
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@vorim/mcp-server
Advanced tools
MCP server for Vorim AI — AI agent identity, permissions, and audit trails
MCP server for AI agent identity, permissions, and audit trails.
Gives Claude, Cursor, VS Code, Windsurf, and any MCP-compatible client 17 tools to manage AI agent identities through Vorim — register agents, check permissions, emit audit events, verify trust scores, and delegate credentials.
vorim.ai — Create a free account and get your API key in 30 seconds. Documentation — Full API reference and guides.
Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"vorim": {
"command": "npx",
"args": ["@vorim/mcp-server"],
"env": {
"VORIM_API_KEY": "agid_sk_live_..."
}
}
}
}
claude mcp add vorim -- npx @vorim/mcp-server
Set the API key in your environment:
export VORIM_API_KEY=agid_sk_live_...
Add to .cursor/mcp.json:
{
"mcpServers": {
"vorim": {
"command": "npx",
"args": ["@vorim/mcp-server"],
"env": {
"VORIM_API_KEY": "agid_sk_live_..."
}
}
}
}
Add to .vscode/mcp.json:
{
"servers": {
"vorim": {
"command": "npx",
"args": ["@vorim/mcp-server"],
"env": {
"VORIM_API_KEY": "agid_sk_live_..."
}
}
}
}
Add to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"vorim": {
"command": "npx",
"args": ["@vorim/mcp-server"],
"env": {
"VORIM_API_KEY": "agid_sk_live_..."
}
}
}
}
The server exposes 17 tools across six categories:
| Tool | Description |
|---|---|
vorim_ping | Check API health and connectivity |
| Tool | Description |
|---|---|
vorim_register_agent | Register a new agent with an Ed25519 keypair |
vorim_get_agent | Get agent details by ID |
vorim_list_agents | List all agents (with pagination and status filter) |
vorim_update_agent | Update agent metadata |
vorim_revoke_agent | Permanently revoke an agent |
| Tool | Description |
|---|---|
vorim_check_permission | Check if an agent has a permission (sub-5ms via Redis) |
vorim_grant_permission | Grant a scoped permission with optional expiry and rate limits |
vorim_list_permissions | List all active permissions for an agent |
vorim_revoke_permission | Revoke a permission from an agent |
| Tool | Description |
|---|---|
vorim_emit_event | Log an audit event (sign client-side via @vorim/sdk for tamper-evidence) |
vorim_export_audit | Export a signed audit bundle (SHA-256 manifest) |
| Tool | Description |
|---|---|
vorim_verify_trust | Verify an agent's identity and trust score (0-100) |
| Tool | Description |
|---|---|
vorim_register_ephemeral | Register a short-lived agent with did:key identity |
vorim_delegate_credential | Delegate a scoped credential to an agent |
vorim_request_token | Request a short-lived access token |
vorim_list_delegations | List credential delegations |
| Variable | Description | Default |
|---|---|---|
VORIM_API_KEY | Your Vorim API key (agid_sk_...) | Required |
VORIM_BASE_URL | API base URL | https://api.vorim.ai |
Once the MCP server is connected, you can ask your AI assistant:
VORIM_API_KEY=agid_sk_live_... npx @vorim/mcp-server
Or install globally:
npm install -g @vorim/mcp-server
VORIM_API_KEY=agid_sk_live_... vorim-mcp-server
MIT
FAQs
MCP server for Vorim AI — AI agent identity, permissions, and audit trails
We found that @vorim/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.