriented runtime that runs WebAssembly Components via MCP
- **主页:** <https://microsoft.github.io/wassette/>
- **仓库:** <https://github.com/microsoft/wassette>
- **上游文档:** <https://microsoft.github.io/wassette/>
- **许可证:** MIT
- **源码归档:** <https://github.com/microsoft/wassette/archive/refs/tags/v0.5.0.tar.gz>
- **最后更新:** 2026-07-23T01:09:26Z
- **已生成:** 2026-08-04T22:13:35+00:00

## 可执行文件

- wassette (cli)
- wassette (别名)

## 构建依赖

- pkgconf
- rust

## 安装行为

- post-install 钩子: 未定义
- Bottle: 可用 于 arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux

## 版本和新鲜度

- 页面生成时间: 2026-08-04
- 管理器版本: 0.5.0
- 管理器更新时间: 2026-07-23
- 本地数据: OK
- 上游仓库: https://github.com/microsoft/wassette
- 检测到的最新版本: v0.5.0 (当前)
## 项目历史与用法

Wassette is a Microsoft open source runtime and MCP server that exposes WebAssembly Components as tools for AI agents. Its history is short, but it is notable because it applies Wasmtime, the Component Model, OCI artifacts, and deny-by-default permissions to the emerging Model Context Protocol tool ecosystem.

### 项目历史

The project's changelog records v0.1.0 on August 5, 2025 as the initial Wassette release, adding the core MCP server, SSE and stdio transports, component lifecycle management, policy-based permissions, examples, CLI support, installation, and documentation.

Microsoft's open source blog introduced Wassette on August 6, 2025 through the Azure Core Upstream team. The announcement described it as a security-oriented runtime for running WebAssembly Components via MCP, able to fetch components from OCI registries and execute them with Wasmtime-backed sandboxing.

### 采用历史

As of its early public releases, Wassette is explicitly marked by its repository as early development and not production ready. Its adoption story is therefore mostly experimental: agent developers can wire it into MCP-capable clients such as GitHub Copilot, Cursor, Claude Code, and Gemini CLI, then load Wasm components as tools.

Its significance comes from timing. MCP made agent tools easy to connect, but also raised the risk of giving agents arbitrary local executables. Wassette's answer is to package tools as WebAssembly Components, inspect typed interfaces, and enforce a deny-by-default permission model before granting filesystem, network, or other host access.

### 使用方式

Users register Wassette as an MCP server with an agent, then ask the agent to load a WebAssembly Component. Wassette translates the component's typed exports into MCP tools and brokers calls through a Wasmtime sandbox.

Component authors can build tools in languages that target the WebAssembly Component Model, publish them as OCI artifacts, and let Wassette fetch and run them. That makes it a package-oriented security layer for agent tools rather than a general-purpose Wasm CLI.

### 为什么软件包爱好者会关心

Wassette is package-nerd interesting because it combines three packaging interfaces that usually live separately: MCP tool registration, OCI artifact distribution, and Wasm Component interfaces. It treats tool installation as something an agent may request dynamically, but tries to keep the runtime authority narrow and auditable.

For the WebAssembly ecosystem, it is a concrete example of the Component Model's promise: tools can expose typed functions instead of ad hoc JSON-over-process contracts, and the host can reason about permissions before executing untrusted code.

### 时间线

- 2025-08-05: Wassette v0.1.0 initial release added the core MCP server, component lifecycle management, and permission system.
- 2025-08-06: Microsoft Open Source introduced Wassette publicly as WebAssembly-based tools for AI agents.
- 2025-2026: Documentation and repository warnings continued to frame Wassette as early-stage, security-oriented infrastructure for MCP and WebAssembly Component experiments.

### Related projects

- Wasmtime provides the underlying WebAssembly runtime sandbox.
- The WebAssembly Component Model and WIT provide the typed interfaces Wassette exposes as tools.
- The Model Context Protocol is the protocol surface through which AI agents call Wassette-managed tools.
- OCI registries are used as a distribution mechanism for WebAssembly Components.

### 来源

- <https://github.com/microsoft/wassette>
- <https://github.com/microsoft/wassette/blob/main/CHANGELOG.md>
- <https://microsoft.github.io/wassette/>
- <https://microsoft.github.io/wassette/latest/concepts.html>
- <https://opensource.microsoft.com/blog/2025/08/06/introducing-wassette-webassembly-based-tools-for-ai-agents/>


## 安全说明

generalized runtime or code generation signal.

- **Geiger 风险:** yellow / 中
- generalized runtime or code generation signal

## 源数据库详情

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** wassette
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## 其他软件包管理器记录

- winget - Microsoft.Wassette: normalized package name match | Windows Package Manager source index: Microsoft.Wassette from https://cdn.winget.microsoft.com/cache/source.msix


## 相关链接

- [Source-control packages](https://pkg.so/zh-hans/source-control-tools/) - Belongs to a source-control command family.
- [MCP tool packages](https://pkg.so/zh-hans/mcp-tools/) - Mentions MCP or Model Context Protocol.
- [Secret-risk packages](https://pkg.so/zh-hans/secret-risk-packages/) - Has protected-tool coverage, approval-gate, or non-low Geiger security signals.
- [AI and agent packages](https://pkg.so/zh-hans/ai-agent-tools/) - Matched AI model, agent, coding-agent, orchestration, or MCP metadata.
- [pkgconf](https://pkg.so/zh-hans/brew/pkgconf/) - Build dependency declared by Homebrew.
- [rust](https://pkg.so/zh-hans/brew/rust/) - Build dependency declared by Homebrew.
- [snyk-agent-scan](https://pkg.so/zh-hans/brew/snyk-agent-scan/) - Shares pkgdb curated category or tags: ai, cli, mcp, security.
- [github-mcp-server](https://pkg.so/zh-hans/brew/github-mcp-server/) - Shares pkgdb curated category or tags: ai, cli, mcp.
- [mcp-toolbox](https://pkg.so/zh-hans/brew/mcp-toolbox/) - Shares pkgdb curated category or tags: ai, cli, mcp.
- [n8n-mcp](https://pkg.so/zh-hans/brew/n8n-mcp/) - Shares pkgdb curated category or tags: ai, cli, mcp.
- [playwright-mcp](https://pkg.so/zh-hans/brew/playwright-mcp/) - Shares pkgdb curated category or tags: ai, cli, mcp.
- [chrome-devtools-mcp](https://pkg.so/zh-hans/brew/chrome-devtools-mcp/) - Shares pkgdb curated category or tags: ai, cli, mcp.
- [mcp-grafana](https://pkg.so/zh-hans/brew/mcp-grafana/) - Shares pkgdb curated category or tags: ai, cli, mcp.
- [mcp-inspector](https://pkg.so/zh-hans/brew/mcp-inspector/) - Shares pkgdb curated category or tags: ai, cli, mcp.
- [hyper-mcp](https://pkg.so/zh-hans/brew/hyper-mcp/) - Local package facts share a topical domain. Shared terms: ai, cli, mcp, that, webassembly.
- [mcphost](https://pkg.so/zh-hans/brew/mcphost/) - Local package facts share a topical domain. Shared terms: ai, cli, mcp, via.

## Combined YAML source

View the package source record on GitHub. [combined/wassette.yml](https://github.com/mxcl/pkgdb/blob/main/combined/wassette.yml)


## 来源

- pkg.so package database
- Geiger risk classifier
- package-page enrichment
- curated package history
- package version freshness
- pkgdb category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph