Query trust scores for MCP servers and agent skills. Check if a tool is safe.
Quick Install
Automated & IDE SetupCopy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.
Not yet automatically verified
We haven't yet run this listing's install command through our automated sandbox check. This isn't a red flag — we're steadily working through the catalog.
Manual Client & Custom JSON ConfigExpand JSON ▾
Client Config & Setup
Choose your client or environment
Target File:
💡 Paste the JSON block into your client's configuration file under mcpServers, then restart the application.
Capabilities & Tool Schemas (5)
Inspect callable tools, capabilities, and parameters exposed to AI agents by Vigile MCP.
vigile_check_serverLook up trust score for an MCP server by name or package
vigile_check_skillLook up trust score for an agent skill (claude.md, .cursorrules, OpenClaw skills, etc.)
vigile_scan_contentScan raw content from a claude.md, .cursorrules, skill.md, or similar file for security issues
vigile_searchSearch the Vigile trust registry by keyword
vigile_verify_locationVerify whether a skill uses location data safely and check for location-based attack patterns
Documentation Overview
vigile-mcp
MCP server for Vigile AI Security — query trust scores for MCP servers and agent skills directly from your AI coding assistant.
Works with Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and any MCP-compatible client.
Installation
Claude Desktop
Add to your Claude Desktop config file:
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json - Windows:
%APPDATA%\Claude\claude_desktop_config.json
Claude Code
Or add to your project's .mcp.json:
Cursor
Add to ~/.cursor/mcp.json:
VS Code (Copilot)
Add to .vscode/mcp.json in your project:
Windsurf
Add to ~/.codeium/windsurf/mcp_config.json:
Global Install (Alternative)
Then replace "command": "npx", "args": ["-y", "vigile-mcp"] with "command": "vigile-mcp" in any config above.
What It Does
Vigile scans and scores MCP servers and agent skills for security issues like tool poisoning, data exfiltration, prompt injection, and supply chain attacks. This MCP server brings those trust scores into your AI workflow — so your coding assistant can check whether a tool is safe before using it.
Covers servers from npm, Smithery, PyPI, and other registries, plus agent skills from Claude Code, Cursor, OpenClaw/ClawHub, and more.
Tools
| Tool | Description |
|---|---|
vigile_check_server | Look up trust score for an MCP server by name or package |
vigile_check_skill | Look up trust score for an agent skill (claude.md, .cursorrules, OpenClaw skills, etc.) |
vigile_scan_content | Scan raw content from a claude.md, .cursorrules, skill.md, or similar file for security issues |
vigile_search | Search the Vigile trust registry by keyword |
vigile_verify_location | Verify whether a skill uses location data safely and check for location-based attack patterns |
Example Usage
Once installed, your AI assistant can use these tools naturally:
"Check if @anthropic/mcp-server-filesystem is safe" "Scan this claude.md file for security issues" "Search for database MCP servers and show me their trust scores"
Trust Scores
Vigile rates every server and skill on a 0-100 scale:
| Score | Level | Meaning |
|---|---|---|
| 80-100 | Trusted | No significant issues found |
| 60-79 | Caution | Minor issues, review recommended |
| 40-59 | Risky | Notable security concerns |
| 0-39 | Dangerous | Critical issues, do not use |
Authentication
By default, vigile-mcp uses the public Vigile registry (rate-limited). For higher limits, set your API key:
Get an API key at vigile.dev.
Rate Limits
| Tier | Scans/min | Monthly Quota |
|---|---|---|
| Free (no key) | 10 | 50 |
| Pro ($30/mo) | 60 | 1,000 |
| Pro+ ($100/mo) | 300 | 5,000 |
Registry lookups (vigile_check_server, vigile_check_skill, vigile_search) do not count against your scan quota. Only vigile_scan_content consumes scans.
Requirements
- Node.js 18+
- An MCP-compatible client
Disclaimer
THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. Vigile AI Security provides security scanning and trust scoring as informational tools only. Trust scores, scan results, and security assessments are based on automated analysis and should not be considered definitive security guarantees.
Vigile does not guarantee the detection of all security threats, vulnerabilities, or malicious behavior. Users are solely responsible for their own security decisions and should use Vigile as one component of a comprehensive security strategy.
By using this software, you agree to the Vigile Terms of Service.
License
MIT
Related MCP Servers
Adoption & maintenance
Factual signals from GitHub, npm, and our automated checks — not a rating.
npm downloads
198
Package downloads in the last 30 days.
Last commit
5mo ago
Most recent push to the default branch.
Tools exposed
5
Callable tools this server registers over MCP.
Directory activity
1 views
Config copies, upvotes, and views on AllMCPs.
Reviews
No reviews yet — be the first to share how this listing worked for you.
Frequently Asked Questions about Vigile MCP
AllMCPs Directory Badge
Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.
Badge Style:
Live Dynamic SVG Preview
Markdown (GitHub README)
[](https://allmcps.com/mcp/vigile-mcp)HTML Embed
<a href="https://allmcps.com/mcp/vigile-mcp"><img src="https://allmcps.com/api/badge/vigile-mcp?style=directory" alt="Vigile MCP on AllMCPs" /></a>Technical Specs & Signals
CategoryDeveloper Tools
0/14 checks healthy over the last 45d
35Quality signal: Fair · 35/100How this signal is calculated ▾
Server availability0/25
Verified ownership8/20
Documentation & tools24/30
Adoption & activity3/15
Community engagement0/10
A guidance signal from public completeness & health data — not a user rating. New listings start lower and rise as they add docs, get verified, and grow adoption. Signals we can't observe for a listing are skipped, not counted against it.
Supply-chain signal
No high-severity advisories surfaced by our automated scan.
Critical 0High 0Medium 0Low 0
Scanned 6d ago via OSV.dev · vigile-mcp (npm)
Own this project?
This directory is pre-filled from public sources. Claim via GitHub README, site badge, or DNS TXT to unlock edit access and the Official badge — proof is checked automatically, then reviewed by our team.
Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.
Claim & get free dofollowShare & Embed
Add our SVG badge (dark/light directory styles) or embeddable widget to your site.