Vigil - AI Security Audit and Cryptographic Proof MCP Server

@vigil-xy

代码仓库

基本信息

分类

开发工具

传输方式

stdio

作者

vigil-xy

提交者

desada

关于 Vigil - AI Security Audit and Cryptographic Proof MCP Server

Security scanner for developers and startups.

#security#vulnerabilities#ai-system

Vigil - AI Security Audit and Cryptographic Proof MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "vigil-mcp": {
      "command": "npx",
      "args": [
        "vygil",
        "scan"
      ]
    }
  }
}

Vigil - AI Security Audit and Cryptographic Proof MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is Vigil - AI Security Audit and Cryptographic Proof?

Vigil is a production-ready security scanner that performs deep security audits of systems—covering networks, processes, filesystems, dependencies, configurations, and containers—and generates cryptographically signed, tamper-evident reports using Ed25519 signatures with SHA-256 hashing. It integrates seamlessly with AI assistants like Claude Desktop and Cursor through the Model Context Protocol (MCP), making it ideal for developers and security teams.

How to use Vigil - AI Security Audit and Cryptographic Proof?

Install globally via npm (npm install -g vygil) or run directly with npx (npx vygil scan). Use the CLI: vygil scan (basic scan), vygil scan --json -o report.json (JSON output saved to file), vygil verify report.json (verify cryptographic signature), and vygil keys --generate (generate key pair). To expose scanning tools to AI assistants, start the MCP server with vygil-mcp and configure the assistant’s MCP settings (e.g., add to Claude Desktop’s claude_desktop_config.json).

Key features of Vigil - AI Security Audit and Cryptographic Proof

Comprehensive security scanning across six domains
Cryptographically signed reports with Ed25519 and SHA-256
MCP server integration for AI assistants (Claude, Cursor)
CLI interface with scan, verify, and key management commands
Tamper-evident reports for compliance and auditing
Modular scanner design with parallel execution

Use cases of Vigil - AI Security Audit and Cryptographic Proof

Identify security vulnerabilities in local development environments
Detect exposed secrets, weak file permissions, and dangerous configurations
Audit dependencies for known vulnerabilities using npm audit
Monitor container and network security for privileged containers and open ports
Generate tamper-evident security reports for compliance and auditing

常见问题

How do I install Vigil?

Install globally via npm: `npm install -g vygil`, or use directly with npx: `npx vygil scan` (no installation required). You can also clone the repository and build from source.

How do I run a security scan?

Use the CLI command `vygil scan` for a basic scan with cryptographic signing. Add `--json` for JSON output, `-o report.json` to save to file, or `--no-sign` to skip signing. Combine options, e.g., `vygil scan --json -o report.json`.

How do I verify that a report hasn’t been tampered with?

Run `vygil verify report.json` to verify the cryptographic signature (Ed25519). The verification confirms the report’s authenticity and integrity.

How do I integrate Vigil with Claude Desktop or Cursor?

After starting the MCP server (`vygil-mcp`), add it to your AI assistant’s MCP configuration file. For Claude Desktop on macOS, add to `~/Library/Application Support/Claude/claude_desktop_config.json`. For Cursor, add to `.cursor/mcp_config.json` in your project.

Where are cryptographic keys stored?

Keys are stored in the `~/.vigil/keys/` directory. Generate a new Ed25519 key pair with `vygil keys --generate`, and show your public key with `vygil keys --show-public`.

开发工具分类下的更多 MCP 服务器

Mythex

Remote MCP server for Mythex, an AI app builder. Claude, Cursor or Codex get a cloud sandbox to build full-stack apps: files and bash, live preview, Postgres database, file storage, secrets, checkpoints, browser tests an

Foremerge

naw103

Catch intent conflicts before code conflicts. The open-source coordination protocol for coding agents, built above Git.

LastPing

Know when your AI agents, cron jobs and CI pipelines fail, stall or go quiet. Your agent sets up monitors from a plain description, tells you what is broken and why, reads run history and traces, and writes notes on inci

Moxie Docs

Jackalope-Dev

Automated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.

GripForge

gripforgeai

The tools your AI needs to make your games. Turn prompts into production-ready game assets — animated characters with their weapons attached, seamless textures, terrain, VFX, HUDs — and playable game kits Unity, Godot, U