Provides local-first observability for AI egress by recording outbound call destinations, processes, sizes, and timing.
Also known as vantioai/vantio-open-core, vantio-optics, @vantio/optics-mcp
- Stars
- 2
- Tools
- —
- Downloads, 30 days
- —
- Latest version
- 0.1.2
- Last commit
- Nov 13, 2026
- License
- —
What is Vantio Optics MCP?
Vantio Optics provides local-first observability for AI egress by recording outbound call destinations, processes, sizes, and timing.
Summary generated from the project's README
About Vantio Optics MCP server
Vantio Optics provides local-first observability for AI egress, focusing on monitoring outbound network activity. It is designed for developers and security-conscious users who need to track where their AI applications are sending data. The system records specific details including the destination, the process involved, the size of the data, and the timing of outbound calls. Unlike enforcement tools, this free tier does not block actions or retain sensitive prompt and completion data.
Users can implement this via the @vantio/cli on macOS, Linux, or Windows WSL, or by using the Python SDK with the @shield decorator. For Node.js environments, the tool uses a Node interceptor injected via the vantio run command to cover protocols like fetch, WebSocket, and http/https. This setup requires no account or API keys to function. The server can export recorded events through OTLP/HTTP JSON, syslog, JSON lines, or webhooks, making it easy to integrate with existing monitoring stacks.
What you can do with it
- 1Monitor outbound AI trafficTrack the destination and size of every outbound call made by a running process.
- 2Audit network connectionsIdentify which processes and connections are currently being recorded on your system.
- 3Detect new network destinationsFlag instances where a program connects to a destination that is not on your local allowlist.
- 4Export telemetry dataSend recorded egress events to external monitoring services using webhooks or syslog.
Written from the project's README. Every use case is checked against a quote from it.
How to install Vantio Optics MCP
Formats verified 10 Nov 2026Install Vantio Optics MCP in Claude Code
$ claude mcp add vantio-optics -- npx -y @vantio/optics-mcpInstall Vantio Optics MCP in Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"vantio-optics": {
"command": "npx",
"args": [
"-y",
"@vantio/optics-mcp"
]
}
}
}Install Vantio Optics MCP in VS Code
.vscode/mcp.json
{
"servers": {
"vantio-optics": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@vantio/optics-mcp"
]
}
}
}Install Vantio Optics MCP in Claude Desktop
claude_desktop_config.json
{
"mcpServers": {
"vantio-optics": {
"command": "npx",
"args": [
"-y",
"@vantio/optics-mcp"
]
}
}
}Install Vantio Optics MCP in Codex
~/.codex/config.toml
[mcp_servers.vantio-optics] command = "npx" args = ["-y", "@vantio/optics-mcp"]
Install Vantio Optics MCP in Gemini CLI
~/.gemini/settings.json
{
"mcpServers": {
"vantio-optics": {
"command": "npx",
"args": [
"-y",
"@vantio/optics-mcp"
]
}
}
}Automated checks
Ran Nov 14, 2026Full report →Passed our automated checks. That is not a security audit: read the code and give the server the narrowest access it needs. How checks work
- Source repository linked and reachablevantioai/vantio-open-core is public and reachablegithub.com/vantioai/vantio-open-core ↗Pass
- Package names this repository as its source@vantio/optics-mcp names vantioai/vantio-open-core as sourcenpmjs.com/package/@vantio/optics-mcp ↗Pass
- Build provenance (Sigstore attestation)No build attestation published for this releaseNot checked
- Open source license (OSI)No licenseFinding
- Commit or release in the last yearLast commit or release 2026-11-13github.com/vantioai/vantio-open-core ↗Pass
- OpenSSF ScorecardNot checked
- Package name not close to a popular packageNo popular package one edit away from @vantio/optics-mcpPass
- No critical advisory in the package or its dependencies99 resolved dependencies checked; no critical advisoryosv.dev ↗Pass
- No hidden instructions to the model0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersPass
- Destructive tools are labelledNot checked
- Remote endpoint answers the MCP handshakeNot checked
README
View on GitHubVantio
Linux security for AI.
This repository contains Vantio Optics, the Phantom Engine installer, and the Python SDK.
Vantio Optics (Open Core)
Free, local-first observability for AI egress. Optics is the free Observe tier. It records the destination, the process, the size, and the timing of a supported outbound call. Does not block actions or retain prompts or completions.
The Optics home is moving to github.com/vantioai/vantio-optics. Publishing still runs from this repository. The editor extension stays at extensions/vantio-optics. Commands and local install notes are in extensions/vantio-optics/README.md.
Install
These are the versions npm and PyPI served on 2026-10-21. Manifests in this git tree can be newer than the registry.
| Package | Registry | Version |
|---|---|---|
@vantio/cli |
npm | 0.3.24 |
@vantio/agent-sdk |
npm | 0.2.4 |
vantio-agent-sdk |
PyPI | 3.1.1 |
@vantio/optics-mcp |
npm | 0.1.2 |
@vantio/gate-mcp |
npm | 0.1.0 |
@vantio/gate-mcp is a compatibility package for an older integration.
Optics CLI, on macOS, Linux, and Windows (WSL):
npm install -g @vantio/cli@0.3.24
vantio run node agent.js
vantio run injects the Node interceptor with NODE_OPTIONS --require for node, npx, tsx, and ts-node. On Node it covers fetch, undici, http/https, http2, net/tls, WebSocket, and spawned curl or wget.
Python SDK:
pip install vantio-agent-sdk==3.1.1
Wrap a Python callable with @shield. Prefixing vantio run python does not intercept by itself.
Node SDK:
npm install @vantio/agent-sdk@0.2.4
The Node SDK exposes shield(). Outbound Node coverage comes from vantio run.
Optics MCP:
npm install @vantio/optics-mcp@0.1.2
Free Optics needs no account and no API key.
Browser paths stay outside this wrap.
A process can miss the wrapper when it opens a socket the Node interceptor does not see, starts a subprocess outside vantio run, or uses a runtime other than Node without the Python SDK. Optics records the paths it wrapped.
vantio coverage prints the processes and connections recorded on this system, and which of those paths are on a local allowlist. vantio destinations flags the first time a recorded program connects to a destination that is not on that list. vantio export sends those events as OTLP/HTTP JSON, syslog or JSON lines, or a webhook. Optics does not stop the call.
Telemetry is disabled by default. Set VANTIO_TELEMETRY=1 to opt in. VANTIO_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1 override that opt-in.
Phantom Engine installer
Phantom Engine is enforcement and control for enrolled Linux systems. Contact Vantio. The product page is vantio.ai/phantom-engine.
The installer source is packages/vantio-install. vantio-install is not on npm or PyPI. Operator install uses the sealed wheel described in packages/vantio-install/docs/QUICKSTART.md. The commands are vantio-install and vantio-verify. That install does not replace @vantio/cli. The installer notes in that package target Ubuntu 24.04 LTS on x86_64.
Documentation
- Site: vantio.ai
- Docs: vantio.ai/docs
- Optics: vantio.ai/optics
- Phantom Engine: vantio.ai/phantom-engine
- CLI: packages/vantio-cli/README.md
- Python SDK: packages/vantio-agent-sdk-py/README.md
- Editor extension: extensions/vantio-optics/README.md
License
@vantio/cli, @vantio/agent-sdk, and vantio-agent-sdk declare MIT. License files for the CLI and the Python SDK are packages/vantio-cli/LICENSE and packages/vantio-agent-sdk-py/LICENSE. The Node SDK declares MIT in packages/vantio-agent-sdk/package.json. There is no root LICENSE file. The MIT grant covers the published packages named here.
Security
Report a suspected vulnerability to security@vantio.ai. The process is SECURITY.md.
Contributing
See CONTRIBUTING.md and CODE_OF_CONDUCT.md.
Vantio Optics MCP questions
How do I add Vantio Optics MCP to Claude Code?
Run claude mcp add vantio-optics -- npx -y @vantio/optics-mcp in your terminal. Add --scope user to make it available in every project.
How do I add Vantio Optics MCP to Cursor?
Open ~/.cursor/mcp.json and add the server under mcpServers, using the Cursor config shown in the install section above.
Does Vantio Optics block outbound AI calls?
No, Optics is a read-only observability tool that records data but does not block actions or retain prompts or completions.
Do I need an account or API key to use the free version?
Free Optics requires no account and no API key.
How can I export the recorded event data?
You can use the export command to send events as OTLP/HTTP JSON, syslog, JSON lines, or via a webhook.
Is telemetry enabled by default?
No, telemetry is disabled by default unless you explicitly opt in using the VANTIO_TELEMETRY=1 environment variable.