Connect Vigil — an outside witness for AI agents and your agent gets 26 tools, among them vigil_anchor, vigil_anchors, vigil_chain. It answers at https://vigilnotary.com/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 6 of 6 times since 10 September 2026; the last check, on 19 October 2026, succeeded.
Agent leases, signed receipts, watchdogs, and optional paid source-verification evidence.
Description as the publisher wrote it.
| Tool | What it does |
|---|---|
vigil_anchor | PRO: anchor the current chain head to OpenTimestamps on demand (the chain is auto-anchored every few hours regardless). Inputs: vigil_key |
vigil_anchors | Public timestamp submissions to OpenTimestamps calendars. A submission is pending, not an independently verified Bitcoin confirmation. No key required. |
vigil_chain | Read a range of receipts to audit chain continuity. Max 1000 per call. Inputs: from_serial, to_serial |
vigil_delete_watchdog | Remove a watchdog. Inputs: vigil_key, name |
vigil_get_receipt | Fetch a receipt by serial number. Public — anyone can read any receipt. Inputs: serial |
vigil_grant_lease | Grant a short-lived, Ed25519-signed LEASE authorizing an agent to perform an action until it expires. A customer-run gateway verifies the lease offline (fail-closed) before letting the action through. This is the guard on a money/data-movin Inputs: vigil_key, agent, action, ttl_s, lim |
vigil_heartbeat | 'Still alive.' Reset a watchdog's timer. Call this at least once per interval. Inputs: vigil_key, name |
vigil_info | Service description, the Ed25519 signing pubkey to verify receipts against, current chain head, and free-tier limits. No key required. |
vigil_journal_delete | Delete a journal slot. Inputs: vigil_key, slug |
vigil_journal_get | Fetch a journal blob by slug. Returns base64 (decrypt client-side). Inputs: vigil_key, slug |
vigil_journal_list | List your journal slots (slug, size, last-updated). Inputs: vigil_key |
vigil_journal_put | Store an opaque blob under a slug (overwrites). Encrypt client-side: the server stores exactly the bytes supplied and cannot enforce client encryption. Send bytes as base64. Free tier: 4 slots, 64KB each. Inputs: vigil_key, slug, data_base64 |
vigil_lease_status | Public status of a lease (active / expired / revoked). What a gateway polls for revocation. No key required. Inputs: lease_id |
vigil_leases | List your leases and their states. Inputs: vigil_key |
vigil_notarize | Notarize work: POST the sha256 (64 hex chars) of anything and get back an Ed25519-signed, timestamped, hash-chained, serial-numbered receipt. The proof of 'when' is the position in the public chain, not the timestamp string. Free tier: 10/d Inputs: vigil_key, subject_sha256, label |
vigil_pricing | The plans and per-tier limits (free, dev, pro). No key required. |
vigil_register | Create a key. Returns a bearer key shown ONCE — store it; it is your only identity. No email, no account. Starts on the free tier. Inputs: handle |
vigil_renew_lease | Extend a lease with a fresh signed token and new expiry. Renewing is how a healthy agent keeps acting; stop renewing (or revoke) and it lapses. Inputs: vigil_key, lease_id, ttl_s |
vigil_revoke_key | Revoke your own key. It stops authenticating immediately. Irreversible. Inputs: vigil_key |
vigil_revoke_lease | Revoke a lease. A compliant v2 gateway refuses the old offline token at recheck_by_ms (at most 30 seconds after issue/renewal), or earlier if it polls revocation. Revocation is not instantaneous. Inputs: vigil_key, lease_id |
vigil_set_watchdog | Arm a dead-man switch. Register an interval and an https webhook; then call vigil_heartbeat before each interval elapses. Miss one and Vigil POSTs a signed 'absence' payload to your webhook once. Free tier: 1 watchdog. Inputs: vigil_key, name, interval_s, webhook_url, message |
vigil_usage | Your current tier, its limits, and how much you've used today. Requires your key. Inputs: vigil_key |
vigil_verify_lease | Offline, FAIL-CLOSED check of a lease token against a pinned pubkey (defaults to this server's key). Returns allow=true only if the signature verifies and the lease has not expired. A gateway should also poll status for revocation. Inputs: lease, pubkey_hex |
vigil_verify_receipt | Verify a receipt's hash and Ed25519 signature against a pubkey you trust (from vigil_info, confirmed out-of-band). If you omit pubkey_hex it self-attests against THIS server's own key and flags self_attested=true — that is a convenience, no Inputs: receipt, pubkey_hex |
vigil_verify_source | Paid source-local verification with exact evidence and signed receipt. Does not establish absolute truth. Read price and payment requirements before authorizing; retry with the same vigil/idempotency-key metadata and payment proof. Inputs: source_url, claim, options |
vigil_watchdog_status | Read a watchdog's state: interval, last beat, whether it is overdue, fired, or exhausted. Inputs: vigil_key, name |
Every block below points at https://vigilnotary.com/mcp. Pick your client and copy.
claude mcp add --transport http vigil-an-outside-witness-for-ai https://vigilnotary.com/mcp
{
"mcpServers": {
"vigil-an-outside-witness-for-ai": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://vigilnotary.com/mcp"]
}
}
}{
"mcpServers": {
"vigil-an-outside-witness-for-ai": {
"url": "https://vigilnotary.com/mcp"
}
}
}{
"servers": {
"vigil-an-outside-witness-for-ai": {
"type": "http",
"url": "https://vigilnotary.com/mcp"
}
}
}{
"context_servers": {
"vigil-an-outside-witness-for-ai": {
"url": "https://vigilnotary.com/mcp"
}
}
}{
"mcpServers": {
"vigil-an-outside-witness-for-ai": {
"serverUrl": "https://vigilnotary.com/mcp"
}
}
}{
"mcpServers": {
"vigil-an-outside-witness-for-ai": {
"url": "https://vigilnotary.com/mcp"
}
}
}name: Vigil — an outside witness for AI agents
version: 0.0.1
schema: v1
mcpServers:
- name: Vigil — an outside witness for AI agents
type: streamable-http
url: https://vigilnotary.com/mcp{
"mcpServers": {
"vigil-an-outside-witness-for-ai": {
"httpUrl": "https://vigilnotary.com/mcp"
}
}
}{
"mcpServers": {
"vigil-an-outside-witness-for-ai": {
"type": "http",
"url": "https://vigilnotary.com/mcp"
}
}
}{
"mcpServers": {
"vigil-an-outside-witness-for-ai": {
"url": "https://vigilnotary.com/mcp"
}
}
}goose://extension?url=https%3A%2F%2Fvigilnotary.com%2Fmcp&type=streamable_http&id=vigil-an-outside-witness-for-ai&name=Vigil%20%E2%80%94%20an%20outside%20witness%20for%20AI%20agents
It answered our last check on 19 October 2026 in 140 ms. Over 6 checks since 10 September 2026 it answered 6. Status here comes from Neuronto's own probes, not from the publisher.
Yes. It is published by vigilnotary.com and served from vigilnotary.com, the vendor's own domain: https://vigilnotary.com/mcp.
26, as returned by the server's own tools/list on 11 September 2026: vigil_anchor, vigil_anchors, vigil_chain, vigil_delete_watchdog, vigil_get_receipt, vigil_grant_lease, vigil_heartbeat, vigil_info, and 18 more.
It answered our last check on 19 October 2026 in 140 ms. Over 6 checks since 10 September 2026 it answered 6.
Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://vigilnotary.com/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.
It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.
Publisher: com.vigilnotary. Endpoint host: vigilnotary.com. ARD identifier: urn:air:com.vigilnotary:mcp:vigil.
First indexed 10 September 2026. The tools are exactly what the server returned; nothing on this page
is inferred from its name. Ranking in Neuronto search is never for sale.