Vongola

ai.qompassPublished by qompass.aiv0.2.0Updated Nov 3, 2026

Read-only operator instrumentation for the vongola TLS gateway.

VerifiedSTDIODesktop only

Overview

Vongola's local MCP server, published by qompass.ai; no sign-in required; STDIO.

No AI overview yet: these facts come from the registry entry and the server itself.

Publisher
qompass.ai

Installation

In SourceWeft

  1. Open Vongola in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Vongola

[License: Apache 2.0]

Vongola is Qompass AI's reverse proxy and web server — a clean-room rewrite on Pingora 0.9.0. It hosts qompass.ai, runs on a single small device, and scales across a fleet of small nodes (NVIDIA Jetson-class dev kits, thin/slim clients) sharing one versioned configuration bundle.

  • Hosting: SNI TLS termination, www→apex 308, static hosting with cache rules + gzip, proxied routes with health-checked round-robin upstreams.
  • Post-quantum TLS: TLS 1.3 only with ML-KEM hybrid key exchange — live-negotiated X25519MLKEM768 in smoke. Builds must link system OpenSSL ≥ 3.5 (see the book's TLS chapter for the vendored-OpenSSL trap).
  • Operator surfaces: MCP server (read-only-first, auth-gated mutations), signed A2A Agent Card, populated Prometheus metrics, and a live dashboard (NAT, Tor, chains, upstreams, certs).
  • NAT traversal: PCP / NAT-PMP / UPnP IGD, opt-in per listener, leased and released on shutdown.
  • Tor onion services: publish routes as v3 onion services. Vongola is never a Tor exit node — enforced in config validation, not just documented.
  • Proxy chains: SOCKS5h / HTTP CONNECT / Tor / vongola hops, DNS through the chain, fail closed (a dead hop is a 502, never a direct fallback).

Quickstart

bash
cargo build --release./target/release/vongola validate-config --config examples/qompass.yaml./target/release/vongola serve --config examples/lean.yamlbash scripts/smoke.sh   # full live smoke against loopback fixtures
📄 We advise you read the script BEFORE running it 😉 #!/usr/bin/env bash # /qompassai/vongola/scripts/quickstart.sh # Qompass AI Quick Start Script # Copyright (C) 2025 Qompass AI, All rights reserved ####################################################

Or, View the quickstart script.

Documentation

The mdBook in docs/src (build with mdbook build) covers architecture, the hosting/lean/fleet profiles, the TLS/PQC posture with negotiation evidence, MCP/A2A, NAT, Tor, chains, the dashboard, a configuration reference, the operations runbook, the Homa and Mojo verdicts, and the feature accounting against the previous tree. SPEC.md is the clean-room contract the implementation was written against.

License

Apache-2.0. Copyright 2026 Qompass AI.

Source: README.md at commit b9ca857

Tools

0
SourceWeft started this package once in an isolated sandbox, without credentials, to list its tools. That failed: the package type cannot run in the sandbox.

Version history

1
  1. v0.2.0LatestNov 3, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts