Skip to main content
Smithy · Hono · TypeScript

smithy-hono

Generate a secure, deployable Hono API server (routes, Zod, errors, SSE, MCP) from a Smithy model

Get started →Read the docs
model/main.smithy
@http(method: "POST", uri: "/tasks")
operation CreateTask {
  input: CreateTaskInput
  output: Task
  errors: [ValidationError]
}
▼ ./gradlew smithyBuild
src/app.ts
import { createTaskServiceRouter } from './generated/task.gen';
import { ops } from './routes/tasks';

// Zod validation, typed errors, auth metadata — all generated.
app.route('/', createTaskServiceRouter(ops));

From model to production API

Codegen, not scaffolding

A Smithy build plugin emits Hono routers, Zod schemas, typed error classes, and an operation-handler interface per @http resource. Your src/routes/*.ts satisfy the generated interfaces — and are never overwritten.

Security pipeline built in

@smithy-hono/security-core runs before deserialization: OIDC cookie sessions, SH-HMAC service-to-service signing, CSRF, CORS, security headers, rate limiting, two-tier authorization, and audit — driven by generated operation metadata.

Deploy anywhere web-standard

Runtime-agnostic adapters target Cloudflare Workers (KV + Durable Objects), AWS Lambda (DynamoDB), and Node/Redis + Postgres. One command ships a Worker to Cloudflare with @smithy-hono/deploy-cf.

Typed clients, SSE & MCP

Get a typed client and a discriminated union of @sseEvent shapes for free. Expose the same service as an MCP server over Streamable-HTTP JSON-RPC with @smithy-hono/mcp-core.