Skip to content

Layer 1 — Wire (Network)

WireGuard mesh VPN with P2P priority and multi-relay fallback.

Install

pip install meshpop-wire

What It Does

Wire creates a full mesh network between all your servers using WireGuard tunnels. Every node can talk to every other node directly (P2P) or through relay servers if behind NAT.

Components

Command Role
wire Client — joins the mesh, establishes WireGuard tunnels
wire-server Coordinator — key exchange, peer registry
wire-agent Background service — auto-join, status reporting
wire-mcp MCP server — 8 tools for AI integration

CLI

wire --server http://coordinator:8787   # Join mesh network
wire-server                             # Start coordinator
wire-agent                              # Background service

MCP Tools

Tool Description
wire_status VPN running state, peers, network info
wire_peers Connected peers with endpoints
wire_install Install instructions for this machine
wire_diagnose Check WireGuard, connectivity, service status
wire_connect Connect to a Wire network
wire_add_node Add node to network
wire_remove_node Remove node
wire_watchdog Auto-recovery status

Architecture

Coordinator (wire-server)
       │
       ├── Node A (wire client)
       │      ↕ P2P (direct WireGuard)
       ├── Node B (wire client)
       │      ↕ relay (if NAT blocked)
       └── Node C (wire client)
  • IP range: 10.99.x.x
  • Auto Tailscale failover: 100.x.x.x
  • WireGuard ChaCha20-Poly1305 encryption

Source

meshpop/wire — pip install meshpop-wire