
Product
Socket MCP Adds Org Alerts, Threat Feed Review, and Package Inspection
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.
The official Rust SDK for the Model Context Protocol. Build MCP servers that expose tools, resources, and prompts to AI assistants — or build clients that connect to them.
For getting started, usage guides, and full MCP feature documentation (resources, prompts, sampling, roots, logging, completions, subscriptions, etc.), see the main README.
| Feature | Description | Default |
|---|---|---|
server | Server functionality and the tool system | ✅ |
client | Client functionality | |
macros | #[tool] / #[prompt] macros (re-exports rmcp-macros) | ✅ |
schemars | JSON Schema generation for tool definitions | |
auth | OAuth 2.0 authentication support | |
elicitation | Elicitation support |
| Feature | Description |
|---|---|
transport-io | Server-side stdio transport |
transport-child-process | Client-side stdio transport (spawns a child process) |
transport-async-rw | Generic async read/write transport |
transport-streamable-http-client | Streamable HTTP client (transport-agnostic) |
transport-streamable-http-client-reqwest | Streamable HTTP client with default reqwest backend |
transport-streamable-http-server | Streamable HTTP server transport |
| Feature | Description |
|---|---|
reqwest | Uses rustls — pure Rust TLS (recommended default) |
reqwest-native-tls | Uses platform-native TLS (OpenSSL / Secure Transport / SChannel) |
reqwest-tls-no-provider | Uses rustls without a default crypto provider (bring your own) |
The transport layer is pluggable. Two built-in pairs cover the most common cases:
| Client | Server | |
|---|---|---|
| stdio | TokioChildProcess | stdio |
| Streamable HTTP | StreamableHttpClientTransport | StreamableHttpService |
Any type that implements the Transport trait can be used. The IntoTransport helper trait provides automatic conversions from:
(Sink, Stream) or a combined Sink + Stream(AsyncRead, AsyncWrite) or a combined AsyncRead + AsyncWriteWorker implementationTransport implementation directlyThis project is licensed under the terms specified in the repository's LICENSE file.
FAQs
Unknown package
The cargo package rmcp receives a total of 673,260 weekly downloads. As such, rmcp popularity was classified as popular.
We found that rmcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.

Research
More than 140 Mastra npm packages were compromised in a supply chain attack that used a typosquatted dependency to deliver a cross-platform infostealer during installation.