claude-vigil-mcp
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@claude-vigil-mcpCreate a checkpoint named stable-v1"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
claude-vigil-mcp
An Model Context Protocol (MCP) server for checkpoint, snapshot, and file recovery in Claude Code. Perfect snapshots, selective restore, bash safety net, and honest disk management.

Every AI coding tool tracks file edits made through its own editor, but none of them track file changes made externally: bash commands (rm, mv, sed -i), Python scripts, build tools, or any process that modifies files outside the editor's API. When those changes go wrong, there's nothing to rewind to. Claude Code's built-in /rewind has additional gaps -- external changes are invisible (#6413, #10077), rewind is all-or-nothing with no selective file restore, timestamps only with no named checkpoints, and reliability bugs (#21608, #18516).
install
Requirements:
From shell:
claude mcp add claude-vigil-mcp -- npx claude-vigil-mcpFrom inside Claude (restart required):
Add this to our global mcp config: npx claude-vigil-mcp
Install this mcp: https://github.com/Vvkmnn/claude-vigil-mcpFrom any manually configurable mcp.json: (Cursor, Windsurf, etc.)
{
"mcpServers": {
"claude-vigil-mcp": {
"command": "npx",
"args": ["claude-vigil-mcp"],
"env": {}
}
}
}There is no npm install required -- no external databases, no indexing, only Node.js built-ins for crypto, compression, and filesystem.
However, if npx resolves the wrong package, you can force resolution with:
npm install -g claude-vigil-mcpRelated MCP server: Memory Bank MCP
skill
Optionally, install the skill to teach Claude when to proactively checkpoint before risky work:
npx skills add Vvkmnn/claude-vigil-mcp --skill claude-vigil --global
# Optional: add --yes to skip interactive prompt and install to all agentsThis makes Claude automatically save checkpoints before destructive bash commands, risky refactors, or context compaction. The MCP works without the skill, but the skill improves discoverability.
plugin
For automatic checkpointing with hooks and commands, install from the claude-emporium marketplace:
/plugin marketplace add Vvkmnn/claude-emporium
/plugin install claude-vigil@claude-emporiumThe claude-vigil plugin provides:
Hooks (background, zero-latency):
PreToolUse (Bash)- auto-quicksave before destructive commands (rm,mv,sed -i,git checkout,git reset)PreCompact- auto-checkpoint before context compaction, both manual (/compact) and automaticStop- auto-checkpoint after Claude finishes a response that included file editsPostToolUse (Write|Edit)- checkpoint after file modificationsSessionEnd- last-chance checkpoint when the session terminates
Command: /checkpoint <save|list|diff|restore|delete>
Requires the MCP server installed first. See the emporium for other Claude Code plugins and MCPs.
features
5 tools. Perfect snapshots. Content diffs. Safe restores with artifact preservation.
vigil_save
Create a named checkpoint of the entire project. Optional description for annotation. If slots are full, Claude asks the user whether to delete an existing checkpoint or increase capacity.
πΊ ββ saved "before-refactor" ββ 47 files Β· 4.2 MB ββ vigil: 2/3 | quicksave: 8m ago | 4.2 MB
β skipped: node_modules, dist, .nextFirst save auto-detects derived directories from .gitignore and creates .vigilignore:
πΊ ββ saved "v1.0" ββ 47 files Β· 4.1 MB ββ vigil: 1/3 | quicksave: none | 4.1 MB
β skipped: node_modules, dist, .next
β first save -- confirm these exclusions look correct
β edit .claude/vigil/.vigilignore to adjustWhen slots are full:
πΊ ββ 3/3 full -- ask the user before proceeding ββ vigil: 3/3 | quicksave: 2m ago | 8.7 MB
β v1.0 (2h ago) Β· before-refactor (45m ago) Β· experiment (5m ago)
β ASK the user: delete one with vigil_delete, or increase capacity with max_checkpoints?vigil_list
Browse checkpoints with descriptions. With name: drill into that checkpoint's files. With glob: filter files by pattern.
πΊ ββ 2 checkpoints ββ vigil: 2/3 | quicksave: 3m ago | 8.7 MB
β v1.0 2h ago 47 files
β Initial stable release
β before-refactor 45m ago 47 files
β Snapshot before risky auth changes
β ~quicksave 3m agoDrill into a checkpoint with glob filtering:
vigil_list name="v1.0" glob="src/auth/**"πΊ ββ v1.0 ββ 3 of 47 files matching src/auth/** ββ vigil: 2/3 | quicksave: 3m ago | 8.7 MB
β src/auth/index.ts
β src/auth/middleware.ts
β src/auth/types.tsvigil_diff
Search and investigate previous versions of your codebase. Compare a checkpoint against the current working directory with full unified diffs, compare two checkpoints against each other, retrieve any file's content from any checkpoint, or search for a string across all checkpoints.
Summary of changes:
vigil_diff name="before-refactor" summary=trueπΊ ββ 3 changes vs before-refactor ββ vigil: 2/3 | quicksave: 3m ago | 8.7 MB
β modified src/auth.ts (+8 -2)
β modified src/middleware/validate.ts (+3 -1)
β added src/services/oauth.tsFull unified diffs:
vigil_diff name="before-refactor"πΊ ββ 3 changes vs before-refactor ββ vigil: 2/3 | quicksave: 3m ago | 8.7 MB
β modified src/auth.ts (+8 -2)
β modified src/middleware/validate.ts (+3 -1)
β added src/services/oauth.ts
ββ src/auth.ts ββ
--- a/src/auth.ts
+++ b/src/auth.ts
@@ -12,6 +12,8 @@
import { validateToken } from './utils';
-function authenticate(req: Request) {
+function authenticate(req: Request, options?: AuthOptions) {
+ if (options?.skipValidation) return true;
const token = req.headers.authorization;Retrieve a single file from a checkpoint:
vigil_diff name="v1.0" file="src/auth.ts"πΊ ββ src/auth.ts from v1.0 ββ
import { validateToken } from './utils';
function authenticate(req: Request) {
const token = req.headers.authorization;
...
ββ diff vs current ββ
--- a/src/auth.ts
+++ b/src/auth.ts
@@ -12,6 +12,8 @@
-function authenticate(req: Request) {
+function authenticate(req: Request, options?: AuthOptions) {Compare two checkpoints:
vigil_diff name="v1.0" against="before-refactor"Shows unified diffs between the two checkpoint states -- no working directory involved.
Search across all checkpoints:
vigil_diff name="*" file="src/auth.ts" search="validateToken"πΊ ββ "validateToken" in src/auth.ts ββ 2 checkpoints ββ vigil: 2/3 | quicksave: 3m ago | 8.7 MB
β v1.0 (2h ago)
β import { validateToken } from './utils';
β before-refactor (45m ago)
β import { validateToken } from './utils';vigil_restore
Restore the project to a checkpoint state. Quicksaves current state first (undo with vigil_restore name="~quicksave"). Displaced files -- both modified and newly created since the checkpoint -- are preserved in .claude/vigil/artifacts/ so nothing is ever lost. For individual file restores, use vigil_diff to retrieve file content, then apply with Edit.
vigil_restore name="v1.0"πΊ ββ restored from "v1.0" ββ 47 files ββ vigil: 2/3 | quicksave: just now | 8.7 MB
β preserved 3 displaced files in .claude/vigil/artifacts/restored_v1.0_20260219_143022/
β modified: src/auth.ts (current version saved)
β modified: src/middleware/validate.ts (current version saved)
β new: src/services/oauth.ts (moved, not in checkpoint)
β review .claude/vigil/artifacts/restored_v1.0_20260219_143022/ -- delete when no longer needed
β previous state also quicksaved (use ~quicksave to undo)
β not restored (derived): node_modules, dist
β rebuild these before running the projectvigil_delete
Delete a checkpoint and reclaim disk space. GC removes unreferenced objects. Use all=true to delete everything.
vigil_delete name="v1.0"πΊ ββ deleted v1.0 ββ reclaimed 241 MB (3,412 objects) ββ vigil: 1/3 | quicksave: 3m ago | 4.5 MBmethodology
How claude-vigil-mcp stores checkpoints:
πΊ claude-vigil-mcp
βββββββββββββββββββ
Claude calls tool
vigil_save
β
βΌ
βββββββββββββββββββ
β spawn worker β <5ms, returns immediately
β (detached) β
ββββββββββ¬βββββββββ
β
ββββββββββββ΄βββββββββββ
β background worker β
β β
β βββββββββββββββββ β
β β walk project β β source files only (skips derived dirs)
β βββββββββ¬ββββββββ β
β β β
β βββββββββΌββββββββ β
β β hash (SHA-256)β β same content = same hash
β βββββββββ¬ββββββββ β
β β β
β βββββββββΌββββββββ β
β β gzip + store β β dedup: skip if exists
β βββββββββ¬ββββββββ β
β β β
β βββββββββΌββββββββ β
β βupdate manifestβ β {path β hash} per checkpoint
β βββββββββββββββββ β
βββββββββββββββββββββββ
βββββββββββββββββββββββββββββββββββββββββββ
β .claude/vigil/ β
β βββ manifest.json checkpoints + metaβ
β βββ objects/ β
β β βββ ab/cdef01...gz gzipped file β
β β βββ f3/981a02...gz gzipped file β
β β βββ ... (deduped) β
β βββ artifacts/ β
β βββ restored_v1.0_20260219_.../ β
β βββ src/auth.ts (modified) β
β βββ src/new.ts (new file) β
βββββββββββββββββββββββββββββββββββββββββββ
3 named slots + 1 rotating quicksave
Every response: "vigil: 2/3 | quicksave: 3m ago | 287 MB"
RESTORE (only sync operation):
vigil_restore("v1.0")
β
βββ quicksave current state (overwrite previous)
β
βββ preserve displaced files in artifacts/
β βββ modified files β copied to artifacts
β βββ new files β moved to artifacts
β
βββ read manifest β get {path β hash}
β
βββ for each file: gunzip object β write to project
β
βββ done: bit-identical working directoryStorage: Content-addressable storage (SHA-256 + gzip). Same file across checkpoints = stored once. Binary files included -- a restored checkpoint is bit-identical to the original.
Performance: Background worker via spawn(detached). MCP tool returns in <5ms. Worker runs independently. Only vigil_restore is synchronous (must write files before Claude proceeds).
Disk honesty: Every tool response shows vigil: 2/3 | quicksave: 3m ago | 273 MB. No hidden costs. 3 checkpoint slots by default. .vigilignore for excluding paths you don't need.
Artifact preservation: On restore, files that would be overwritten or lost (modified since checkpoint, or newly created) are preserved in .claude/vigil/artifacts/. Nothing is ever deleted -- you can always recover displaced work.
v1.0 v1.1 v1.2 objects/
ββββ ββββ ββββ ββββββββββββββββ
src/index.ts ab3f ββββββ ab3f ββββββ ab3f β ab/3f01a2...gz
src/auth.ts f981 e904 ββββββ e904 β f9/81b3c4...gz
e9/04f7a8...gz
src/server.ts 2bc4 ββββββ 2bc4 ββββββ 2bc4 β 2b/c4d5e6...gz
src/utils.ts 7de1 ββββββ 7de1 ββββββ 7de1 β 7d/e1f2a0...gz
src/config.ts 4aa2 ββββββ 4aa2 d71c β 4a/a2b1c3...gz
d7/1c45e8...gz
ββββ ββββ ββββ
new objects: 5 1 1 = 7 (not 15)
ββββββ same SHA-256 across checkpoints -- stored once, referenced many save v1.0 ββββββββββββββββββββββββββββββββββββββββββββββββββ 100 new
save v1.1 ββββββββββββββββββββββββββββββββββββββββββββββββββ 8 new
save v1.2 ββββββββββββββββββββββββββββββββββββββββββββββββββ 3 new
ββββββββββββββββββββββββββββββββββββββββββββββββββ
111 objects store 300 file-versions 2.7Γ dedup
delete v1.0 gc sweep β 62 orphans freed, 49 shared retained
βββββββββββββββββββββββββ 4.1Γ dedup
ββββ new object stored ββββ deduped (hash exists, write skipped)Core techniques:
content-addressable storage (
storeObject): SHA-256 hash βexistsSynccheck β skip or gzip + write. Same content = same address = automatic dedup.mark-and-sweep GC (
gcObjects): Union referenced hashes across all checkpoints, delete orphans, reclaim space.LCS unified diffs (
generateUnifiedDiff): O(nΓm) longest common subsequence with 3-line context hunks.cross-checkpoint search (
diffCheckpointsearch mode): Iterate checkpoints β resolve file hash β gunzip β line scan with Β±2 context.background snapshots (
worker.ts):spawn(detached)with.in-progresslockfile, <5ms return to Claude.
Disk usage: Vigil auto-skips derived directories (node_modules/, dist/, target/, venv/, etc.) detected from .gitignore and common patterns. Only source files are checkpointed.
Project type | Raw size | Source only | First snapshot | Incremental |
Next.js app | 750 MB | ~2 MB | ~1 MB | ~50 KB |
Rust project | 2.5 GB | ~5 MB | ~3 MB | ~100 KB |
Python project | 350 MB | ~3 MB | ~2 MB | ~50 KB |
After restore, vigil reports which derived dirs exist but weren't restored -- Claude rebuilds them (npm install, cargo build, etc.). Edit .claude/vigil/.vigilignore to adjust what gets skipped.
Architecture:
claude-vigil-mcp/
βββ package.json
βββ tsconfig.json
βββ src/
β βββ index.ts # MCP server, 5 tools
β βββ types.ts # TypeScript interfaces and discriminated unions
β βββ store.ts # CAS: hash, store, read, gc, disk usage
β βββ snapshot.ts # create, restore, diff, list, delete
β βββ worker.ts # background snapshot process
βββ .claude/
β βββ skills/
β βββ claude-vigil/
β βββ SKILL.md # optional skill for proactive checkpointing
βββ test/
βββ index.test.ts # 73 testsDesign principles:
No git dependency -- pure Node.js built-ins (crypto, zlib, fs)
Perfect snapshots -- every file captured, no size/binary filtering
CAS + gzip -- 3.5x leaner than hard links, automatic dedup
Background execution -- Claude never blocks on snapshot creation
3-slot limit -- conservative default prevents runaway storage
Stateless server -- reads manifest from disk each call, no in-memory state to lose
Artifact preservation -- displaced files saved on restore, nothing ever lost
Cross-platform -- macOS, Linux, Windows. No shell dependencies
Design influences:
Content-addressable storage -- same content = same address, automatic deduplication
Mark-and-sweep garbage collection -- reference counting alternative for CAS cleanup
Longest common subsequence -- foundation of unified diff generation
Git object model -- inspiration for hash-sharded storage (vigil uses SHA-256 + gzip instead of git's SHA-1 + zlib)
alternatives
Every existing checkpoint tool -- built-in or third-party -- only tracks file edits made through the editor's own API. When Claude runs sed -i, a Python script overwrites a config, or a build tool corrupts output, those changes are invisible and unrecoverable.
Feature | vigil | /rewind | Rewind-MCP | claude-code-rewind | Checkpoints app | Cursor |
Tracks external changes | Yes (bash, scripts, builds) | No | No | No | No | No |
Named checkpoints | Yes | No (timestamps) | Yes | Yes | Yes | No |
Content diffs | Yes (unified diffs) | No | No | Yes (visual) | No | No |
Search across checkpoints | Yes | No | No | No | No | No |
Artifact preservation | Yes (nothing lost) | N/A | No | No | No | No |
Dedup storage | CAS + gzip | None | Unknown | SQLite + diffs | Full copies | Zip per edit |
Background saves | Yes (<5ms return) | Blocking | Blocking | Blocking | Background | Blocking |
Headless/programmatic | Yes (MCP) | No (#16976) | Yes (MCP) | CLI | No | No |
Cross-platform | Node.js | Built-in | Node.js | Python | macOS only | Built-in |
Dependencies | 0 (Node built-ins) | N/A | Node.js | Python + SQLite | Desktop app | N/A |
Disk visibility | Every response | Hidden | Manual | Manual | Manual | Hidden |
Claude Code /rewind -- Built-in checkpoint system. Only tracks file edits made through Claude's own tools -- sed -i, build scripts, and external processes are invisible. No named checkpoints, no content diffs, no search. Blocking saves that pause the session. Not yet available via MCP (#16976).
Rewind-MCP -- Third-party MCP server with stack-based undo. Provides MCP access but doesn't track external changes (bash, scripts, builds). No content diffs, no search across checkpoints, no dedup storage. Blocking saves.
claude-code-rewind -- Python-based snapshot tool with SQLite metadata and visual diffs. Requires Python + SQLite. Doesn't track external changes. No cross-checkpoint search, no artifact preservation, no background saves. CLI-only (no MCP integration).
Checkpoints app -- macOS desktop app that monitors projects for file changes. Background saves but macOS-only, no content diffs, no search, no MCP integration. Stores full copies of each checkpoint (no dedup), so disk usage grows linearly.
Cursor checkpoints -- Built-in to Cursor. Zips project state before each AI edit. No named checkpoints, no content diffs, no search, no external change tracking. Hidden from disk, blocking saves, not programmable.
Three implementation approaches were evaluated before settling on content-addressable storage:
Shadow git repo (
git --git-dir=.claude/vigil/.git --work-tree=.) -- wraps git for dedup, diff, and restore. 6 failure modes: self-tracking recursion, unbounded binary bloat, concurrentindex.lockconflicts, overlay on restore (doesn't delete files added after checkpoint),git cleandestroying project files, andGIT_DIR/GIT_WORK_TREEenv var interference from parent processes.Hard-link Time Machine pattern -- directory trees with unchanged files hard-linked (zero per-file cost). Battle-tested by macOS Time Machine, but 20 checkpoints of 1000 files = 20,000 directory entries. CAS + gzip is 3.5x leaner and deduplicates content across checkpoints for free.
rsync --link-dest -- same hard-link idea in ~30 lines. No built-in diff capability, losing the unified diffs and cross-checkpoint search that make
vigil_diffuseful.
development
git clone https://github.com/Vvkmnn/claude-vigil-mcp && cd claude-vigil-mcp
npm install && npm run build
npm testScripts:
Command | Description |
| TypeScript compilation ( |
| Watch mode ( |
| Run MCP server ( |
| Remove build artifacts ( |
| ESLint code quality checks |
| Auto-fix linting issues |
| Prettier formatting |
| Check formatting without changes |
| TypeScript validation without emit |
| Type-check + lint |
| Pre-publish validation (build + lint + format check) |
Pre-commit hooks via husky run lint-staged (prettier + eslint) on staged .ts files.
Contributing:
Fork the repository and create feature branches
Follow TypeScript strict mode and MCP protocol standards
Learn from examples:
Official MCP servers for reference implementations
TypeScript SDK for best practices
Creating Node.js modules for npm package development
license
Claudius Proclaimed Emperor by Charles Lebayle (1886). Claudius expanded the Vigiles Urbani from firefighters into Rome's night watch -- guardians who patrolled the city, preserved order, and ensured nothing was lost to the dark.
Available Tools
5 toolsvigil_deleteDelete CheckpointADestructive
Delete a checkpoint and reclaim disk space. Use all=true to delete all checkpoints. Note: artifact directories from previous restores are NOT deleted β ask the user if they want you to clean those up separately.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Checkpoint name to delete | |
| all | No | Delete all checkpoints and reclaim all space |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
DestructiveHint annotation already indicates destructive action; description adds value by mentioning disk reclamation and the caveat about artifact directories not being deleted, providing extra behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is very concise with two sentences, no fluff, and covers essential information efficiently.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with two parameters and no output schema, the description adequately covers the action and a notable caveat. Could mention irreversibility explicitly, but destructiveHint implies it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% for both parameters. Description reinforces 'all' usage but does not add significant meaning beyond the schema definitions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states 'Delete a checkpoint and reclaim disk space' with a specific verb and resource. It distinguishes itself from siblings (diff, list, restore, save) by the delete action.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Description provides clear context for deleting one or all checkpoints using the 'all' parameter, and advises about artifact directories not deleted. However, it does not explicitly state when not to use the tool.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vigil_diffCompare StatesARead-onlyIdempotent
Search and investigate previous versions of your codebase. Compare checkpoint vs current working directory (with full unified diffs), compare two checkpoints against each other, retrieve any file's content from any checkpoint, or search for a string across all checkpoints to find when code existed. Use this to find previous versions of files or functions, understand what changed, and pull out whatever snippets or diffs are needed β then apply selectively with Edit.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Checkpoint name to diff against (use "*" with file+search to scan all checkpoints) | |
| file | No | Specific file to retrieve from checkpoint (returns content + diff vs current) | |
| summary | No | Return file list only without content diffs (faster for large changesets) | |
| against | No | Compare against another checkpoint instead of current working directory | |
| search | No | Search for this string across all checkpoints (requires name="*" and file) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds rich behavioral context beyond annotations: it mentions 'full unified diffs', the summary option for faster results, and the capability to search across checkpoints. Annotations already indicate readOnly and idempotent, and the description does not contradict these. It fully informs the agent of safe, stateless behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is extremely concise: two sentences that front-load the overall purpose and then enumerate specific capabilities without redundancy. Every word serves a purpose, and the structure is clear and easy to parse.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's complexity (multiple operations, 5 parameters, no output schema), the description covers the core functionality well, explaining key parameter interactions and use cases. It does not detail return format or error handling, but enough context is provided for effective use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, baseline is 3. The description enhances parameter understanding with usage hints: e.g., name can be '*' for scanning, search requires name='*' and file, against enables cross-checkpoint comparison. This adds meaningful context beyond the schema's brief descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly specifies the tool's purpose: to search and investigate previous versions of the codebase by comparing checkpoints or retrieving file contents. It distinguishes itself from sibling tools like vigil_delete, vigil_list, vigil_restore, and vigil_save through its focus on diffing and historical retrieval.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides explicit usage scenarios: comparing checkpoints, retrieving file contents, and searching across checkpoints. It mentions parameter interactions (e.g., '*' with file+search for scanning all checkpoints). It lacks explicit when-not-to-use guidance but sufficiently implies that this tool is for investigation, not deletion or saving.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vigil_listList CheckpointsARead-onlyIdempotent
List all checkpoints and disk usage. With name: list files inside that checkpoint.
| Name | Required | Description | Default |
|---|---|---|---|
| name | No | Checkpoint name to drill into (omit for overview) | |
| glob | No | Glob pattern to filter files (e.g., "src/auth/**") |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and idempotentHint. Description adds that it shows disk usage and has dual behavior based on name, which aligns with annotations. No contradictions.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with main function, then variation for name. Every word earns its place; no redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a 2-param tool with no output schema, description covers the main behaviors and mentions disk usage. Lacks details on output format or glob usage context, but sufficient for basic use.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, providing baseline of 3. The description adds semantic context for the 'name' parameter (drill into checkpoint) beyond the schema, justifying a score of 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states the tool lists checkpoints and disk usage, with specific behavior when a name is provided (drill into files). This distinguishes it from sibling tools (delete, diff, restore, save) and uses a specific verb+resource combination.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Description implies usage: omit name for overview, provide name to list files. It does not explicitly exclude alternatives or mention when not to use, but sibling tools cover other actions, making the context clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vigil_restoreRestore CheckpointADestructive
Restore project to a checkpoint state. Quicksaves current state first. Displaced files (modified + new) are preserved in .claude/vigil/artifacts/ β nothing is ever deleted. For individual file/function restores, use vigil_diff to get the content and apply with Edit.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Checkpoint name to restore |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds important context beyond the destructiveHint annotation: explains quicksave and that files are never deleted.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three precise sentences with main action first, no wasted words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with one parameter and destructive annotation, the description covers behavior, safety, and alternatives fully.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Single parameter has clear schema description ('Checkpoint name to restore'); tool description adds no additional nuance.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Clearly states 'Restore project to a checkpoint state' and distinguishes from sibling tool vigil_diff for individual file restores.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly mentions that quicksave occurs first, files are preserved, and directs to vigil_diff for individual restores.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vigil_saveSave CheckpointAIdempotent
Create a named checkpoint of the entire project. Runs in background β returns immediately. If slots are full, DO NOT auto-retry β ask the user whether to delete an existing checkpoint or increase capacity.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Checkpoint name (e.g., "before-refactor", "v1.0") | |
| description | No | What this checkpoint captures (shown in vigil_list) | |
| max_checkpoints | No | Increase the maximum number of checkpoint slots (default: 3) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description says 'Runs in background β returns immediately,' adding behavioral context beyond annotations. However, the idempotentHint: true annotation conflicts with the verb 'Create,' which typically implies non-idempotent behavior. The description does not clarify idempotency, creating a contradiction.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences: first defines core action, second gives critical usage warning. No redundancy, front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Covers main behavior (background) and capacity handling. Lacks mention of return value or success/error indications, but no output schema is present. Reasonably complete given sibling context.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, but the description adds context: 'named checkpoint' hints at the 'name' parameter, and the full-slots warning relates to 'max_checkpoints.' No additional details on 'description' parameter are given.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states 'Create a named checkpoint of the entire project,' specifying verb and resource. It differentiates from sibling tools like vigil_delete, vigil_diff, vigil_list, and vigil_restore by focusing on creation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly instructs the agent: if slots are full, DO NOT auto-retry but ask the user to delete or increase capacity. This provides clear when-not-to-use and alternative actions, though does not compare to siblings directly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
5 tool updates
v0.1.3- First observed
vigil_delete - First observed
vigil_diff - First observed
vigil_list - First observed
vigil_restore - First observed
vigil_save
TDQS
Scored across 5 tools
Each tool targets a distinct operation on checkpoints: save, list, diff, restore, delete. There is no functional overlap, and descriptions clearly differentiate them.
All tools follow the 'vigil_verb' pattern with snake_case (e.g., vigil_save, vigil_list). The naming convention is uniform and predictable.
With 5 tools, the server is well-scoped for checkpoint management. Each tool covers a core function without redundancy or missing essential operations.
The tool set provides full lifecycle coverage: create (save), read (list), inspect (diff), update (restore), and delete. No obvious gaps for the domain of checkpoint management.
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Related MCP Connectors
Augments MCP Server - A comprehensive framework documentation provider for Claude Code
A MCP server built for developers enabling Git based project management with project and personalβ¦
Cloud-hosted MCP server for durable AI memory
MCP server for building and testing AI agents with multi-model experimentation and insights.
Related MCP Servers
- AlicenseBqualityDmaintenanceMCP server that lets you search your Claude Code conversation history to find past solutions, track file changes, and learn from previous work.8155178MIT
- AlicenseCqualityDmaintenanceAn MCP server that enables persistent memory, structured thinking sessions, and project-based knowledge management for Claude. It includes specialized coding tools for package discovery and reinvention prevention by validating code against existing libraries and APIs.173-
- AlicenseNot gradedqualityDmaintenanceAn MCP server that provides Claude Code with persistent memory across sessions, including session checkpoints, image persistence, and bidirectional sync with claude.ai projects.1MIT
- AlicenseNot gradedqualityCmaintenanceAn MCP server that provides on-demand safety for AI coding workflows, enabling inspection, review, checkpointing, and rollback of risky actions.171MIT