Skip to main content
The Logic-Injection-on-Origin Protocol (LIOP) provides the @nekzus/liop package, offering an API surface familiar to MCP developers. If you have previously built servers for MCP, transitioning to LIOP follows the same architectural conventions. In this guide, we’ll build a basic LIOP Server that exposes a tool, and a Client that invokes it.
Under the hood, LIOP compiles logic into sandboxed execution envelopes and dispatches it across the mesh. The SDK abstracts the underlying gRPC and P2P transport, exposing standard tool registration and execution methods.
Building in Rust? LIOP provides native Rust crates (liop-client and liop-core) for systems engineers, WASI guest filters, and low-latency agents. Check out the Rust SDK Overview for Cargo configuration and in-situ injection examples.
1

Install the SDK

Install the official SDK in your Node.js or TypeScript project:
2

Create a LIOP Server (Data Node)

A LIOP Server acts as a Data Node. It connects to the mesh and listens for incoming injected logic from remote agents, exposing secure tools and resources.Create a file named server.ts:
server.ts
3

Create a LIOP Client (Agent Node)

A LIOP Client acts as the Intelligence. It discovers servers on the mesh and injects compiled logic into them.Create a file named client.ts:
client.ts
4

Run your Mesh

First, start your isolated Server:
In a separate terminal, run the agent client:

Explore with LIOP Studio & Interactive Playground

For visual debugging, testing in-situ WASM/JS logic, and inspecting cryptographic proofs in real-time, choose the environment matching your setup:
If you installed @nekzus/liop in your own project, launch LIOP Studio directly:
Open http://localhost:16000 in your browser to inspect the mesh.
Key inspection capabilities in both interfaces:
  • Live Streaming Timeline: Real-time Server-Sent Events (SSE) tracking 7 execution phases (Bootstrap, Discovery, PQC ML-KEM-768 Handshake, AES-256-GCM Sealing, WASI Sandbox Execution, ZK-Receipt Verification, and Aggregated Output).
  • Code Editor with Presets: Test ready-made micro-modules for High-Frequency Trading (HFT), Banking anomaly detection, Medical Records analysis, or PII exfiltration defense.
  • Cryptographic Proof Inspector: Inspect SHA-256 ImageID, HMAC-SHA256 ZK-receipt seals, and dataset integrity digests.
  • Dual Dark Themes: Toggle between OLED Obsidian and Slate Midnight UI themes.

What just happened?

1. Peer Discovery

Client locates the target enclave via Kademlia DHT or Nexus directory without centralized middlemen.

2. Quantum-Safe Tunnel

ML-KEM-768 key encapsulation establishes an AES-256-GCM encrypted tunnel resistant to harvest-now-decrypt-later attacks.

3. In-Situ Execution

Injected code executes inside an isolated WASI sandbox. Only aggregated output and ZK-Receipts egress the enclave.
Unlike legacy REST APIs or MCP string parsing:
  1. Your Client discovered the Server instantly via a P2P Kademlia Routing Table.
  2. A Post-Quantum Kyber Handshake (ML-KEM-768) secured the session.
  3. The query was serialized into binary Protocol Buffers and sealed with AES-256-GCM.
  4. The execution happened inside an isolated WASI Sandbox on the server, protected by the Guardian AST and Egress PII Shield.
  5. The output was cryptographically sealed with an HMAC-SHA256 ZK-Receipt.

Next Steps

With the client verified on the mesh, review the core architecture to configure persistent Watchdogs and Zero-Knowledge receipts.

Core Architecture

Learn how the Data Layer and Transport Layer integrate in LIOP.