Koskamo

VITNA MCP

VITNA is a containment layer for AI agents that wraps stdio MCP servers. It intercepts risky tool calls, waits for human approval, and produces Ed25519-signed compliance receipts for agent actions. It supports guard mode for blocking unapproved actions and cooperative mode for pre-action checks, integrating with various agent frameworks.

Package and access

Local package with source-attributed installation metadata. Koskamo does not execute packages during review.

VITNA MCP logo, by COSTRINITYVendor evidenceLocal stdioSource reviewed; not executedOperated by COSTRINITY
You need:Trial keys are rate-limited and keep no signed evidence until the account is claimed.Needs an account and an API key first.No credentials to start — the first check creates a trial account by itself.
Vendor documentation

What you can do with it

  • Intercept and block risky AI agent tool calls
  • Generate verifiable compliance receipts for agent actions
  • Integrate with MCP clients like Claude Desktop and Cursor
  • Monitor agent activity via real-time event feeds

Source and maintenance

Vendor evidenceRegistry 0.5.6
Maintenance checked

Packages and installation

Source-provided package data. Koskamo has not executed or live-probed this package.

@costrinity/vitna-compliance-mcp 0.5.6

npm
@costrinity/vitna-compliance-mcp package definition
{
  "version": "0.5.6",
  "transport": "stdio",
  "identifier": "@costrinity/vitna-compliance-mcp",
  "registryType": "npm",
  "registryBaseUrl": "https://registry.npmjs.org",
  "environmentVariables": [
    {
      "name": "VITNA_OWNER_ID",
      "description": "Your VITNA operator UUID. Optional: if unset, the first tool call self-provisions a restricted trial key. The old VIGIL_OWNER_ID name is still accepted."
    },
    {
      "name": "VITNA_API_KEY",
      "description": "Your VITNA API key (new keys vitna_..., legacy vigil_... keys remain valid). Optional: self-provisioned if unset. The old VIGIL_API_KEY name is still accepted."
    },
    {
      "name": "VITNA_EMAIL",
      "description": "Email to own the self-provisioned trial account. Optional: a throwaway is used if unset. It does not claim the account: claim it with GitHub or a passkey. The old VIGIL_EMAIL name is still accepted."
    },
    {
      "name": "VITNA_BASE_URL",
      "default": "https://vitna.costrinity.xyz",
      "description": "VITNA base URL; override only for self-hosted. The old VIGIL_BASE_URL name is still accepted."
    },
    {
      "name": "VITNA_OPEN_CLAIM",
      "description": "Set to 1 to have the trial's claim link opened in your default browser when a trial starts. Either way the link is printed in the MCP server log, and the agent is never sent it."
    }
  ]
}

Tools

Reported by the attributed source; not independently observed by Koskamo.

No tool definitions available.

Connect from your client

Each snippet configures the same source-provided package; replace placeholders before use.

This server is operated by the named third party. Listing and endpoint checks are not an endorsement or a security audit. Review the operator's permissions, terms, and data handling before connecting. How listings are checked and corrected.

Cursor

Merge this local stdio configuration, replace every placeholder environment value, and restart Cursor. Koskamo has not executed this package.
Cursor configuration
{
  "mcpServers": {
    "vitna-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@costrinity/vitna-compliance-mcp@0.5.6"
      ],
      "env": {
        "VITNA_OWNER_ID": "<YOUR_VITNA_OWNER_ID>",
        "VITNA_API_KEY": "<YOUR_VITNA_API_KEY>",
        "VITNA_EMAIL": "<YOUR_VITNA_EMAIL>",
        "VITNA_BASE_URL": "<YOUR_VITNA_BASE_URL>",
        "VITNA_OPEN_CLAIM": "<YOUR_VITNA_OPEN_CLAIM>"
      }
    }
  }
}

Cline

Merge this local stdio configuration, replace every placeholder environment value, and restart Cline. Koskamo has not executed this package.
Cline configuration
{
  "mcpServers": {
    "vitna-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@costrinity/vitna-compliance-mcp@0.5.6"
      ],
      "env": {
        "VITNA_OWNER_ID": "<YOUR_VITNA_OWNER_ID>",
        "VITNA_API_KEY": "<YOUR_VITNA_API_KEY>",
        "VITNA_EMAIL": "<YOUR_VITNA_EMAIL>",
        "VITNA_BASE_URL": "<YOUR_VITNA_BASE_URL>",
        "VITNA_OPEN_CLAIM": "<YOUR_VITNA_OPEN_CLAIM>"
      }
    }
  }
}

VS Code

Merge this local stdio configuration, replace every placeholder environment value, and restart VS Code. Koskamo has not executed this package.
VS Code configuration
{
  "servers": {
    "vitna-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@costrinity/vitna-compliance-mcp@0.5.6"
      ],
      "env": {
        "VITNA_OWNER_ID": "<YOUR_VITNA_OWNER_ID>",
        "VITNA_API_KEY": "<YOUR_VITNA_API_KEY>",
        "VITNA_EMAIL": "<YOUR_VITNA_EMAIL>",
        "VITNA_BASE_URL": "<YOUR_VITNA_BASE_URL>",
        "VITNA_OPEN_CLAIM": "<YOUR_VITNA_OPEN_CLAIM>"
      }
    }
  }
}

Claude Desktop

Merge this local stdio configuration, replace every placeholder environment value, and restart Claude Desktop. Koskamo has not executed this package.
Claude Desktop configuration
{
  "mcpServers": {
    "vitna-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@costrinity/vitna-compliance-mcp@0.5.6"
      ],
      "env": {
        "VITNA_OWNER_ID": "<YOUR_VITNA_OWNER_ID>",
        "VITNA_API_KEY": "<YOUR_VITNA_API_KEY>",
        "VITNA_EMAIL": "<YOUR_VITNA_EMAIL>",
        "VITNA_BASE_URL": "<YOUR_VITNA_BASE_URL>",
        "VITNA_OPEN_CLAIM": "<YOUR_VITNA_OPEN_CLAIM>"
      }
    }
  }
}

Let your agent find its tools

Find servers like VITNA MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.