Vestige MCP Server

by samvallad33• 659•• Scanned•Claim this listing•Request removal
Security & Testingagent securityagentic securityai agentsanthropicaudit log

Think before doing, prove before saving. Vestige is the local-first cognitive operating system and deterministic safety kernel for autonomous AI agents. Powered by FSRS-6 causal graph memory, cryptographic Merkle-chained state ledgers, and out-of-band kernel gates bringing frontier PhD reasoning to local silicon with zero cloud token tax.

Vestige is an open-source mcp server by samvallad33, written mainly in Rust, with 659 GitHub stars and the AGPL-3.0 license. Its code was last updated Nov 1, 2026.

Scan summary: scanned Nov 13, 2026 at commit 5fb269b. Seen able to run shell commands, read environment and secrets, connect to the internet. Scan policy

aboutREADMEsecurityreviews
Scanned
Full scan at 5fb269b · Nov 13, 2026
Scanned Builds
Static code scanwarn
Secrets scanfail
Dependency audit43 known vulnerabilitieswarn
Manifestserver.jsonpass
Buildpass
Boot & handshaken/a
Network egresswarn
Reproducible (×3)n/a

Findings (200)

  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    backdoor issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    dropper issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    credential-access issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    packages/vestige-init/bin/init.js:68
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    packages/vestige-init/bin/init.js:133
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    packages/vestige-init/bin/init.js:156
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    packages/vestige-init/bin/init.js:219
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    packages/vestige-init/bin/init.js:230
  • medium
    devalue@5.9.2: 7 known vulnerabilities
    GHSA-4q55-j62x-fr9h, GHSA-hx4r-w6wj-j8fg, GHSA-j22f-vq7h-c4qm, GHSA-mcm9-63f2-9j32, GHSA-r9w8-h9r3-54w4 +2 more
    pnpm-lock.yaml
  • medium
    fflate@0.8.2: 1 known vulnerability
    GHSA-px8p-9vwx-vf98
    pnpm-lock.yaml
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    pnpm-lock.yaml
  • medium
    vite@8.2.2: 6 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +1 more
    pnpm-lock.yaml
  • medium
    Install contacted hosts other than package registries
    34.5.16.104.in-addr.arpa
  • low
    In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    benchmarks/real_engine/hooks.py:466
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    operator-lite/test_destructive.py:153
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    operator-lite/test_destructive.py:159
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    operator-lite/test_destructive.py:183
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    operator-lite/test_destructive.py:188
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    operator-lite/test_destructive.py:198
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    operator-lite/test_destructive.py:250
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    operator-lite/test_destructive.py:372
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    operator-lite/test_destructive.py:373
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    operator-lite/test_destructive.py:374
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    operator-lite/test_destructive.py:375
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    operator-lite/test_gitspawn.py:53
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    operator-lite/test_parser.py:206
  • low
    In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    operator-lite/test_replay.py:202
  • low
    In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    operator-lite/test_replay.py:205
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    operator-lite/test_sequence.py:10
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    operator-lite/test_sequence.py:10
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    operator-lite/test_sequence.py:44
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    operator-lite/test_sequence.py:45
  • low
    In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    operator-lite/test_windows.py:250
  • low
    In tests/examples/docs: Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    operator-lite/test_windows.py:255
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    operator-lite/test_written.py:29
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    operator-lite/test_written.py:30
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    operator-lite/test_written.py:32
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    operator-lite/test_written.py:40
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    operator-lite/test_written.py:44
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    operator-lite/test_written.py:44
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    operator-lite/test_written.py:58
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    operator-lite/test_written.py:59
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    operator-lite/test_written.py:67
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    operator-lite/test_written.py:67
  • low
    In tests/examples/docs: Turns off TLS certificate checking, allowing traffic interception.
    operator-lite/test_written.py:69
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    operator/test_rules.py:192
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    operator/test_rules.py:200
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    operator/test_rules.py:211
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    operator/test_rules.py:213
  • low
    In tests/examples/docs: Sends data to a paste site, webhook catcher or chat webhook — common exfiltration channels.
    operator/test_rules.py:216
  • low
    In tests/examples/docs: Touches a sensitive credential location (SSH keys, cloud credentials, browser data or wallets). Expected for some tools, such as browser automation; check why.
    operator/test_rules.py:235
  • low
    Possible example credential in docs/tests: sentry-access-token
    3 matches in this file
    benchmarks/before-you-change-that/evidence/vestige/receipt-verification/proof.stdout:1
  • low
    Possible example credential in docs/tests: sentry-access-token
    3 matches in this file
    benchmarks/before-you-change-that/evidence/vestige/receipt-verification/receipts.json:10
  • low
    Possible example credential in docs/tests: sourcegraph-access-token
    benchmarks/real_engine/graphwalks_runner.py:19
  • low
    Possible example credential in docs/tests: sentry-access-token
    6 matches in this file
    benchmarks/before-you-change-that/evidence/vestige/receipt-verification/native.jsonl:5
  • low
    Possible example credential in docs/tests: sentry-access-token
    3 matches in this file
    benchmarks/before-you-change-that/evidence/result.json:5924
  • low
    Possible example credential in docs/tests: sentry-access-token
    3 matches in this file
    benchmarks/before-you-change-that/evidence/vestige/receipt-verification/report.json:295
  • low
    Possible example credential in docs/tests: sentry-access-token
    3 matches in this file
    benchmarks/before-you-change-that/evidence/vestige/result.json:2065
  • low
    Possible example credential in docs/tests: sentry-access-token
    3 matches in this file
    benchmarks/before-you-change-that/evidence/vestige.jsonl:97
  • low
    Possible example credential in docs/tests: generic-api-key
    13 matches in this file
    benchmarks/before-you-change-that/evidence/manifest.json:136
  • low
    Possible example credential in docs/tests: generic-api-key
    operator-lite/test_canary.py:41
  • low
    Possible example credential in docs/tests: generic-api-key
    operator-lite/test_memory_rules.py:33
  • low
    Possible example credential in docs/tests: aws-access-token
    packages/vestige-init/test/story.test.js:121
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    docs/PROOF-CARRYING-PRS.md:156
  • low
    ctutils@0.4.2: 1 known vulnerability
    RUSTSEC-2026-0385
    Cargo.lock
  • low
    libsqlite3-sys@0.38.2: 4 known vulnerabilities
    RUSTSEC-2026-0459, RUSTSEC-2026-0459, RUSTSEC-2026-0459, RUSTSEC-2026-0459
    Cargo.lock
  • low
    quinn-proto@0.11.18: 2 known vulnerabilities
    RUSTSEC-2026-0523, RUSTSEC-2026-0524
    Cargo.lock
  • low
    quinn-udp@0.5.15: 1 known vulnerability
    RUSTSEC-2026-0538
    Cargo.lock
  • low
    rustix@1.1.5: 4 known vulnerabilities
    RUSTSEC-2026-0486, RUSTSEC-2026-0486, RUSTSEC-2026-0486, RUSTSEC-2026-0486
    Cargo.lock
  • low
    rustls@0.23.45: 4 known vulnerabilities
    RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349
    Cargo.lock
  • low
    rustls-webpki@0.103.15: 1 known vulnerability
    RUSTSEC-2026-0382
    Cargo.lock
  • low
    tokio@1.53.1: 4 known vulnerabilities
    RUSTSEC-2026-0386, RUSTSEC-2026-0386, RUSTSEC-2026-0386, RUSTSEC-2026-0386
    Cargo.lock
  • low
    webpki-root-certs@1.0.9: 1 known vulnerability
    RUSTSEC-2026-0383
    Cargo.lock
  • low
    @sveltejs/kit@2.70.3: 2 known vulnerabilities
    GHSA-27mw-82g8-phjj, GHSA-pfhg-q3qv-9q6r
    pnpm-lock.yaml

Network activity

During install
34.5.16.104.in-addr.arparegistry.npmjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Vestige alternatives

View more →

Similar mcp servers in Security & Testing, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Vestige (this page)
samvallad33
659AGPL-3.0Nov 1, 2026Scanned, no flagged issues
Hexstrike AI
0x4m4
13kMITAug 3, 2026Scanned, no flagged issues
Viper
FunnyWolf
5.3kNone foundMay 31, 2026Not scanned yet
Open Ontologies
fabio-rovai
2.7kMITOct 30, 2026Scanned, no flagged issues
Qu1cksc0pe
CYB3RMX
2.1kGPL-3.0Sep 18, 2026Scanned, no flagged issues
Cve MCP Server
mukul975
1.7kApache-2.0Oct 1, 2026Scanned, no flagged issues