rypsok 0.8.0

Headless meta-search service for AI agents, served over the Model Context Protocol
rypsok-0.8.0 is not a library.

rypsok

CI crates.io License: Apache-2.0

Headless meta-search for AI agents. One tool call, several engines, one clean answer, nothing leaked.

Overview

rypsok is a small service that an AI agent runtime calls over the Model Context Protocol (MCP). It queries several search engines at once, merges and ranks their results, cleans every piece of external text before it reaches the agent, and refuses to send anything that looks like a secret. It is written in Rust and runs as one process with one configuration file.

Tools: web_search, web_fetch and engine_status.

Why and when

  • Your agent needs the web, not a browser. rypsok returns bounded, structured results sized for a context window, never a page dump.
  • You care where queries go. Engines are admitted one by one with their terms on record; queries carrying credentials are refused; logs never hold a query or a URL path.
  • You want one dependency, not a stack. One binary, stdio transport, no database, no browser engine.

rypsok is not a crawler, not a scraper by default, and not an answer engine: it returns what the engines returned, cleaned and ranked, and says so.

Quick start

cargo install rypsok
rypsok serve            # MCP over stdio, Wikipedia only, no file needed

Add an MCP server entry to your agent runtime, for example:

{ "mcpServers": { "rypsok": { "command": "rypsok", "args": ["serve"] } } }

That is a working setup with Wikipedia. From there, five tutorials take you to a keyed engine, reading pages, network mode and the scraping switch, each with a checked example: Tutorial 1: your first search. The configuration reference lists every key, and rypsok check --config rypsok.toml validates a file and prints what it means.

Design notes

  • Two crates. rypsok-core holds every model, pipeline, driver and policy and depends on no protocol SDK; rypsok adds the MCP adapters and the command line. CI fails when a protocol crate reaches the core.
  • One structured response. Every tool returns one outcome (ok, partial, empty) with notices from a fixed vocabulary; nothing is altered or reduced silently.
  • A content boundary. External text is cleaned, bounded and stripped of invisible characters in one place; it is never rewritten.
  • Specification first. Requirements, external design, limits and the threat register are baselined in docs/src/maintainers/; every test names the requirement it verifies.
  • A stable contract. From 1.0.0 the tools, responses, configuration and command line change only with a major version; additions arrive in minor versions and are announced. The stability page says exactly what is frozen and what may change.

More detail

License

Apache-2.0. See LICENSE and NOTICE.