← Back to search

io.github.Vigile-ai/vigile-mcp

Vigile-ai Scanned 22h ago

Query trust scores for MCP servers and agent skills. Check if a tool is safe.

B
78.7 / 100

Versions

0.1.1latest
first seen Jun 5, 2026
0.1.2
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 9

vigile_check_server
annotations: none low

Look up the trust score and security findings for an MCP server in the Vigile registry. Returns trust score (0-100), trust level, findings summary, and a link to the full report.

name string
vigile_check_skill
annotations: none low

Look up the trust score for an agent skill (claude.md, .cursorrules, skill.md, etc.) in the Vigile registry. Returns trust score, trust level, findings summary.

name string
vigile_scan_content
annotations: none low

Scan the content of an agent skill file for security issues. Submit raw content from a claude.md, .cursorrules, skill.md, or similar file for analysis. Returns trust score and detailed findings.

name string content string file_type string
vigile_search
annotations: none low

Search the Vigile registry for MCP servers and agent skills by keyword. Returns matching entries with trust scores. Use this when you need to find servers by description or capability.

limit number query string
vigile_verify_location
annotations: none low

Assess location-related privacy and safety risks for AI agent interactions involving physical-world context (deliveries, meetups, financial transactions). Accepts an H3 cell index (preferred, privacy-preserving) or lat/lng coordinates with optional context. Returns risk level, score, factors, and recommendation. All assessment is performed locally — no location data is transmitted to Vigile servers.

context string h3_cell string latitude number longitude number
vigile_recall
annotations: none low

Recall prior Vigile security memory context for an entity, pattern, or incident. Returns compact context, evidence chunks, and source references with provenance status.

query string max_chunks number
vigile_timeline
annotations: none low

Fetch a security timeline for an incident or topic from Vigile memory.

topic string incident_id string
vigile_check_provenance
annotations: none low

Fetch canonical provenance payload for a memory source ID.

source_id string
vigile_remember
annotations: none low

Record a bounded security memory episode for future recall (idempotent write path).

url string title string summary string entity_id string source_id string event_type string idempotency_key string

Permissions 4

network medium
Server uses network capabilities via: fetch(), http, urllib
filesystem low
Server uses filesystem capabilities via: fs sync ops, os, pathlib
shell high
Server uses shell capabilities via: subprocess
env_vars low
Server uses env_vars capabilities via: os.environ, process.env

Scan Findings 29

low
Tool 'vigile_check_server' has no annotations annotation_checker · 100%
low
Tool 'vigile_check_skill' has no annotations annotation_checker · 100%
low
Tool 'vigile_scan_content' has no annotations annotation_checker · 100%
low
Tool 'vigile_search' has no annotations annotation_checker · 100%
low
Tool 'vigile_verify_location' has no annotations annotation_checker · 100%
low
Tool 'vigile_recall' has no annotations annotation_checker · 100%
low
Tool 'vigile_timeline' has no annotations annotation_checker · 100%
low
Tool 'vigile_check_provenance' has no annotations annotation_checker · 100%
low
Tool 'vigile_remember' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: vigile_check_server manifest_parser · 70%
info
Tool: vigile_check_skill manifest_parser · 70%
info
Tool: vigile_scan_content manifest_parser · 70%
info
Tool: vigile_search manifest_parser · 70%
info
Tool: vigile_verify_location manifest_parser · 70%
info
Tool: vigile_recall manifest_parser · 70%
info
Tool: vigile_timeline manifest_parser · 70%
info
Tool: vigile_check_provenance manifest_parser · 70%
info
Tool: vigile_remember manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 171 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%