Agents, Tools & Context

Rust sits underneath the agent more often than it is the agent. The Model Context Protocol's official SDK is written in RustSource ¹: modelcontextprotocol/rust-sdk, and the isolation layer that hosted agent sandboxes run on is Rust whether or not the product wrapped around it is.

The layers above that line are young: agent frameworks, memory, evaluation and guardrails are mostly work of the last two years, and the cards below carry the dates.

modelcontextprotocol/rust-sdk — the protocol's own organization Back to reference 1 in the text

Agent frameworks partial

Libraries that wire a model to tools, memory and a control loop. The LangChain-port generation has stopped, and one framework now carries most of the shelf.

Featured: aaif-goose/goose [repo]

The reference answer to "what does a serious agent written in Rust look like": a desktop, CLI and API agent with fifteen-plus model providers and seventy-plus MCP extensions, shipping as a single binary. It is listed as a product rather than a library — you run it, you do not depend on it — and it is here because it is the largest piece of evidence that the Rust agent stack is something people actually use rather than something people benchmark. It moved from block/goose to neutral foundation governance in 2026.

an open source, extensible AI agent that goes beyond code suggestions - install, execute, edit, and test with any LLM

productionThe Agentic AI Foundation (Linux Foundation), which now governs goose

stars: 54.2k
license: Apache-2.0
last commit: 2026-09-11

Featured: rig-core [crate · repo · docs]

The one agent framework that consolidated this space, and the reason "which Rust agent framework?" stopped being an open question: 20+ model providers, 18 vector-store integrations, tool calling, structured extraction, streaming, memory, OpenTelemetry GenAI tracing, and a portable core that builds for wasm32. Everything it competed with — llm-chain, langchain-rust, rustformers/llm — has stopped. The cost is churn: its own README carries a breaking-change warning and rig-core has shipped 62 versions, so pin it.

An opinionated library for building LLM powered applications.

docsRig documentation: providers, agents, tools, RAG, observability productionawesome-rig: named production users and community projects

version: 0.42.0
downloads: 1.5M / 90d
stars: 8.6k
license: MIT
last commit: 2026-09-14
published: 2026-08-17
dependents: 15 owners

kalosm [crate · repo · docs]

A simple interface for pretrained AI models

version: 0.4.0
downloads: 2k / 90d
stars: 2.2k
license: MIT/Apache-2.0
last commit: 2026-09-08
published: 2025-02-09
dependents: 6 owners

swiftide [crate · repo · docs]

Fast, streaming indexing, query, and agentic LLM applications in Rust

version: 0.32.1
downloads: 2k / 90d
stars: 780
license: MIT
last commit: 2026-08-10
published: 2025-11-15
dependents: 3 owners

adk-rust [crate · repo · docs]

Rust Agent Development Kit - Build AI agents in Rust with modular components for models, tools, memory, and more.

version: 2.2.0
downloads: 23k / 90d
stars: 649
license: Apache-2.0
last commit: 2026-09-13
published: 2026-09-01
dependents: 4 owners

ThousandBirdsInc/chidori [repo]

The agent framework where every run is durable, replayable, and resumable by default.

stars: 1.4k
last commit: 2026-08-30

ldclabs/anda [repo]

🤖 An AI agent framework built with Rust.

stars: 439
last commit: 2026-08-07

autoagents [crate · repo · docs]

Agent Framework for Building Autonomous Agents

version: 0.4.0
downloads: 5k / 90d
stars: 750
license: MIT OR Apache-2.0
last commit: 2026-08-26
published: 2026-07-08
dependents: 3 owners

New & experimental (2)

Collected, but not clearing the published listing bar — too new, too quiet, or with no use by anyone but its author that we can see. Plenty of good software is here, some of it years old: this says what we can measure, not what it is worth.

Abraxas-365/langchain-rust [repo]

🦜️🔗LangChain for Rust, the easiest way to write LLM-based programs in Rust

stars: 1.3k
license: MIT
last commit: 2025-04-30

llm-chain [crate · repo · docs]

A library for running chains of LLMs (such as ChatGPT) in series to complete complex tasks, such as text summation.

version: 0.13.0
downloads: 6k / 90d
stars: 1.6k
license: MIT
last commit: 2024-10-31
published: 2023-11-15
dependents: 2 owners · 10 repos

Agent protocols (MCP & ACP) comprehensive

Speaking MCP and ACP. Both protocols publish their official Rust SDK out of the protocol's own organization, which makes Rust a reference implementation language here rather than a port target.

Featured: rmcp [crate · repo · docs]

The official Model Context Protocol SDK, from the protocol's own organization, and the most-depended-on AI crate in the language — ahead of every third-party Rust MCP SDK combined. It tracks the current spec revision with OAuth, streamable HTTP, elicitation, sampling, roots and long-running tasks, and is at a stable 3.x with a published migration guide. If you are writing an MCP server, this is the answer; the pre-rmcp attempts (mcp-core, mcpr, mcp-sdk) are superseded.

Rust SDK for Model Context Protocol

productionRerun's re_viewer_mcp, an MCP server for the Rerun Viewer, is built on rmcp productiongoose pins rmcp 3.2 as its Model Context Protocol layer

version: 3.3.0
downloads: 13.4M / 90d
stars: 3.9k
license: Apache-2.0
last commit: 2026-09-12
published: 2026-09-10
dependents: 30 owners

Featured: agent-client-protocol [crate · repo · docs]

The official Rust SDK for the Agent Client Protocol, the editor-to-agent standard that came out of Zed. Together with rmcp it means Rust is the reference implementation language for two of the agent ecosystem's protocols — which is the strongest single thing that can be said about Rust in this hub. It ships a bridge crate into rmcp, so an ACP agent can speak MCP without a second stack.

Core protocol types and traits for the Agent Client Protocol

docsAgent Client Protocol: specification and SDK documentation productionApple: Xcode 27 ships MCP and Agent Client Protocol support (WWDC 2026)

version: 2.1.0
downloads: 1.8M / 90d
stars: 203
license: Apache-2.0
last commit: 2026-09-07
published: 2026-09-04
dependents: 24 owners

agentgateway/agentgateway [repo]

Next Generation Agentic Proxy for AI Agents and MCP servers

stars: 4.8k
license: Apache-2.0
last commit: 2026-09-11

rust-mcp-sdk [crate · repo · docs]

An asynchronous SDK and framework for building MCP-Servers and MCP-Clients, leveraging the rust-mcp-schema for type safe MCP Schema Objects.

version: 2.0.0
downloads: 110k / 90d
stars: 192
license: MIT
last commit: 2026-08-31
published: 2026-08-27
dependents: 23 owners

rust-mcp-schema [crate · repo · docs]

Type-safe implementation of the Model Context Protocol in Rust, designed to reduce errors and accelerate development with powerful utilities.

version: 2.0.0
downloads: 414k / 90d
stars: 76
license: MIT
last commit: 2026-08-22
published: 2026-08-22
dependents: 15 owners

hyper-mcp-rs/hyper-mcp [repo]

📦️ A fast, secure MCP server that extends its capabilities through WebAssembly plugins.

stars: 880
last commit: 2026-07-07

bashkit [crate · repo · docs]

Awesomely fast virtual sandbox with bash and file system

version: 0.18.0
downloads: 47k / 90d
stars: 272
license: MIT
last commit: 2026-09-14
published: 2026-09-11
dependents: 6 owners

turbomcp [crate · repo · docs]

Rust SDK for the Model Context Protocol (MCP): macro-driven servers and a typed client, dual protocol versions, stdio/HTTP/WebSocket transports, OAuth 2.1, OpenTelemetry.

version: 4.0.0-alpha.4
downloads: 7k / 90d
stars: 96
license: MIT
last commit: 2026-09-14
published: 2026-09-10
dependents: 3 owners

codanna [crate · repo · docs]

Local code intelligence MCP server and CLI for AI coding agents

version: 0.16.0
downloads: 849 / 90d
stars: 741
license: Apache-2.0
last commit: 2026-08-29
published: 2026-08-29

basemind [crate · repo · docs]

Full AI context layer over MCP — tree-sitter code-map, document RAG (PDF/Office/HTML/email + OCR + reranker), shared agent memory, on-demand web crawl, git history + blame + per-symbol diff. 300+ languages, 10+ coding-agent harnesses, content-addressed Fjall + LanceDB.

version: 0.24.0
downloads: 1k / 90d
stars: 99
license: MIT
last commit: 2026-09-01
published: 2026-08-08

New & experimental (1)

pctx [crate · repo · docs]

Generate LLM-ready context from your codebase

version: 1.1.0
downloads: 60 / 90d
license: MIT
last commit: 2026-07-22
published: 2026-07-22

Sandboxing, browser & computer use comprehensive

Running model-generated code, and driving a real browser or desktop. The isolation primitives here are general-purpose Rust that the agent world adopted rather than built, and the browser automation is drivers, not agents.

Featured: wasmtime [crate · repo · docs]

The default way to run untrusted code in your own process. WebAssembly gives you a memory-safe boundary with an explicit capability list instead of a syscall surface, which is the property you want when the code was written by a model. It is what Extism wraps to make sandboxing one tool ergonomic, and part of the reason Rust is the isolation layer the rest of the 2026 agent stack is built on — even where the product around it is Go or TypeScript.

High-level API to expose the Wasmtime runtime

productionSingleStore's Code Engine runs every Wasm function in its own in-process wasmtime sandbox postDylibso on how Extism is built over wasmtime's Linker productionShopify's function-runner, which executes Shopify Functions, embeds wasmtime

version: 49.0.0-rc.1
downloads: 9.1M / 90d
stars: 18.6k
license: Apache-2.0 WITH LLVM-exception
last commit: 2026-09-13
published: 2026-09-10
dependents: 35 owners · 2459 repos

Featured: landlock [crate · repo · docs]

Unprivileged filesystem and network confinement using the Linux Landlock LSM, applied by a process to itself. It is the cheapest real sandbox available to a Rust program that runs model-generated code or an untrusted tool: no container, no VM, no root. Linux only, and the kernel decides which restrictions it actually enforces, so check the ABI level you get at runtime.

Landlock LSM helpers

productionOpenAI's Codex CLI builds its Linux sandbox on the landlock crate productionmise confines the commands it runs with Landlock, and fails closed if the kernel will not apply it productionCloud Hypervisor's note on sandboxing the VMM itself at vm_create

version: 0.4.7
downloads: 5M / 90d
stars: 309
license: MIT OR Apache-2.0
last commit: 2026-08-04
published: 2026-07-27
dependents: 31 owners · 2 repos

firecracker-microvm/firecracker [repo]

Secure and fast microVMs for serverless computing.

stars: 36.7k
license: Apache-2.0
last commit: 2026-09-14

cloud-hypervisor/cloud-hypervisor [repo]

A Virtual Machine Monitor for modern Cloud workloads. Features include CPU, memory and device hotplug, support for running Windows and Linux guests, device offload with vhost-user and a minimal compact footprint. Written in Rust with a strong focus on security.

stars: 6.2k
license: Apache-2.0
last commit: 2026-09-11

thirtyfour [crate · repo · docs]

Thirtyfour is a Selenium / WebDriver library for Rust, for automated website UI testing. Tested on Chrome and Firefox, but any webdriver-capable browser should work.

version: 0.37.5
downloads: 457k / 90d
stars: 1.4k
license: MIT OR Apache-2.0
last commit: 2026-08-12
published: 2026-08-12
dependents: 35 owners · 157 repos

fantoccini [crate · repo · docs]

High-level API for programmatically interacting with web pages through WebDriver.

version: 0.22.1
downloads: 441k / 90d
stars: 2k
license: MIT OR Apache-2.0
last commit: 2026-08-08
published: 2026-02-28
dependents: 34 owners · 105 repos

seccompiler [crate · repo · docs]

Provides easy-to-use seccomp-bpf jailing.

version: 0.5.0
downloads: 5.9M / 90d
stars: 89
license: Apache-2.0 OR BSD-3-Clause
last commit: 2026-09-11
published: 2025-03-07
dependents: 33 owners · 144 repos

wasmer [crate · repo · docs]

High-performance WebAssembly runtime

version: 7.4.0
downloads: 840k / 90d
stars: 21k
license: MIT
last commit: 2026-09-08
published: 2026-08-31
dependents: 32 owners · 730 repos

enigo [crate · repo · docs]

Cross-platform (Linux, Windows, macOS & BSD) library to simulate keyboard and mouse events

version: 0.6.1
downloads: 1.4M / 90d
stars: 1.8k
license: MIT
last commit: 2026-08-10
published: 2025-08-28
dependents: 32 owners · 64 repos

cap-std [crate · repo · docs]

Capability-based version of the Rust standard library

version: 4.0.3
downloads: 7.8M / 90d
stars: 821
license: Apache-2.0 WITH LLVM-exception OR Apache-2.0 OR MIT
last commit: 2026-08-20
published: 2026-08-20
dependents: 30 owners · 659 repos

rdev [crate · repo · docs]

Listen and send keyboard and mouse events on Windows, Linux and MacOS.

version: 0.5.3
downloads: 238k / 90d
stars: 743
license: MIT
last commit: 2026-05-12
published: 2023-06-26
dependents: 30 owners · 30 repos

headless_chrome [crate · repo · docs]

Control Chrome programmatically

version: 1.0.22
downloads: 763k / 90d
stars: 2.9k
license: MIT
last commit: 2026-06-11
published: 2026-06-11
dependents: 29 owners · 39 repos

chromiumoxide [crate · repo · docs]

Library for interacting with a chrome instance with the chrome devtools protocol

version: 0.9.1
downloads: 1.8M / 90d
stars: 1.4k
license: MIT OR Apache-2.0
last commit: 2026-04-03
published: 2026-02-25
dependents: 29 owners · 153 repos

screenpipe/screenpipe [repo]

YC (S26) | Open Computer History | Record your screen continuously locally and provide context to your agents (Claude, Codex, Openclaw, Hermes, Runner...)

stars: 21.6k
license: MIT
last commit: 2026-09-13

NVIDIA/OpenShell [repo]

OpenShell is the safe, private runtime for autonomous AI agents.

stars: 8.6k
last commit: 2026-09-12

xcap [crate · repo · docs]

XCap is a cross-platform screen capture library written in Rust. It supports Linux (X11, Wayland), MacOS, Windows, and HarmonyOS (OpenHarmony/OHOS). XCap supports screenshot and video recording (WIP).

version: 0.9.8
downloads: 934k / 90d
stars: 1k
license: Apache-2.0
last commit: 2026-08-25
published: 2026-08-01
dependents: 29 owners

containerd/runwasi [repo]

Facilitates running Wasm / WASI workloads managed by containerd

stars: 1.3k
license: Apache-2.0
last commit: 2026-06-13

extism [crate · repo · docs]

Extism runtime and Rust SDK

version: 1.30.0
downloads: 196k / 90d
stars: 5.8k
license: BSD-3-Clause
last commit: 2026-09-02
published: 2026-06-04
dependents: 21 owners · 3 repos

kuasar-io/kuasar [repo]

A multi-sandbox container runtime that provides cloud-native, all-scenario multiple sandbox container solutions.

stars: 1.5k
license: Apache-2.0
last commit: 2026-06-05

spider [crate · repo · docs]

A web crawler and scraper, building blocks for data curation workloads.

version: 2.53.9
downloads: 60k / 90d
stars: 2.7k
license: MIT
last commit: 2026-09-05
published: 2026-09-05
dependents: 11 owners · 1 repo

uiautomation [crate · repo · docs]

UI Automation Framework for Windows

version: 0.25.1
downloads: 284k / 90d
stars: 198
license: Apache-2.0
last commit: 2026-09-04
published: 2026-09-04
dependents: 11 owners · 1 repo

wasmedge-sdk [crate · repo · docs]

WasmEdge Runtime is a high-performance, extensible, and hardware optimized WebAssembly Virtual Machine for automotive, cloud, AI, and blockchain applications.

version: 0.14.0
downloads: 15k / 90d
stars: 36
license: Apache-2.0
last commit: 2026-09-07
published: 2024-06-03
dependents: 6 owners · 15 repos

bashkit [crate · repo · docs]

Awesomely fast virtual sandbox with bash and file system

version: 0.18.0
downloads: 47k / 90d
stars: 272
license: MIT
last commit: 2026-09-14
published: 2026-09-11
dependents: 6 owners

multikernel/sandlock [repo]

The lightest AI sandbox. A process-based sandbox for Linux, no container, no VM, no privilege, no prompt injection

stars: 403
last commit: 2026-09-13

microsandbox [crate · repo · docs]

microsandbox is the core library for the microsandbox project.

version: 0.6.18
downloads: 13k / 90d
stars: 8.3k
license: Apache-2.0
last commit: 2026-09-11
published: 2026-09-09
dependents: 2 owners

terminator-rs [crate · repo · docs]

A Playwright-style SDK for automating desktop GUI applications

version: 0.23.35
downloads: 1k / 90d
stars: 1.6k
license: non-standard
last commit: 2026-06-02
published: 2025-12-03
dependents: 1 owner

youki [crate · repo · docs]

A container runtime written in Rust

version: 0.7.0
downloads: 136 / 90d
stars: 7.6k
license: Apache-2.0
last commit: 2026-09-14
published: 2026-07-25

New & experimental (1)

pullrun/pullrun [repo]

The AI agent sandbox runtime. Boot any OCI image as a Firecracker microVM, Linux container, or Apple Silicon VM in ~400 ms — zero-copy DAG storage, P2P image sync, native MCP for opencode/Claude Code/Cursor.

stars: 129
last commit: 2026-09-10

Archive (1)

Kept so you stop looking for them. Archives are computed on every build and reverse themselves if the reason clears. Where a human has named the reason or a replacement, it cites the public issue behind that.

extrasafe [crate · repo · docs]

Archived: dormant. Detected automatically, and it un-archives itself if that changes.

Make your code extrasafe by reducing what it can access.

version: 0.5.1
downloads: 8k / 90d
stars: 264
license: MIT
last commit: 2024-04-18
published: 2024-04-16
dependents: 2 owners · 1 repo

Memory, state & durable execution partial

Keeping an agent's work alive across a crash, and keeping what it learned across a context window. Durable execution is the part that works; memory is still a field of young candidates rather than something you can default to.

HelixDB/helix-db [repo]

HelixDB is an OLTP graph database with native vector and full-text search built in Rust on Object Storage.

stars: 5.9k
license: AGPL-3.0
last commit: 2026-09-11

temporalio-client [crate · repo · docs]

Clients for interacting with Temporal

version: 1.0.0
downloads: 1.5M / 90d
stars: 520
license: non-standard
last commit: 2026-09-14
published: 2026-09-04
dependents: 10 owners

restate-sdk [crate · repo · docs]

Restate SDK for Rust

version: 0.12.0
downloads: 518k / 90d
stars: 85
license: MIT
last commit: 2026-09-02
published: 2026-09-02
dependents: 6 owners

ThousandBirdsInc/chidori [repo]

The agent framework where every run is durable, replayable, and resumable by default.

stars: 1.4k
last commit: 2026-08-30

golem-rust [crate · repo · docs]

Golem Rust tooling library that facilitates writing Golem backends in Rust

version: 2.1.0
downloads: 2k / 90d
stars: 1.5k
license: Apache-2.0
last commit: 2026-09-13
published: 2026-05-08
dependents: 1 owner

aimdb-core [crate · repo · docs]

Type-safe async data pipelines — one Rust codebase from MCU to cloud

version: 1.1.0
downloads: 420 / 90d
stars: 99
license: Apache-2.0
last commit: 2026-09-12
published: 2026-05-22
dependents: 1 owner

mempal [crate · repo · docs]

Project memory for coding agents. Single binary, hybrid search, knowledge graph.

version: 0.9.1
downloads: 313 / 90d
stars: 286
license: MIT
last commit: 2026-08-18
published: 2026-08-18

New & experimental (5)

JordyZomer/lemmalog [repo]

A Datalog engine for LLM agent memory: stratified rules, provenance-tracked facts, incremental derivation, and an MCP server that lets your harness use it as a shared brain.

stars: 308
last commit: 2026-09-02

obelisk [crate · repo · docs]

Deterministic workflow engine

version: 0.41.5
downloads: 478 / 90d
stars: 754
license: AGPL-3.0-only
last commit: 2026-09-14
published: 2026-08-31

mentisdb [crate · repo · docs]

Semantic, hash-chained durable memory for long-running and multi-agent systems.

version: 0.10.7
downloads: 535 / 90d
stars: 86
license: MIT
last commit: 2026-08-16
published: 2026-08-16
dependents: 1 owner

remem-ai [crate · repo · docs]

Local-first coding agent memory for Claude Code and OpenAI Codex

version: 0.6.93
downloads: 2k / 90d
stars: 31
license: MIT
last commit: 2026-09-13
published: 2026-09-08

anda_brain [crate · repo · docs]

🧠 Anda Brain (大脑) — Autonomous Graph Memory for AI Agents

version: 0.11.0
downloads: 501 / 90d
stars: 78
license: Apache-2.0
last commit: 2026-08-07
published: 2026-08-07

Observability & evaluation too early

Tracing an agent, scoring its output, and stopping it from saying something it should not — a short shelf of young projects, none of which has become the obvious starting point.

lmnr-ai/lmnr [repo]

Laminar - open-source observability platform purpose-built for AI agents. YC S24.

stars: 3.3k
license: Apache-2.0
last commit: 2026-09-13

traceloop/hub [repo]

High-scale LLM gateway, written in Rust. OpenTelemetry-based observability included

stars: 225
license: Apache-2.0
last commit: 2026-07-15

vllora/vllora [repo]

Debug your AI agents

stars: 811
last commit: 2026-04-07

openinference-semantic-conventions [crate · repo · docs]

OpenInference semantic conventions for LLM observability in Rust

version: 0.1.1
downloads: 57k / 90d
license: MIT OR Apache-2.0
published: 2026-02-22
dependents: 2 owners

New & experimental (3)

oxidized-agentic-audit [crate · repo · docs]

Security scanning for AI agent skills — scans skill directories for dangerous bash patterns, prompt injection, supply chain risks, secret leakage, and frontmatter quality issues

version: 0.6.0
downloads: 7k / 90d
stars: 3
license: MIT
last commit: 2026-04-29
published: 2026-04-29
dependents: 1 owner

rig-tap [crate · repo · docs]

Backend-agnostic observability event schema and taps for Rig agents (prompt/tool lifecycle + context-size sampling).

version: 0.3.0
downloads: 436 / 90d
license: MIT OR Apache-2.0
last commit: 2026-06-07
published: 2026-06-04
dependents: 1 owner

rig-retrieval-evals [crate · repo · docs]

Knowledge-base and retrieval evaluation harness for Rig agents.

version: 0.4.0
downloads: 136 / 90d
license: MIT OR Apache-2.0
last commit: 2026-06-07
published: 2026-06-07
dependents: 1 owner

Archive (1)

tensorzero/tensorzero [repo]

Archived: repo archived. Detected automatically, and it un-archives itself if that changes.

LLM gateway, observability and evaluation. The company wound down voluntarily and returned unspent capital; the tensorzero crate was never more than a v0.0.0 placeholder. Its closest live successors are agentgateway and Plano.

stars: 11.7k
license: Apache-2.0
last commit: 2026-06-04