MCP server

VITNA – Containment for rogue AI agents

xyz.costrinity/vitna-compliance-preflight

Checked 28 Oct 2026, 09:03 UTC · Connected to it and listed its tools

Guard wraps stdio MCP servers: risky calls wait for a person; no answer, no run. Remote: cooperative

Website Source

At a glance

Type

MCP server

Publisher

costrinity.xyz (verified by the MCP Registry)

Status

Working at last check

Tools

23

Token cost

About 3,813 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

28 Oct 2026, 09:03 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http vitna-compliance-preflight https://vitna.costrinity.xyz/api/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.vitna-compliance-preflight]
url = "https://vitna.costrinity.xyz/api/mcp"

Gemini CLI

{"mcpServers":{"vitna-compliance-preflight":{"httpUrl":"https://vitna.costrinity.xyz/api/mcp"}}}

Cursor

{"mcpServers":{"vitna-compliance-preflight":{"url":"https://vitna.costrinity.xyz/api/mcp"}}}

VS Code

{"servers":{"vitna-compliance-preflight":{"type":"http","url":"https://vitna.costrinity.xyz/api/mcp"}}}

Antigravity

agy mcp add vitna-compliance-preflight https://vitna.costrinity.xyz/api/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"vitna-compliance-preflight","server_url":"https://vitna.costrinity.xyz/api/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"vitna-compliance-preflight","server_url":"https://vitna.costrinity.xyz/api/mcp"}

Tools

• aadhaar_mask ~104 tokens
  Mask + Verhoeff-validate an Aadhaar number. Returns masked form, validity, and an owner-scoped reference token. No persistence of the raw value. Stateless validator: records no decision and leaves no dashboard timeline trace.
• ai_act_classify ~263 tokens
  Before you build or ship an AI feature, check where it lands under the EU AI Act (Regulation 2024/1689). Describe the use case (with biometric / remote-identification / automated-decision / social-scoring / GPAI flags) and VITNA returns the risk tier (prohibited / high-risk / limited-risk / minimal-
• breach_classify ~316 tokens
  After a security incident, check whether it is legally reportable before you decide how to respond. Give the incident facts (affected count, data categories, sensitivity, recovery state) and VITNA returns reportability + reasoning + the notification deadline + who to notify, across DPDP §8, GDPR Art
• consent_check ~272 tokens
  Before you process someone's personal data, ask VITNA whether an active consent actually permits it for this purpose. Give the data principal + purpose (and optional category); returns { allowed, reason, matching_consent_id, principal_id }, a determination you must honour yourself since VITNA evalua
• cpf_validate ~80 tokens
  Validate a Brazilian CPF (mod-11 check digits, rejects all-same). Stateless validator: records no decision and leaves no dashboard timeline trace.
• dpia_threshold_check ~260 tokens
  Before you start a new processing activity, check whether the law requires a DPIA first (GDPR Art 35 / DPDP §10 / LGPD Art 38). Give the purpose + data categories (and scale / systematic-monitoring / automated-decision / cross-border / vulnerable-subjects flags); returns dpia_required + the 9-criter
• global_compliance_map ~85 tokens
  Master catalogue of every privacy/security/sectoral regime VITNA has fabric for (28 entries covering 24 named statutes). Stateless lookup: records no decision and leaves no dashboard timeline trace.
• gstin_validate ~83 tokens
  Validate a GSTIN format + mod-36 check digit; returns state code lookup. Stateless validator: records no decision and leaves no dashboard timeline trace.
• iban_validate ~84 tokens
  Validate an IBAN format + ISO 7064 mod-97 check digit; supports 71 countries. Stateless validator: records no decision and leaves no dashboard timeline trace.
• india_cross_border_status ~144 tokens
  Before you transfer personal data out of India, check the destination country's DPDP §16 status (permitted / restricted / sectoral_restricted) plus any RBI / SEBI / IRDAI caveats. Pass the ISO-3166 alpha-2 country code (e.g. US). Stateless lookup: records no decision and leaves no dashboard timeline
• india_regulators_directory ~144 tokens
  Static reference directory of Indian data and sector regulators (DPB, RBI, SEBI, IRDAI, TRAI, DoT, PFRDA, MeitY, MCA), optionally filtered by sector: a lookup of who exists and what they cover. To instead work out which of them apply to a specific processing activity, use india_sectoral_check. State
• india_sectoral_check ~213 tokens
  Before you process personal data under Indian law, find out which sectoral regulators actually bind your specific activity (RBI / SEBI / IRDAI / TRAI / DoT / PFRDA) from its processing profile, so you know whose rules apply before you act. This analyses your processing to say what applies; for a pla
• japan_cross_border_status ~128 tokens
  Before you transfer personal data out of Japan, check the destination country's APPI Art 28 status (adequacy / standard basis / high scrutiny). Pass the ISO-3166 alpha-2 country code. Stateless lookup: records no decision and leaves no dashboard timeline trace.
• pan_classify ~87 tokens
  Classify a PAN entity type from the 4th character (P=Person, C=Company, H=HUF, F=Firm, ...). Stateless validator: records no decision and leaves no dashboard timeline trace.
• pii_test ~164 tokens
  Dry-run VITNA's PII / threat detection on a sample event before you send real data, to preview what would be tagged, how it would be redacted, and whether severity would escalate. Nothing is persisted and nothing is filtered: a safe rehearsal you act on, not an enforced gate — it records no decision
• privacy_notice_get ~126 tokens
  Generate the operator's jurisdiction-templated privacy notice. Returns markdown or JSON. Called with an API key, the operator's name and contact details appear as placeholders; the signed-in owner gets the real values. Stateless generator: records no decision and leaves no dashboard timeline trace.
• sin_validate ~83 tokens
  Validate a Canadian SIN (Luhn checksum); returns series region + masked form. Stateless validator: records no decision and leaves no dashboard timeline trace.
• sub_processors_register ~72 tokens
  Return the public sub-processor register (Supabase, Vercel, Resend, etc.). Stateless lookup: records no decision and leaves no dashboard timeline trace.
• us_sectoral_check ~190 tokens
  Before you process personal data under US law, find out which US federal sectoral regimes bind you (HIPAA, GLBA, COPPA, FERPA, FCRA, SOX) for a given processing profile, so you can factor them in before you act. US-scoped; for Indian sectoral regulators use india_sectoral_check.
• us_state_breach_deadline ~184 tokens
  Quick reference lookup of a single US state's breach-notification window, AG recipient and resident threshold (e.g. 'CA' gives 500 residents, CA AG, without unreasonable delay). This is a static table, not an incident ruling. When you have the actual incident facts and need a reportable / not-report
• vitna_claim ~197 tokens
  Ask whether this VITNA account has been claimed by a real person yet. Call this when the user asks about their VITNA account or when you are told evidence is not being kept. Returns { claimed, claim_url: null, claim_note, what_claiming_gets_you }. You are never given the claim link, and you must not
• vitna_help ~134 tokens
  What is VITNA and how do I use it to keep myself in check? Call this FIRST after connecting to learn the safety and oversight checks available: how to check risky actions BEFORE running them, what a deny / hold decision means, trial vs claimed mode, and how the user can monitor and audit what you do
• vitna_preflight ~400 tokens
  SAFETY / OVERSIGHT CHECK before a dangerous or destructive action (shell command, file deletion, DB statement, network call). Call this to have VITNA check the action BEFORE you run it: it flags dangerous shell / SQL / secret-exfil / prompt-injection / suspicious-network patterns and returns { decis

Browse

• Vercel tools
• Supabase tools
• Converting to Markdown
• Legal research
• Cloud and hosting

Related MCP servers

• Dnd5e
  D&D 5e MCP — wraps the D&D 5th Edition API (free, no auth)
• Skowron Compliance Gateway
  OFAC, LEI, EU VAT, AI Act, and company compliance preflight for agents.
• AgentKYB
  Free local payment guard for AI agents plus paid deep vendor KYB via x402.
• Relayzero
  Agent economy on Solana — USDC via x402. Ships a BuyerAgent SDK + relayzero pay CLI.
• Vibes-Coded Agent Security and Commerce Tools
  Agent supply-chain security, scanner consensus, x402 reliability, and commerce MCP tools.
• FabTally Guard
  Verify before you act: deps-check, x402-preflight, json-repair & url-read for agents.
• ThirdMade Shelf
  26 pay-per-call tools for agents: scrape, verify, guards, crypto. x402 USDC on Base.
• Agent Decision & Evidence Tools (MCP + x402)
  40 MCP tools: multi-chain RPC, market and transaction decisions, AI, EU compliance and US imports

Badge for your README

[![AptLynx](https://aptlynx.net/badge/xyz.costrinity/vitna-compliance-preflight.svg)](https://aptlynx.net/servers/xyz.costrinity/vitna-compliance-preflight)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents