VITNA – Containment for rogue AI agents

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-12T01:42:06.399279Z",
      "publishedAt": "2026-10-12T01:42:06.399279Z",
      "statusChangedAt": "2026-10-12T01:42:06.399279Z"
    }
  },
  "server": {
    "name": "xyz.costrinity/vitna-compliance-preflight",
    "title": "VITNA – Containment for rogue AI agents",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "remotes": [
      {
        "url": "https://vitna.costrinity.xyz/api/mcp",
        "type": "streamable-http",
        "headers": [
          {
            "name": "Authorization",
            "isSecret": true,
            "description": "Bearer <your VITNA API key>. Discovery (initialize, tools/list) and vitna_help work without it; every governed decision tool requires it. Get a key free at https://vitna.costrinity.xyz/dashboard. X-API-Key is also accepted."
          }
        ]
      }
    ],
    "version": "0.5.6",
    "packages": [
      {
        "version": "0.5.6",
        "transport": {
          "type": "stdio"
        },
        "identifier": "@costrinity/vitna-compliance-mcp",
        "registryType": "npm",
        "registryBaseUrl": "https://registry.npmjs.org",
        "environmentVariables": [
          {
            "name": "VITNA_OWNER_ID",
            "description": "Your VITNA operator UUID. Optional: if unset, the first tool call self-provisions a restricted trial key. The old VIGIL_OWNER_ID name is still accepted."
          },
          {
            "name": "VITNA_API_KEY",
            "isSecret": true,
            "description": "Your VITNA API key (new keys vitna_..., legacy vigil_... keys remain valid). Optional: self-provisioned if unset. The old VIGIL_API_KEY name is still accepted."
          },
          {
            "name": "VITNA_EMAIL",
            "description": "Email to own the self-provisioned trial account. Optional: a throwaway is used if unset. It does not claim the account: claim it with GitHub or a passkey. The old VIGIL_EMAIL name is still accepted."
          },
          {
            "name": "VITNA_BASE_URL",
            "default": "https://vitna.costrinity.xyz",
            "description": "VITNA base URL; override only for self-hosted. The old VIGIL_BASE_URL name is still accepted."
          },
          {
            "name": "VITNA_OPEN_CLAIM",
            "description": "Set to 1 to have the trial's claim link opened in your default browser when a trial starts. Either way the link is printed in the MCP server log, and the agent is never sent it."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/COSTRINITY/vitna-compliance-mcp",
      "source": "github"
    },
    "websiteUrl": "https://vitna.costrinity.xyz",
    "description": "Guard wraps stdio MCP servers: risky calls wait for a person; no answer, no run. Remote: cooperative"
  }
}