
Company News
Free Business Plan Upgrades for Open Source Maintainers
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.
@vorim/mcp-server
Advanced tools
MCP server for Vorim AI — AI agent identity, permissions, and audit trails
MCP server for AI agent identity, permissions, and audit trails.
Gives Claude, Cursor, VS Code, Windsurf, and any MCP-compatible client 17 tools to manage AI agent identities through Vorim — register agents, check permissions, emit audit events, verify trust scores, and delegate credentials.
vorim.ai — Create a free account and get your API key in 30 seconds. Documentation — Full API reference and guides.
Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"vorim": {
"command": "npx",
"args": ["@vorim/mcp-server"],
"env": {
"VORIM_API_KEY": "agid_sk_live_..."
}
}
}
}
claude mcp add vorim -- npx @vorim/mcp-server
Set the API key in your environment:
export VORIM_API_KEY=agid_sk_live_...
Add to .cursor/mcp.json:
{
"mcpServers": {
"vorim": {
"command": "npx",
"args": ["@vorim/mcp-server"],
"env": {
"VORIM_API_KEY": "agid_sk_live_..."
}
}
}
}
Add to .vscode/mcp.json:
{
"servers": {
"vorim": {
"command": "npx",
"args": ["@vorim/mcp-server"],
"env": {
"VORIM_API_KEY": "agid_sk_live_..."
}
}
}
}
Add to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"vorim": {
"command": "npx",
"args": ["@vorim/mcp-server"],
"env": {
"VORIM_API_KEY": "agid_sk_live_..."
}
}
}
}
The server exposes 17 tools across six categories:
| Tool | Description |
|---|---|
vorim_ping | Check API health and connectivity |
| Tool | Description |
|---|---|
vorim_register_agent | Register a new agent with an Ed25519 keypair |
vorim_get_agent | Get agent details by ID |
vorim_list_agents | List all agents (with pagination and status filter) |
vorim_update_agent | Update agent metadata |
vorim_revoke_agent | Permanently revoke an agent |
| Tool | Description |
|---|---|
vorim_check_permission | Check if an agent has a permission (sub-5ms via Redis) |
vorim_grant_permission | Grant a scoped permission with optional expiry and rate limits |
vorim_list_permissions | List all active permissions for an agent |
vorim_revoke_permission | Revoke a permission from an agent |
| Tool | Description |
|---|---|
vorim_emit_event | Log an audit event (sign client-side via @vorim/sdk for tamper-evidence) |
vorim_export_audit | Export a signed audit bundle (SHA-256 manifest) |
| Tool | Description |
|---|---|
vorim_verify_trust | Verify an agent's identity and trust score (0-100) |
| Tool | Description |
|---|---|
vorim_register_ephemeral | Register a short-lived agent with did:key identity |
vorim_delegate_credential | Delegate a scoped credential to an agent |
vorim_request_token | Request a short-lived access token |
vorim_list_delegations | List credential delegations |
| Variable | Description | Default |
|---|---|---|
VORIM_API_KEY | Your Vorim API key (agid_sk_...) | Required |
VORIM_BASE_URL | API base URL | https://api.vorim.ai |
Once the MCP server is connected, you can ask your AI assistant:
VORIM_API_KEY=agid_sk_live_... npx @vorim/mcp-server
Or install globally:
npm install -g @vorim/mcp-server
VORIM_API_KEY=agid_sk_live_... vorim-mcp-server
MIT
FAQs
MCP server for Vorim AI — AI agent identity, permissions, and audit trails
We found that @vorim/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.