@nekzus/liop package, offering an API surface familiar to MCP developers. If you have previously built servers for MCP, transitioning to LIOP follows the same architectural conventions.
In this guide, we’ll build a basic LIOP Server that exposes a tool, and a Client that invokes it.
Under the hood, LIOP compiles logic into sandboxed execution envelopes and dispatches it across the mesh. The SDK abstracts the underlying gRPC and P2P transport, exposing standard tool registration and execution methods.
1
Install the SDK
Install the official SDK in your Node.js or TypeScript project:
2
Create a LIOP Server (Data Node)
A LIOP Server acts as a Data Node. It connects to the mesh and listens for incoming injected logic from remote agents, exposing secure tools and resources.Create a file named
server.ts:server.ts
3
Create a LIOP Client (Agent Node)
A LIOP Client acts as the Intelligence. It discovers servers on the mesh and injects compiled logic into them.Create a file named
client.ts:client.ts
4
Run your Mesh
First, start your isolated Server:In a separate terminal, run the agent client:
Explore with LIOP Studio & Interactive Playground
For visual debugging, testing in-situ WASM/JS logic, and inspecting cryptographic proofs in real-time, choose the environment matching your setup:- Standalone (NPM / npx)
- From the Monorepo
If you installed Open
@nekzus/liop in your own project, launch LIOP Studio directly:http://localhost:16000 in your browser to inspect the mesh.- Live Streaming Timeline: Real-time Server-Sent Events (SSE) tracking 7 execution phases (Bootstrap, Discovery, PQC ML-KEM-768 Handshake, AES-256-GCM Sealing, WASI Sandbox Execution, ZK-Receipt Verification, and Aggregated Output).
- Code Editor with Presets: Test ready-made micro-modules for High-Frequency Trading (HFT), Banking anomaly detection, Medical Records analysis, or PII exfiltration defense.
- Cryptographic Proof Inspector: Inspect SHA-256
ImageID, HMAC-SHA256 ZK-receipt seals, and dataset integrity digests. - Dual Dark Themes: Toggle between OLED Obsidian and Slate Midnight UI themes.
What just happened?
1. Peer Discovery
Client locates the target enclave via Kademlia DHT or Nexus directory without centralized middlemen.
2. Quantum-Safe Tunnel
ML-KEM-768 key encapsulation establishes an AES-256-GCM encrypted tunnel resistant to harvest-now-decrypt-later attacks.
3. In-Situ Execution
Injected code executes inside an isolated WASI sandbox. Only aggregated output and ZK-Receipts egress the enclave.
- Your Client discovered the Server instantly via a P2P Kademlia Routing Table.
- A Post-Quantum Kyber Handshake (ML-KEM-768) secured the session.
- The query was serialized into binary Protocol Buffers and sealed with AES-256-GCM.
- The execution happened inside an isolated WASI Sandbox on the server, protected by the Guardian AST and Egress PII Shield.
- The output was cryptographically sealed with an HMAC-SHA256 ZK-Receipt.
Next Steps
With the client verified on the mesh, review the core architecture to configure persistent Watchdogs and Zero-Knowledge receipts.Core Architecture
Learn how the Data Layer and Transport Layer integrate in LIOP.