{"$schema":"https://wellknown.network/schemas/agent-record-v1.json","schemaVersion":"1","id":"ag_tumabbwcc6ma","handle":"mcp-vigil","url":"https://wellknown.network/agents/mcp-vigil","links":{"self":"https://wellknown.network/agents/mcp-vigil/record.json","html":"https://wellknown.network/agents/mcp-vigil","markdown":"https://wellknown.network/agents/mcp-vigil/record.md","api":"https://wellknown.network/api/v1/agents/mcp-vigil","status":"https://wellknown.network/api/v1/agents/mcp-vigil/status","claim":"https://wellknown.network/agents/mcp-vigil/claim","claimApi":"https://wellknown.network/api/v1/claims","claimDescriptor":"https://wellknown.network/agents/mcp-vigil/claim.json","badge":"https://wellknown.network/agents/mcp-vigil/badge.svg","openapi":"https://wellknown.network/openapi.json","history":"https://wellknown.network/api/v1/agents/mcp-vigil/history","tools":"https://wellknown.network/api/v1/agents/mcp-vigil/tools"},"ard":{"identifier":"urn:air::server:mcp-vigil","type":"application/mcp-server-card+json"},"kind":"mcp_server","declared":{"name":"mcp-vigil","summary":"Security audit CLI for MCP (Model Context Protocol) configurations. Find leaked API keys, excessive permissions, and vulnerable servers before attackers do.","description":"# 🛡️ mcp-guard \n \n**Security audit CLI for MCP (Model Context Protocol) configurations.** \n \nFind leaked API keys, excessive permissions, and vulnerable servers before attackers do. \n \n```bash \npip install mcp-vigil \nmcp-vigil scan \n``` \n \n--- \n \n## Demo \n \n``` \n$ mcp-vigil scan \n \n╔══════════════════════════════════════╗ \n║       MCP GUARD — Security Audit     ║ \n╚══════════════════════════════════════╝ \n \n📄 ~/.cursor/mcp.json \n   Servers: 5  |  Findings: 0 critical, 3 high, 1 other  |  Score: 67/100 (C) \n \n🟠 [HIGH] Excessive filesystem access: / \n   Server 'filesystem' has --directory set to / — entire disk exposed. \n   Fix: Restrict to a specific subdirectory. \n \n🟠 [HIGH] Secret in env block of MCP config \n   Server 'github', env: GITHUB_PERSONAL_ACCESS_TOKEN \n   Contains a hardcoded secret value in the config file. \n   Fix: Move to .env file. \n \n🟠 [HIGH] Secret in env block of MCP config \n   Server 'slack', env: SLACK_BOT_TOKEN \n   Contains a hardcoded secret value in the config file. \n   Fix: Move to .env file. \n \n🟡 [MEDIUM] MCP server using HTTP without TLS \n   Server 'insecure-remote' connects via http:// — data not encrypted. \n   Fix: Use https:// instead. \n \n──────────────────────────────────────── \n  Files scanned:  1 \n  Total findings: 4  (3 HIGH, 1 MEDIUM) \n \n⚠️  High-severity issues found — fix soon \n``` \n \n![mcp-vigil demo](assets/demo.png)   \n \n--- \n \n## What it does \n \nScans your MCP configuration files and finds: \n \n- 🔴 **Hardcoded API keys** — GitHub tokens, OpenAI keys, AWS credentials in plain text \n- 🟠 **Excessive filesystem access** — Servers with access to `/` or `/home` \n- 🟠 **Untrusted server sources** — MCP servers from pastebin, raw GitHub gists, etc \n- 🟠 **Known CVEs** — Checks against CVE-2025-49596, CVE-2025-6514, and more \n- 🟡 **Unpinned versions** — npx packages without version pins (supply chain risk) \n- 🟡 **Insecure transport** — HTTP without TLS for remote servers \n- 🔵 **Missing environment variables** — Referenced bu…","publisher":null,"homepage":null,"repository":null,"version":"0.3.0","license":"MIT","protocols":["mcp"],"tags":["mcp"],"pricing":null,"endpoints":[{"url":"pypi:mcp-vigil","type":"package_pypi","auth":null,"probeable":false}],"skills":null,"tools":null,"extra":null,"attribution":{"kind":"pypi","name":"pypi","license":"pypi","summary":"pypi","version":"pypi","description":"pypi"}},"derived":{"capabilities":[{"slug":"dev.filesystem","name":"Filesystem","confidence":1,"provenance":"derived"},{"slug":"dev.version-control","name":"Version Control","confidence":0.779,"provenance":"derived"}],"categories":["dev"],"language":"en"},"observed":{"status":"unknown","statusReason":"Distributed as a package to run locally; no network endpoint to check.","lastOkAt":null,"lastProbedAt":null,"statusComputedAt":null,"reliability30d":null,"latestObservations":[],"tools":null,"package":{"name":"mcp-vigil","registry":"pypi","observedAt":"2026-11-03T17:25:56.543Z","publishedAt":"2026-07-16T09:01:40.310824Z","latestVersion":"0.3.0"},"toolSurface":null,"endpointFacts":[]},"verification":{"claimed":false,"claimedAt":null,"proofs":[]},"provenance":{"sources":[{"source":"pypi","key":"mcp-vigil","url":"https://pypi.org/project/mcp-vigil/","firstSeenAt":"2026-09-10T05:21:48.950Z","fetchedAt":"2026-11-03T17:24:11.818Z","normalizedAt":"2026-11-03T17:24:11.818Z"}]},"firstSeenAt":"2026-09-10T05:21:48.950Z","updatedAt":"2026-11-03T17:25:56.543Z"}