WebAssembly Unleashed Exploring Wassette, Microsoft's Wasm tool for AI agents | WebAssembly Unleashed
Dec 11, 2025
Yosh Wuyts, a Senior Developer Advocate at Microsoft and a contributor to the WebAssembly ecosystem, delves into Wassette, a groundbreaking tool for AI agents. He explains its innovative sandboxing capabilities, enhancing security while running code. The discussion covers Wasette's architecture using Wasmtime, its component model allowing fine-grained permissions, and its integration with multiple programming languages like Rust and Python. Yosh also contrasts Wassette’s safety against risky native downloads, showcasing its potential to transform development processes.
AI Snips
Chapters
Transcript
Episode notes
Sandboxing Agent Tools With WebAssembly
- WebAssembly provides a sandbox for AI agent tools to prevent credential and data exfiltration.
- Yosh Wuyts explains sandboxing as essential to safely run third-party tools for agents.
Grant Minimal Capabilities To Components
- Install Wasette components from OCI registries and expose them as agent tools inside VS Code.
- Grant only fine-grained capabilities (specific files or URLs) instead of broad OS or network access.
Wasette As A Dynamic MCP Server
- Wasette acts as an MCP server that downloads, instantiates, and policies WebAssembly components on demand.
- Joel Moses and Yosh Wuyts highlight dynamic installation as a way agents teach themselves new capabilities safely.