---
bezeichner: "xyz.costrinity/vitna-compliance-preflight"
art: "mcp_server"
slug: "xyz-costrinity-vitna-compliance-preflight"
paketkoordinate: "npm:@costrinity/vitna-compliance-mcp"
status: "aktiv"
homepage: "https://vitna.costrinity.xyz"
erhebungsstand: "2026-10-11T01:17:01.851Z"
namensraum: "xyz.costrinity"
registerseite: "https://tracevero.com/mcp/xyz-costrinity-vitna-compliance-preflight"
abgerufen_am: "2026-10-11"
zugangsdaten_erforderlich: false
ausfuehrungsort: "lokal"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
roh_beschreibung: "Wraps stdio MCP servers. Risky calls wait for a person; no answer, no run. Signed records."
version: "0.5.4"
roh_umgebungsvariablen: "VITNA_OWNER_ID, VITNA_API_KEY, VITNA_EMAIL, VITNA_BASE_URL, VITNA_OPEN_CLAIM"
roh_geheime_pflichtvariablen: ""
roh_transportarten: "stdio, streamable-http"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/COSTRINITY/vitna-compliance-mcp"
roh_paketquellen: "npm"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: "https://vitna.costrinity.xyz/api/mcp"
roh_remote_hosts: "vitna.costrinity.xyz"
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2026-10-07"
roh_aktualisiert_am: "2026-10-07"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json"
roh_bereitstellungsform: "paket und remote"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "@costrinity/vitna-compliance-mcp"
roh_paketversionen: "0.5.4"
roh_laufzeithinweise: ""
roh_umgebungsformate: ""
roh_umgebungsbeschreibungen: "VITNA_API_KEY=Your VITNA API key (new keys vitna_..., legacy vigil_... keys remain valid). Optional: self-provisioned if unset. The old VIGIL_API_KEY name is still accepted. · VITNA_BASE_URL=VITNA base URL; override only for self-hosted. The old VIGIL_BASE_URL name is still accepted. · VITNA_EMAIL=Email to own the self-provisioned trial account. Optional: a throwaway is used if unset. It does not claim the account: claim it with GitHub or a passkey. The old VIGIL_EMAIL name is still accepted. · VITNA_OPEN_CLAIM=Set to 1 to have the trial's claim link opened in your default browser when a trial starts. Either way the link is printed in the MCP server log, and the agent is never sent it. · VITNA_OWNER_ID=Your VITNA operator UUID. Optional: if unset, the first tool call self-provisions a restricted trial key. The old VIGIL_OWNER_ID name is still accepted."
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"@costrinity/vitna-compliance-mcp\",\"version\":\"0.5.4\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"VITNA_OWNER_ID\",\"description\":\"Your VITNA operator UUID. Optional: if unset, the first tool call self-provisions a restricted trial key. The old VIGIL_OWNER_ID name is still accepted.\",\"required\":false,\"secret\":false},{\"name\":\"VITNA_API_KEY\",\"description\":\"Your VITNA API key (new keys vitna_..., legacy vigil_... keys remain valid). Optional: self-provisioned if unset. The old VIGIL_API_KEY name is still accepted.\",\"required\":false,\"secret\":true},{\"name\":\"VITNA_EMAIL\",\"description\":\"Email to own the self-provisioned trial account. Optional: a throwaway is used if unset. It does not claim the account: claim it with GitHub or a passkey. The old VIGIL_EMAIL name is still accepted.\",\"required\":false,\"secret\":false},{\"name\":\"VITNA_BASE_URL\",\"description\":\"VITNA base URL; override only for self-hosted. The old VIGIL_BASE_URL name is still accepted.\",\"required\":false,\"secret\":false},{\"name\":\"VITNA_OPEN_CLAIM\",\"description\":\"Set to 1 to have the trial's claim link opened in your default browser when a trial starts. Either way the link is printed in the MCP server log, and the agent is never sent it.\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[{\"url\":\"https://vitna.costrinity.xyz/api/mcp\",\"transport\":\"streamable-http\",\"headers\":[{\"name\":\"Authorization\",\"description\":\"Bearer <your VITNA API key>. Discovery (initialize, tools/list) and vitna_help work without it; every governed decision tool requires it. Get a key free at https://vitna.costrinity.xyz/dashboard. X-API-Key is also accepted.\",\"required\":false,\"secret\":true}]}]}"
---

# VITNA – Containment for rogue AI agents

## Measured values

| Property | Value | Source | Collected on | Level of trust | Raw declaration |
| --- | --- | --- | --- | --- | --- |
| Required secrets declared | false | MCP-Register | 2026-08-12T01:17:01.369Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: |
| Execution location | lokal | MCP-Register | 2026-08-12T01:17:01.369Z | abgeleitet | roh_transportarten: stdio, streamable-http |
| Path argument present | false | MCP-Register | 2026-08-12T01:17:01.369Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository URL listed | true | MCP-Register | 2026-08-12T01:17:01.369Z | abgeleitet | roh_repository_url: https://github.com/COSTRINITY/vitna-compliance-mcp |
| Description (raw) | Wraps stdio MCP servers. Risky calls wait for a person; no answer, no run. Signed records. | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft |  |
| Declared version | 0.5.4 | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft |  |
| Environment variables (raw) | VITNA_OWNER_ID, VITNA_API_KEY, VITNA_EMAIL, VITNA_BASE_URL, VITNA_OPEN_CLAIM | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft |  |
| Required secret variables (raw) |  | MCP-Register | 2026-08-12T01:17:01.369Z | selbstauskunft |  |
| Transports (raw) | stdio, streamable-http | MCP-Register | 2026-08-12T01:17:01.369Z | selbstauskunft |  |
| Path arguments (raw) |  | MCP-Register | 2026-08-12T01:17:01.369Z | selbstauskunft |  |
| Repository (raw) | https://github.com/COSTRINITY/vitna-compliance-mcp | MCP-Register | 2026-08-12T01:17:01.369Z | selbstauskunft |  |
| Package registries (raw) | npm | MCP-Register | 2026-08-12T01:17:01.369Z | selbstauskunft |  |
| Required secret headers (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Path environment variables (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote URLs (raw) | https://vitna.costrinity.xyz/api/mcp | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote hosts (raw) | vitna.costrinity.xyz | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Registry status message (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| First listed in the registry (raw) | 2026-10-07 | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft |  |
| Last changed in the registry (raw) | 2026-10-07 | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft |  |
| Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Delivery form (raw) | paket und remote | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository subfolder (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package identifiers (raw) | @costrinity/vitna-compliance-mcp | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Package versions (raw) | 0.5.4 | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft |  |
| Runtime hints (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable formats (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Environment variable descriptions (raw) | VITNA_API_KEY=Your VITNA API key (new keys vitna_..., legacy vigil_... keys remain valid). Optional: self-provisioned if unset. The old VIGIL_API_KEY name is still accepted. · VITNA_BASE_URL=VITNA base URL; override only for self-hosted. The old VIGIL_BASE_URL name is still accepted. · VITNA_EMAIL=Email to own the self-provisioned trial account. Optional: a throwaway is used if unset. It does not claim the account: claim it with GitHub or a passkey. The old VIGIL_EMAIL name is still accepted. · VITNA_OPEN_CLAIM=Set to 1 to have the trial's claim link opened in your default browser when a trial starts. Either way the link is printed in the MCP server log, and the agent is never sent it. · VITNA_OWNER_ID=Your VITNA operator UUID. Optional: if unset, the first tool call self-provisions a restricted trial key. The old VIGIL_OWNER_ID name is still accepted. | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft |  |
| Icon formats (raw) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"@costrinity/vitna-compliance-mcp","version":"0.5.4","transport":"stdio","environment":[{"name":"VITNA_OWNER_ID","description":"Your VITNA operator UUID. Optional: if unset, the first tool call self-provisions a restricted trial key. The old VIGIL_OWNER_ID name is still accepted.","required":false,"secret":false},{"name":"VITNA_API_KEY","description":"Your VITNA API key (new keys vitna_..., legacy vigil_... keys remain valid). Optional: self-provisioned if unset. The old VIGIL_API_KEY name is still accepted.","required":false,"secret":true},{"name":"VITNA_EMAIL","description":"Email to own the self-provisioned trial account. Optional: a throwaway is used if unset. It does not claim the account: claim it with GitHub or a passkey. The old VIGIL_EMAIL name is still accepted.","required":false,"secret":false},{"name":"VITNA_BASE_URL","description":"VITNA base URL; override only for self-hosted. The old VIGIL_BASE_URL name is still accepted.","required":false,"secret":false},{"name":"VITNA_OPEN_CLAIM","description":"Set to 1 to have the trial's claim link opened in your default browser when a trial starts. Either way the link is printed in the MCP server log, and the agent is never sent it.","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[{"url":"https://vitna.costrinity.xyz/api/mcp","transport":"streamable-http","headers":[{"name":"Authorization","description":"Bearer <your VITNA API key>. Discovery (initialize, tools/list) and vitna_help work without it; every governed decision tool requires it. Get a key free at https://vitna.costrinity.xyz/dashboard. X-API-Key is also accepted.","required":false,"secret":true}]}]} | MCP-Register | 2026-10-08T01:17:01.893Z | selbstauskunft |  |

## Links

- Namespace: [[namensraum/xyz-costrinity|xyz.costrinity]]

---

- Registry page: <https://tracevero.com/mcp/xyz-costrinity-vitna-compliance-preflight>
- Retrieved on: 2026-10-11
