@costrinity/vitna-compliance-mcp

Renamed from VIGIL. This package was formerly published as @costrinity/vigil-compliance-mcp and this repo was formerly COSTRINITY/vigil-compliance-mcp. The old package name does not exist on npm — anything still pointing at it will fail to install. Directory listings that show the VIGIL name are stale snapshots of this repo.

Current package: @costrinity/vitna-compliance-mcp Registry entry: xyz.costrinity/vitna-compliance-preflight Site: https://vitna.costrinity.xyz

Pre-action compliance for AI agents: allow, block or hold — before your agent acts.

Most compliance servers answer questions about regulations. This one answers one question about the action your agent is holding right now: may it run? Your agent calls a check, gets allowed / blocked / flagged back synchronously, and decides. VITNA evaluates and records; your system enforces.

Coverage

Readiness scorecards (pre-audit, not certifications) additionally cover NIST Privacy Framework, SOC 2, ISO/IEC 27001 and PCI DSS v4.0.

Every count above is derived from the code and enforced by a build gate — if an implementation is removed, the build fails before the number can go stale. See "Honest limits" below for what these numbers do not mean.

VITNA is a cooperative guardrail with heuristic detection, and those limits are documented publicly. Its purpose is not prevention. It is independently verifiable proof that an AI agent's actions were checked and allowed.

Free checkers — no install, no account

Two questions people usually have to answer before they need any of this. Both run entirely in the browser, take a few questions, and store nothing.

Both are scoping tools, not legal advice, and neither issues a score or a pass/fail. They cite the article and the Official Journal text behind every date they state.

Verify VITNA evidence yourself

Every decision also produces an Ed25519-signed evidence record that anyone can verify offline — no account, and no trust in VITNA's servers required. The public key is published, the verifier is open source, and the three commands below prove it in about a minute.

One minute, no account, no trust in VITNA's servers required. Download the open-source verifier and a real signed sample bundle, then check the signature offline with Node 18+:

curl -sO https://raw.githubusercontent.com/COSTRINITY/vitna-compliance-mcp/main/verify-evidence.mjs
curl -sO https://vitna.costrinity.xyz/sample-evidence.json
node verify-evidence.mjs sample-evidence.json

The verifier checks the Ed25519 signature over the whole package, then recomputes the sha256 of each individual decision record and confirms it matches the hash committed in

... View full README on GitHub