This is the mcpwasm runtime compiled
for the browser: it fetches a site's llms.txt
(llms-txt-skills standard),
verifies every byte against the declared SHA-256 hashes, and runs each tool
in a QuickJS-WebAssembly sandbox. No server on the publisher side. No Node on yours.
Everything below happens in your tab — watch the verification log.
The origin must serve CORS (GitHub Pages does). Publish your own in minutes with the
template.
Same trust model as npx -y @rckflr/mcpwasm <origin> — this page just removes Node from the equation.