How do I use vigile-mcp?

1. Click on "Install Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@vigile-mcp check the trust score for the fetch-mcp server" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

vigile-mcp

MCP server for Vigile AI Security — query trust scores for MCP servers and agent skills directly from Claude Code, Cursor, and other AI agents.

Quick Start

npx vigile-mcp

Or install globally:

npm install -g vigile-mcp

Add to Claude Code

{ "mcpServers": { "vigile": { "command": "npx", "args": ["-y", "vigile-mcp"] } } }

Tools

Tool	Description
`vigile_check_server`	Look up trust score for an MCP server by name
`vigile_check_skill`	Look up trust score for an agent skill by name
`vigile_scan_content`	Scan raw tool/skill content for security issues
`vigile_search`	Search the Vigile trust registry by keyword

Authentication

By default, vigile-mcp uses the public Vigile registry (rate-limited). For higher limits, set your API key:

VIGILE_API_KEY=your_key npx vigile-mcp

Or configure it in your MCP client's environment:

{ "mcpServers": { "vigile": { "command": "npx", "args": ["-y", "vigile-mcp"], "env": { "VIGILE_API_KEY": "your_key" } } } }

Rate Limits

Tier	Scans/min	Monthly Quota
Free (no key)	10	50
Pro	60	1,000
Pro+	300	5,000

Registry lookups (vigile_check_server, vigile_check_skill, vigile_search) do not count against your scan quota.

Disclaimer

THIS SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. Vigile AI Security provides security scanning and trust scoring as informational tools only. Trust scores, scan results, and security assessments are based on automated analysis and should not be considered definitive security guarantees.

Vigile does not guarantee the detection of all security threats, vulnerabilities, or malicious behavior. Users are solely responsible for their own security decisions and should use Vigile as one component of a comprehensive security strategy.

Features marked as "Beta" (including Sentinel runtime monitoring) are under active development and may produce false positives, false negatives, or unexpected results.

By using this software, you agree to the Vigile Terms of Service.