Enables local MCP clients to expose and execute typed tools through a bounded native runtime with Ed25519 admission, per-session budgets, rate limits, schemas, and cached outputs.