Back to MCP Trust Indexm8ven
74
/ 100
9 hours ago
github_topic

vigil

Vigil - a 100% OpenSource AI system for machine-speed network defense

→ Vigil-SOC/vigil· listed on github_topic
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

GitHub

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 14 credentials: VSTRIKE_PASSWORD, CAPE_SANDBOX_API_KEY, ELASTIC_API_KEY, ELASTIC_PASSWORD, DAEMON_WEBHOOK_TOKEN, KAFKA_SASL_PASSWORD, HYBRID_ANALYSIS_API_KEY, ANYRUN_API_KEY, JOE_SANDBOX_API_KEY, ANTHROPIC_API_KEY, SPLUNK_PASSWORD, POSTGRES_PASSWORD, CLAUDE_API_KEY, OPENAI_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configEXTENSION_CONNECTOR_ALLOWLIST
configSHELL
configVIGIL_CONTEXT_PATH
configVIGIL_MODE
configVIGIL_REPO_ROOT
configVITE_DEV_MODE
configVIGIL_CORS_ORIGINS
configDARKTRACE_ENABLED
configDEV_MODE— Auth bypass is enabled by default (=true) for quick development. Full auth is WIP and while it will turn on it is untested. To activate auth set DEV_MODE=false.
configMCP_AUTO_CONNECT_ON_STARTUP
configMODEL_CATALOG_REFRESH_INTERVAL_S
configTESTING
configPOSTGRESQL_CONNECTION_STRING
configDATA_BACKEND
configVSTRIKE_BASE_URL
configVSTRIKE_USERNAME
🔐 secretVSTRIKE_PASSWORD
configVSTRIKE_VERIFY_SSL
configCAPE_SANDBOX_URL
🔐 secretCAPE_SANDBOX_API_KEY
configELASTIC_HOST
configELASTIC_KIBANA_URL
🔐 secretELASTIC_API_KEY
configELASTIC_USERNAME
🔐 secretELASTIC_PASSWORD
configELASTIC_VERIFY_SSL
configSIGMA_PATHS
configSPLUNK_PATHS
configELASTIC_PATHS
configKQL_PATHS
configSENTRY_DSN
configENVIRONMENT
configRELEASE_VERSION
configVIGIL_OTEL_ENABLED
configSECRETS_BACKEND
configENABLE_KEYRING
configDEMO_MODE
configOTEL_EXPORTER_OTLP_ENDPOINT
configVIGIL_OTEL_RECORD_LLM_CONTENT
configVIGIL_OTEL_RECORD_IOC_VALUES
configDATABASE_URL
configDAEMON_LOG_LEVEL
configDAEMON_SPLUNK_POLL_INTERVAL
configDAEMON_CROWDSTRIKE_POLL_INTERVAL
configDAEMON_WEBHOOK_ENABLED
configDAEMON_WEBHOOK_PORT
🔐 secretDAEMON_WEBHOOK_TOKEN
configDAEMON_AUTO_TRIAGE
configDAEMON_AUTO_ENRICH
configDAEMON_BATCH_SIZE
configDAEMON_ENRICH_MAX_INFLIGHT
configDAEMON_ENRICH_BACKFILL
configDAEMON_ENRICH_BACKFILL_INTERVAL
configDAEMON_ENRICH_BACKFILL_BATCH
configDAEMON_ENRICH_BACKFILL_MAX_AGE_HOURS
configDAEMON_AUTO_RESPONSE
configDAEMON_CONFIDENCE_THRESHOLD
configDAEMON_FORCE_APPROVAL
configDAEMON_DRY_RUN
configDAEMON_ESCALATION_ENABLED
configDAEMON_SLACK_ENABLED
configDAEMON_SLACK_CHANNEL
configDAEMON_PAGERDUTY_ENABLED
configDAEMON_ESCALATE_SEVERITIES
configDAEMON_THREAT_HUNT_ENABLED
configDAEMON_THREAT_HUNT_INTERVAL
configDAEMON_CLEANUP_RETENTION_DAYS
configDAEMON_METRICS_ENABLED
configDAEMON_HEALTH_PORT
configORCHESTRATOR_ENABLED
configORCHESTRATOR_LOOP_INTERVAL
configORCHESTRATOR_MAX_AGENTS
configORCHESTRATOR_MAX_ITERATIONS
configORCHESTRATOR_MAX_COST
configORCHESTRATOR_MAX_HOURLY_COST
configORCHESTRATOR_MAX_DAILY_COST
configORCHESTRATOR_MAX_RUNTIME
configORCHESTRATOR_STALE_THRESHOLD
configORCHESTRATOR_WORKDIR
configORCHESTRATOR_AUTO_ASSIGN
configORCHESTRATOR_DRY_RUN
configORCHESTRATOR_DEDUP_WINDOW
configORCHESTRATOR_AUTO_SEVERITIES
configREDIS_URL
configLLM_MAX_CONCURRENT
configKAFKA_ENABLED
configKAFKA_CONSUMER_GROUP
configKAFKA_TOPICS
configKAFKA_AUTO_OFFSET_RESET
configKAFKA_MAX_POLL_RECORDS
configKAFKA_SESSION_TIMEOUT_MS
configKAFKA_SECURITY_PROTOCOL
configKAFKA_SASL_MECHANISM
configKAFKA_SASL_USERNAME
🔐 secretKAFKA_SASL_PASSWORD
configKAFKA_SSL_CA_LOCATION
configMEMPALACE_DAEMON_ENABLED
🔐 secretHYBRID_ANALYSIS_API_KEY
🔐 secretANYRUN_API_KEY
🔐 secretJOE_SANDBOX_API_KEY
configJBXAPIKEY
configSANDBOX_ALLOWED_FILE_TYPES
configSANDBOX_AUTO_SUBMIT
configSANDBOX_POLL_INTERVAL
configTHREAT_FEED_POLL_INTERVAL
configDB_POOL_SIZE
configDB_MAX_OVERFLOW
configDB_POOL_TIMEOUT
configDB_POOL_RECYCLE
configPOSTGRES_HOST
configPOSTGRES_PORT
configPOSTGRES_DB
configPOSTGRES_USER
configPOSTGRES_SSL_MODE
configDB_CONFIG_CHECK_INTERVAL
configBIFROST_URL
configBIFROST_PROBE_MODEL
🔐 secretANTHROPIC_API_KEY— set secrets.anthropicApiKey="$" \
configSPLUNK_URL
configSPLUNK_USERNAME
🔐 secretSPLUNK_PASSWORD
configSPLUNK_VERIFY_SSL
🔐 secretPOSTGRES_PASSWORD
configAUTOSTART_SERVICES
🔐 secretCLAUDE_API_KEY
🔐 secretOPENAI_API_KEY
configPROMPT_INJECTION_BLOCK
configDEFAULT_MODEL
configANTHROPIC_BASE_URL
configMEMPALACE_PALACE_PATH
configOLLAMA_URL
configOLLAMA_EXTRA_TOOL_MODELS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/vigil-soc-vigil-2ztgj2)](https://m8ven.ai/mcp/vigil-soc-vigil-2ztgj2)
commit: cf2cfbb1eee23537f3df8724e7f7e020234c6998
code hash: afed47f9ec5619baee735d4d742cd0022229d818519d8e94333cda132e430950
verified: 7/31/2026, 9:15:40 AM
view raw JSON →