# Vaara

An accountability proxy for autonomous agents. It scores action risks, blocks unauthorized calls, and stores tamper-evident cryptographic receipts.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 15
- Author: vaaraio
- License: AGPL-3.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/vaaraio/vaara
- Updated: 2026-10-24
- HTML: https://affpapa.org/en/nevibecode/mcp/vaara

## What it does

Vaara intercepts tool execution before any payload runs. The proxy evaluates risk scores against active security policies. High-risk invocations raise immediate blocks until an operator approves them.

Decisions, parameters, and execution results append to a local hash chain at `~/.vaara/trail/audit.db`. Each entry gets signed with Ed25519 using DSSE envelopes canonicalized by `rfc8785` and `cbor2`. Anyone can inspect the exported ledger offline to confirm that logs were never modified.

The package requires Python 3.10+. Without historical run feedback, risk evaluation intervals stay wide, so critical calls escalate to humans early.

## Requirements
- Needs: Python and uv (commands run via uvx)

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add vaara -- uvx vaara
```
uvx runs the command named after the package; if the README names another one, use uvx --from vaara <command>

### Codex

**Platform CLI**
```bash
codex mcp add vaara -- uvx vaara
```
uvx runs the command named after the package; if the README names another one, use uvx --from vaara <command>

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "vaara": {
            "command": "uvx",
            "args": [
                "vaara"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from vaara <command>

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "vaara": {
            "type": "stdio",
            "command": "uvx",
            "args": [
                "vaara"
            ]
        }
    }
}
```
uvx runs the command named after the package; if the README names another one, use uvx --from vaara <command>

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add vaara uvx vaara
```
uvx runs the command named after the package; if the README names another one, use uvx --from vaara <command>

## When to use it
- Intercept risky tool invocations before execution starts
- Create tamper-evident action receipts using Ed25519 signatures
- Supply verifiable proof of autonomous behavior for external audits
- Halt executions that exceed risk score boundaries

## Example prompts
- Intercept the tool call through Vaara before updating production data
- Export the signed cryptographic audit trail via `vaara trail export`
- Evaluate agent actions in shadow mode to observe risk scoring

## Similar
- [scopeblind-mcp](https://affpapa.org/en/nevibecode/mcp/scopeblind-mcp.md) — MCP server · ★ 11
- [Signet MCP Tools](https://affpapa.org/en/nevibecode/mcp/signet-mcp-tools.md) — MCP server · ★ 40
- [GateCore Marketplace](https://affpapa.org/en/nevibecode/mcp/gatecore-marketplace.md) — MCP server
- [protect-mcp-setup](https://affpapa.org/en/nevibecode/skills/protect-mcp-setup.md) — skill · 6000 installs
- [audit-chain](https://affpapa.org/en/nevibecode/commands/audit-chain.md) — command · ★ 41823
- [veritasacta-verify](https://affpapa.org/en/nevibecode/plugins/veritasacta-verify.md) — plugin · ★ 8

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md