vigile-mcp
About
Security scanner for MCP servers and agent skills — query trust scores, check for vulnerabilities, and search the Vigile trust registry
Details
- Author
- vigile-ai
- Categories
- Developer Tools, Search, Knowledge Base
Jump to
Setup
Install vigile-mcp in your MCP client (Claude Desktop, Cursor, Windsurf, and others).
Repository: https://github.com/vigile-ai/vigile-mcp
Follow the installation instructions in the repository README, then restart your MCP client.
MCP server forVigile AI Security— query trust scores for MCP servers and agent skills directly from your AI coding assistant.
Works with Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and any MCP-compatible client.
- macOS:~/Library/Application Support/Claude/claude_desktop_config.json
- Windows:%APPDATA%\Claude\claude_desktop_config.json
{ "mcpServers": { "vigile": { "command": "npx", "args": ["-y", "vigile-mcp"] } } }
claude mcp add --transport stdio vigile --scope user -- npx -y vigile-mcp
Or add to your project's.mcp.json:
{ "vigile": { "command": "npx", "args": ["-y", "vigile-mcp"] } }
{ "mcpServers": { "vigile": { "command": "npx", "args": ["-y", "vigile-mcp"] } } }
Add to.vscode/mcp.jsonin your project:
{ "servers": { "vigile": { "command": "npx", "args": ["-y", "vigile-mcp"] } } }
Add to~/.codeium/windsurf/mcp_config.json:
{ "mcpServers": { "vigile": { "command": "npx", "args": ["-y", "vigile-mcp"] } } }
Then replace"command": "npx", "args": ["-y", "vigile-mcp"]with"command": "vigile-mcp"in any config above.
Vigile scans and scores MCP servers and agent skills for security issues like tool poisoning, data exfiltration, prompt injection, and supply chain attacks. This MCP server brings those trust scores into your AI workflow — so your coding assistant can check whether a tool is safe before using it.
Covers servers from npm, Smithery, PyPI, and other registries, plus agent skills from Claude Code, Cursor, OpenClaw/ClawHub, and more.
Once installed, your AI assistant can use these tools naturally:
"Check if @anthropic/mcp-server-filesystem is safe" "Scan this claude.md file for security issues" "Search for database MCP servers and show me their trust scores"
Vigile rates every server and skill on a 0-100 scale:
By default,vigile-mcpuses the public Vigile registry (rate-limited). For higher limits, set your API key:
{ "mcpServers": { "vigile": { "command": "npx", "args": ["-y", "vigile-mcp"], "env": { "VIGILE_API_KEY": "vgl_your_key_here" } } } }
Registry lookups (vigile_check_server,vigile_check_skill,vigile_search) do not count against your scan quota. Onlyvigile_scan_contentconsumes scans.
THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. Vigile AI Security provides security scanning and trust scoring as informational tools only. Trust scores, scan results, and security assessments are based on automated analysis and should not be considered definitive security guarantees.
Vigile does not guarantee the detection of all security threats, vulnerabilities, or malicious behavior. Users are solely responsible for their own security decisions and should use Vigile as one component of a comprehensive security strategy.
By using this software, you agree to theVigile Terms of Service.
This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.
Semantic code search for AI agents without indexing your codebase or storing any data. Fast and accurate.
Create and read feature flags, review experiments, generate flag types, search docs, and interact with GrowthBook's feature flagging and experimentation platform.
Word search, crossword, and sudoku generator MCP server with printable PDF worksheets, themed word banks, and verifiable LLM evals. Local-first, from the makers of puzzletide.com.
Official MCP server for Stimulsoft Reports & Dashboards documentation. Semantic search across FAQ, Programming Manual, Server/User Manual, and Server/Cloud API for .NET, WPF, Avalonia, WEB, Blazor, Angular, React, JS, PHP, Java, and Python platforms.
Searching and access your AI coding sessions from Claude Code, Gemini CLI, opencode, and OpenAI Codex.
Search Apple's Developer Documentation with smart search and wildcard support.
MCP server that exposes ast-grep (sg) as two tools for structural code search.
Search everything your terminal ever printed. Local MCP server over per-command recorded output: full-text search, exit codes, diffs, secret redaction. Built and maintained by an AI agent (Soren Achebe).
Let AI agents search, register, and manage domains via API
Search, compare, and get docs for 210+ APIs ranked by CLI and agent relevance
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
