vigil

Dependency freshness

Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.

What's in the stack

Framework

FastAPI

Database / ORM

SQLAlchemy, PostgreSQL (psycopg)

AI

OpenAI SDK, Anthropic SDK, MCP SDK

API layer

Pydantic, Uvicorn

Testing

pytest

Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.

What the README says you get

• AI
  Built-in specialist agentsVigil ships a set of built-in specialist agents covering the core SOC roles
• AI
  Custom agents from consoleyou can add your own from the console
• AI
  Local model fallback`scripts/local_model.sh` serves a small local model Bifrost can reach
• API
  MCP integrationsVigil connects agents to your existing tools through MCP
• API
  Vigil MCP serverVigil serves its SOC operations (findings, cases, approvals, hunts) at `/mcp`
• Auth
  Bootstrap admin accountthe first visit creates the admin
• Other
  Markdown workflow filesA workflow is a `WORKFLOW.md` file: YAML frontmatter that says what runs
• Other
  Multiple workflow run kindsA workflow's `run_kind` decides how it executes
• Other
  Human approval gates`approval_required: true` holds a phase for a human before it acts
• Other
  Confidence-based auto-approvalThe daemon's auto-responder routes by confidence
• Other
  Custom Integration Buildergenerate one from API docs with the **Custom Integration Builder**
• Other
  Detection rule indexingindexes community rule sets (Sigma, Splunk ESCU, Elastic, KQL) for search, coverage analysis, and gap identification

Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 19, 2026. Every item is checked against an exact README quote; 2 unverifiable items were discarded. A README claim is the maker's description, not something we tested.