vigil — security grade SAFE, quality 64/100

Security audit verdict: SAFE · quality 64/100

No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

by Vigil-SOC · MCP Server · ★ 340

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

🔒 Is vigil safe to install? View the security audit →

About vigil

Vigil Vigil is the open-source AI SOC where your playbooks are plain-text files, your agent logic is readable Python, and your integrations use an open standard (MCP). Every proprietary AI SOC on the market is a black box you rent. Vigil is a capability you own. The inspiration for the project is in part StackStorm and the experience of some of the founders of this project had in building the Linux Foundation project StackStorm and in supporting Netflix and others who used StackStorm to achieve, carefully, very high levels of automation. You'll sometimes hear us talking about the journey towards full autonomy and lessons learned. One lesson - the system can only demote itself and only humans can promote additional autonomy. You'll find this playing out on the way Vigil is designed; for example Vigil will check thresholds for projected costs and confidence levels in completion before executing an automation. If it looks dodgy or two expensive, it'll double check with the humans before moving ahead.

agentic-aiai-agentsai-soccybersecurity-toolsdetection-engineeringincident-responsellm-agentsmodel-context-protocolnetwork-securityopen-source

Quick Facts

Stars340
Forks85
LanguagePython
CategoryMCP Server
Quality Score64.2719128905417/100
Open Issues10
Last Updated2026-10-03
Created2026-03-13
Platformsmcp, python
Est. Tokens~19k

Compatible Skills

These tools work well together with vigil for enhanced workflows:

  • ai_for_the_win — semantic(0.30)+complementary+rare_topics+same_lang+similar_pop+shared_platform (70%)
  • tachi — semantic(0.25)+complementary+same_lang+similar_pop+shared_platform (59%)
  • Claude-Code-CyberSecurity-Skill — semantic(0.25)+complementary+same_lang+similar_pop+shared_platform (59%)

vigil alternative? Top 6 similar tools

Looking for a vigil alternative? If you're comparing vigil with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • adk_runbooks by dandye · ⭐ 83
  • Wazuh-MCP-Server by gensecaihq · ⭐ 246

    Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability

  • mcp-client-for-ollama by jonigl · ⭐ 827

    Harness the power of local LLMs with this TUI MCP Client for Ollama. Featuring all core MCP primitives (tools,

  • DeepMCPAgent by cryxnet · ⭐ 806

    Model-agnostic plug-n-play LangChain/LangGraph agents powered entirely by MCP tools over HTTP/SSE.

  • vibe-check-mcp-server by PV-Bhat · ⭐ 502

    Vibe Check is a tool that provides mentor-like feedback to AI Agents, preventing tunnel-vision, over-engineeri

  • agent-skills by jdrhyne · ⭐ 241

    A collection of AI agent skills for Clawdbot, Claude Code, Codex

More MCP Server Tools

Explore other popular mcp server tools:

View all MCP Server tools →

Popular Python Agent Tools

Frequently Asked Questions

What is vigil?

vigil is Vigil: The leading open source AI SOC. Apache 2.0. Runs against your own LLM, local or remote.. It is categorized as a MCP Server with 340 GitHub stars.

What programming language is vigil written in?

vigil is primarily written in Python. It covers topics such as agentic-ai, ai-agents, ai-soc.

How do I install or use vigil?

You can find installation instructions and usage details in the vigil GitHub repository at github.com/Vigil-SOC/vigil. The project has 340 stars and 85 forks, indicating an active community.

What are the best alternatives to vigil?

The top alternatives to vigil on Agent Skills Hub include adk_runbooks, Wazuh-MCP-Server, mcp-client-for-ollama. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse MCP Server tools