Web-standards-first Python for applications that run across ASGI, Cloudflare Workers, and AWS Lambda.
hayate uses WHATWG Request, Response, Headers, URL, and URLPattern as
its public surface. The application core is a pure
fetch(Request) -> Response function; runtimes and ecosystem features are
mounted around that core.
from hayate import Hayate
app = Hayate()
@app.get("/hello/:name")
async def hello(c):
return c.json({"hello": c.req.param("name")})uvx create-hayate my-app
cd my-app
uv run pytest
uv run uvicorn app:app --reload| Package | Current line | Role | Runtime requirements |
|---|---|---|---|
hayate |
0.8.x | Core framework and runtime adapters | Python 3.12+ |
hayate-auth |
0.7.x | Authentication and OAuth 2.1 authorization server | hayate>=0.8, hayate-fetch>=0.1 |
hayate-mcp |
0.6.x | MCP Streamable HTTP transport and OAuth resource server | hayate>=0.6, mcp>=1.12 |
hayate-openapi |
0.1.x | OpenAPI 3.1 generation | hayate>=0.8 |
hayate-fetch |
0.1.x | Client-side WHATWG fetch for CPython and Workers | hayate>=0.8 |
create-hayate |
0.1.x | Tested API and Workers project scaffolds | Python 3.12+ |
The primary end-to-end story is a hayate application that hosts an MCP server and its OAuth authorization server in one process. The same application has been exercised over real HTTP on ASGI, local workerd, and a deployed Cloudflare Python Worker with D1.
- Standards first. Public behavior names the WHATWG, IETF, W3C, or MCP specification it follows.
- Evidence driven. Runtime support and performance claims are backed by repeatable tests or recorded measurements.
- Small cores. Optional resources are injected through protocols instead of hidden global integrations.
- Portable by construction. Application code should not change when the runtime adapter changes.
The ecosystem is alpha software. Public APIs may still move before 1.0; each repository documents its current support and security posture.
See the organization-wide contributing guide. Report security vulnerabilities privately through the affected repository's Security → Report a vulnerability flow; do not open a public issue.