Open source isn't a feature. It's the foundation.
We built Vurb.ts to let you create secure, production-ready MCP servers with real governance, and deploy them to the Vinkius with a single command.
Vurb.ts isn't
for humans.
It's for AI agents.
Just tell your AI what you need. It writes the MCP server. Run vurb deploy and it's live - hardened, governed, and battle-tested on the Vinkius.
"I need an MCP server for our ERP. We use Prisma. Tools for inventory & suppliers. Redact sensitive data. Purchases need approval."
Schema-as-firewall.
Undeclared fields
never reach the LLM.
Schema-as-firewall. Undeclared database fields are physically stripped before reaching the LLM. New columns invisible until declared.
1,072 lines of implementation. AOT serializer compilation via fast-json-stringify. 6-phase pipeline: validate → truncate → redact → rules → ui → suggest. Config freezes after first .make().
Tools the AI cannot see,
the AI cannot call.
Physically impossible for AI to call tools out of order. Unavailable tools vanish from the protocol.
XState v5 integration with lazy-loading. Physical removal from tools/list — not a validation guard, a protocol-level vanishing. Snapshot/restore for serverless. Clone isolation for concurrent requests.
Multi-agent orchestration.
Telecom-grade routing.
Three lines of code.
Telecom-grade multi-agent orchestration with HMAC-SHA256 delegation tokens. Three lines of code.
463 lines of B2BUA implementation. W3C traceparent propagation. Namespace isolation with auto-prefix. Claim-Check pattern for state > 2KB. Anti-IPI return boundary. Session cap with bypass prevention.
Compiled PII redaction.
Cryptographic lockfiles.
SOC 2 from day one.
Compiled PII redaction at config-time. GDPR, LGPD, HIPAA ready. Zero overhead on the hot path.
SHA-256 behavioral fingerprint. PRs show exactly what changed in the AI-facing contract surface. vurb.lock captures the behavioral contract of every tool. PRs show exactly what changed in the AI-facing surface. Git-diffable SOC 2 artifacts.
Vurb.ts isn't an evolution.
It's an entirely new category.
It controls what AI sees. Locks down PII at compile time. Makes bad tool calls impossible. Runs agent swarms on zero trust. Ships with crypto audit trails. AI-readable out of the box. Nothing else comes close.