vigile-mcp

Security scanner for MCP servers and agent skills — query trust scores, check for vulnerabilities, and search the Vigile trust registry

GitHub

vigile-mcp

MCP server for Vigile AI Security — query trust scores for MCP servers and agent skills directly from Claude Code, Cursor, and other AI agents.

Quick Start

npx vigile-mcp

Or install globally:

npm install -g vigile-mcp

Add to Claude Code

{
  "mcpServers": {
    "vigile": {
      "command": "npx",
      "args": ["-y", "vigile-mcp"]
    }
  }
}

Tools

ToolDescription
vigile_check_serverLook up trust score for an MCP server by name
vigile_check_skillLook up trust score for an agent skill by name
vigile_scan_contentScan raw tool/skill content for security issues
vigile_searchSearch the Vigile trust registry by keyword

Authentication

By default, vigile-mcp uses the public Vigile registry (rate-limited). For higher limits, set your API key:

VIGILE_API_KEY=your_key npx vigile-mcp

Or configure it in your MCP client's environment:

{
  "mcpServers": {
    "vigile": {
      "command": "npx",
      "args": ["-y", "vigile-mcp"],
      "env": {
        "VIGILE_API_KEY": "your_key"
      }
    }
  }
}

Rate Limits

TierScans/minMonthly Quota
Free (no key)1050
Pro601,000
Pro+3005,000

Registry lookups (vigile_check_server, vigile_check_skill, vigile_search) do not count against your scan quota.

Disclaimer

THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. Vigile AI Security provides security scanning and trust scoring as informational tools only. Trust scores, scan results, and security assessments are based on automated analysis and should not be considered definitive security guarantees.

Vigile does not guarantee the detection of all security threats, vulnerabilities, or malicious behavior. Users are solely responsible for their own security decisions and should use Vigile as one component of a comprehensive security strategy.

Features marked as "Beta" (including Sentinel runtime monitoring) are under active development and may produce false positives, false negatives, or unexpected results.

By using this software, you agree to the Vigile Terms of Service.

License

MIT — see LICENSE for details.

Related Servers