Skip to content
Back to search
100
MCP live MCP 2026-07-28 streamable-http

Vigil — an outside witness for AI agents

com.vigilnotary/vigil

Agent leases, signed receipts, watchdogs, and optional paid source-verification evidence.

Watch this dependency Share evidence report
Uptime
100.0%
5 direct probes · 30d
Response
384ms
last probe
Tools
26
callable
Resources
0
readable
Prompts
0
available
Score: 100/100
Handshake verified by our own probe.
pass Answers the MCP handshake 50/50
The handshake and the list calls succeeded on the primary URL.
pass Lists tools, resources or prompts 30/30
26 tools, 0 resources, 0 prompts returned.
pass 3 or more catalogue items 10/10
26 items in total; 3 or more earns these points.
pass Describes itself 10/10
89 characters; more than 30 earns these points.

Tools · 26

vigil_info

Service description, the Ed25519 signing pubkey to verify receipts against, current chain head, and free-tier limits. No key required.

vigil_register

Create a key. Returns a bearer key shown ONCE — store it; it is your only identity. No email, no account. Starts on the free tier. Creates a persistent identity. The returned key grants full account c…

vigil_pricing

The plans and per-tier limits (free, dev, pro). No key required.

vigil_usage

Your current tier, its limits, and how much you've used today. Requires your key.

vigil_notarize

Notarize work: POST the sha256 (64 hex chars) of anything and get back an Ed25519-signed, timestamped, hash-chained, serial-numbered receipt. Chain position orders submitted records; the timestamp is …

vigil_get_receipt

Fetch a receipt by serial number. Public — anyone can read any receipt.

vigil_verify_receipt

Verify a receipt's hash and Ed25519 signature against a mandatory, independently pinned Ed25519 public key. The key must not come from the receipt being checked. Returns valid=false for tampering, for…

vigil_chain

Read a range of receipts to audit chain continuity. Max 1000 per call.

vigil_set_watchdog

Arm a dead-man switch. Register an interval and an https webhook; then call vigil_heartbeat before each interval elapses. Miss one and Vigil attempts a signed 'absence' payload to your webhook, retryi…

vigil_heartbeat

'Still alive.' Reset a watchdog's timer. Call this at least once per interval. Resets the deadline and delivery state, potentially suppressing an overdue alert or rearming delivery.

vigil_watchdog_status

Read a watchdog's state: interval, last beat, whether it is overdue, fired, or exhausted.

vigil_delete_watchdog

Remove a watchdog. Destructive: deletes its configuration and stops future alerts. No undo or restoration of the previous timer is provided.

vigil_grant_lease

Grant a short-lived, Ed25519-signed LEASE authorizing an agent to perform an action until it expires. A customer-run gateway verifies the lease offline (fail-closed) before letting the action through.…

vigil_renew_lease

Extend a lease with a fresh signed token and new expiry. Renewing is how a healthy agent keeps acting; stop renewing (or revoke) and it lapses. Security-sensitive: extends authority and refreshes the …

vigil_revoke_lease

Revoke a lease. A compliant v2 gateway refuses the old offline token at recheck_by_ms (at most 30 seconds after issue/renewal), or earlier if it polls revocation. Revocation is not instantaneous. Irre…

vigil_lease_status

Public status of a lease (active / expired / revoked). What a gateway polls for revocation. No key required.

vigil_verify_lease

Offline, FAIL-CLOSED check of a lease token against a mandatory, independently pinned Ed25519 public key. Returns allow=true only for a valid signature before expiry and recheck_by_ms. It does not aut…

vigil_leases

List your leases and their states.

vigil_anchors

Public timestamp submissions to OpenTimestamps calendars. A submission is pending, not an independently verified Bitcoin confirmation. No key required.

vigil_anchor

PRO: anchor the current chain head to OpenTimestamps on demand (the chain is auto-anchored every few hours regardless). Sends the public chain-head digest to external OpenTimestamps calendars; submiss…

vigil_journal_put

Store an opaque blob under a slug (overwrites). Encrypt client-side: the server stores exactly the bytes supplied and cannot enforce client encryption. Send bytes as base64. Free tier: 4 slots, 64KB e…

vigil_journal_get

Fetch a journal blob by slug. Returns base64 (decrypt client-side).

vigil_journal_list

List your journal slots (slug, size, last-updated).

vigil_journal_delete

Delete a journal slot. Destructive: removes stored bytes with no undo through the API.

vigil_revoke_key

Revoke your own key. It stops authenticating immediately. Irreversible. Irreversible: also revokes the account's leases and deletes its watchdogs. Private journal access is lost; public receipts remai…

vigil_verify_source

Paid source-local verification with exact evidence and signed receipt. Does not establish absolute truth. Read price and payment requirements before authorizing; settlement spends USDC irreversibly an…

How to use

Claude Desktop or claude.ai: add a custom connector (Customize → Connectors; on Team and Enterprise plans an owner adds it under Organization settings → Connectors) with this server URL: https://vigilnotary.com/mcp

Cursor or Cline: add to your MCP config:

{
  "mcpServers": {
    "vigil_\u2014_an_outside_witness_for_ai_agents": {
      "url": "https://vigilnotary.com/mcp",
      "transport": "streamable-http"
    }
  }
}