MCP-сервер Vigilnotary

• Имя в реестреcom.vigilnotary/vigilподтверждён в реестре MCP

Имя в реестре лежит в пространстве vigilnotary.com. Реестр пускает в такое пространство только того, кто доказал владение доменом через DNS или HTTP.

• Состояниеотвечаетпроверено 2026-10-25
• Инструменты26
• Сервер называет себяvigil
• Версия сервера0.1-mvp
• Версия протокола2025-06-18

2026-10-25 сервер ответил на initialize и tools/list без входа. Первый ответ за 174 мс.

• Делают ли инструменты работу продукта, ещё не проверено.
• Проверок пока 2 из 7, нужных, чтобы судить о надёжности.

Вывод сделан правилами по замерам выше. Вероятный первый вызов выбрала модель по списку инструментов: прочитайте описание, прежде чем на него полагаться.

• Оценка INITE MCPчерез неделюдля оценки нужно 7 ежедневных проверок, пока 2
• Отвечалидёт замерпроверок пока 2, долю покажем после 7
• Медиана первого ответа534 мс
• Место в контексте агента≈ 5 017 токеновописания всех инструментов (26), они занимают контекст агента на каждом ходу
• Описания инструментовA · 99 из 100
• Типизированные ответы1 из 26 инструментовобъявлен outputSchema: ответ приходит с типами и читается сразу

• Параметры без описания: в 1 из 26

Программа проверяет сервер раз в день: initialize и tools/list, без модели. Токены - это длина описаний из расчёта примерно четыре символа на токен. Оценка - среднее шести проверок имени, описания, схемы и аннотаций каждого инструмента. Она говорит, насколько понятно описаны инструменты, а не о том, работают ли они. Оценка складывается только из замеренного: отвечает ли сервер (25%), делает ли работу продукта (25%), описания (20%), контекст (10%), использование (10%) и насколько просто подключиться (10%). Незамеренная часть не учитывается, а скрытая инструкция ограничивает оценку 40 баллами. Состояние MCP-серверов вендоров: методика и цифры →

• vigil_info

  Service description, the Ed25519 signing pubkey to verify receipts against, current chain head, and free-tier limits. No key required.

• vigil_register

  Create a key. Returns a bearer key shown ONCE — store it; it is your only identity. No email, no account. Starts on the free tier. Creates a persistent identity. The returned key grants full account control; provision it in a trusted…

• vigil_pricing

  The plans and per-tier limits (free, dev, pro). No key required.

• vigil_usage

  Your current tier, its limits, and how much you've used today. Requires your key.

• vigil_notarize

  Notarize work: POST the sha256 (64 hex chars) of anything and get back an Ed25519-signed, timestamped, hash-chained, serial-numbered receipt. Chain position orders submitted records; the timestamp is a signed assertion of Vigil's clock…

• vigil_get_receipt

  Fetch a receipt by serial number. Public — anyone can read any receipt.

• vigil_verify_receipt

  Verify a receipt's hash and Ed25519 signature against a mandatory, independently pinned Ed25519 public key. The key must not come from the receipt being checked. Returns valid=false for tampering, forgery, a wrong signer, or malformed…

• vigil_chain

  Read a range of receipts to audit chain continuity. Max 1000 per call.

• vigil_set_watchdog

  Arm a dead-man switch. Register an interval and an https webhook; then call vigil_heartbeat before each interval elapses. Miss one and Vigil attempts a signed 'absence' payload to your webhook, retrying failed delivery. Free tier: 1…

• vigil_heartbeat

  'Still alive.' Reset a watchdog's timer. Call this at least once per interval. Resets the deadline and delivery state, potentially suppressing an overdue alert or rearming delivery.

• vigil_watchdog_status

  Read a watchdog's state: interval, last beat, whether it is overdue, fired, or exhausted.

• vigil_delete_watchdog

  Remove a watchdog. Destructive: deletes its configuration and stops future alerts. No undo or restoration of the previous timer is provided.

• vigil_grant_lease

  Grant a short-lived, Ed25519-signed LEASE authorizing an agent to perform an action until it expires. A customer-run gateway verifies the lease offline (fail-closed) before letting the action through. This is the guard on a…

• vigil_renew_lease

  Extend a lease with a fresh signed token and new expiry. Renewing is how a healthy agent keeps acting; stop renewing (or revoke) and it lapses. Security-sensitive: extends authority and refreshes the offline recheck window. Keep renewal…

• vigil_revoke_lease

  Revoke a lease. A compliant v2 gateway refuses the old offline token at recheck_by_ms (at most 30 seconds after issue/renewal), or earlier if it polls revocation. Revocation is not instantaneous. Irreversible for this lease ID; it cannot…

• vigil_lease_status

  Public status of a lease (active / expired / revoked). What a gateway polls for revocation. No key required.

• vigil_verify_lease

  Offline, FAIL-CLOSED check of a lease token against a mandatory, independently pinned Ed25519 public key. Returns allow=true only for a valid signature before expiry and recheck_by_ms. It does not authenticate the calling agent, enforce…

• vigil_leases

  List your leases and their states.

• vigil_anchors

  Public timestamp submissions to OpenTimestamps calendars. A submission is pending, not an independently verified Bitcoin confirmation. No key required.

• vigil_anchor

  PRO: anchor the current chain head to OpenTimestamps on demand (the chain is auto-anchored every few hours regardless). Sends the public chain-head digest to external OpenTimestamps calendars; submission is not verified Bitcoin…

• vigil_journal_put

  Store an opaque blob under a slug (overwrites). Encrypt client-side: the server stores exactly the bytes supplied and cannot enforce client encryption. Send bytes as base64. Free tier: 4 slots, 64KB each. Destructive when the slug exists…

• vigil_journal_get

  Fetch a journal blob by slug. Returns base64 (decrypt client-side).

• vigil_journal_list

  List your journal slots (slug, size, last-updated).

• vigil_journal_delete

  Delete a journal slot. Destructive: removes stored bytes with no undo through the API.

• vigil_revoke_key

  Revoke your own key. It stops authenticating immediately. Irreversible. Irreversible: also revokes the account's leases and deletes its watchdogs. Private journal access is lost; public receipts remain. It does not cancel a Stripe…

• vigil_verify_source

  Paid source-local verification with exact evidence and signed receipt. Does not establish absolute truth. Read price and payment requirements before authorizing; settlement spends USDC irreversibly and there is no automatic refund…