Vantio Optics

io.github.vantioaiPublished by GitHub account vantioaiv0.1.2Updated Oct 24, 2026

Vantio Optics — read-only Sight Loop observe for agents. Proofs, hosts, upgrade path.

VerifiedSTDIODesktop onlySecurity & MonitoringAI & ML

Overview

AI-generated overview

Local, read-only observability server that reports which LLM providers an AI agent calls, with destination, process, size and timing metadata.

What you can do
Report outbound LLM calls made by wrapped agents, including destination provider, process, byte size and timing, without capturing prompts or completions. Show connection and process metadata for supported Node.js agent paths, such as fetch, undici, http/https, http2, net/tls, WebSocket and spawned curl or wget. Surface coverage gaps honestly, since calls made outside the wrapped runtime are not recorded. Provide proofs, host information and an upgrade path toward the paid enforcement tier.
When to use it
Use it when you want a free, local view of what your AI agents call out to and how much data leaves, without sending conversation content anywhere. It suits teams auditing agent egress on their own machines before considering policy enforcement.
Requirements
Runs as a local process on the user's machine, desktop only, installed from the npm package. Node.js agents must be started through the CLI wrapper; Python agents need the separate Python SDK and a shield wrapper. Works on macOS, Linux and Windows via WSL. No account or API key is needed.
Before you install
It observes outbound traffic metadata, so review what process, destination and timing data is retained and where it is stored. Coverage is partial: native sockets, unwrapped subprocesses, other language runtimes and browser paths are not intercepted. It does not block actions, so it is visibility only, not enforcement.

Installation

In SourceWeft

  1. Open Vantio Optics in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Vantio

Linux security for AI.

This repository contains Vantio Optics, the Phantom Engine installer, and the Python SDK.

Vantio Optics (Open Core)

Free, local-first observability for AI egress. Optics is the free Observe tier. It records the destination, the process, the size, and the timing of a supported outbound call. Does not block actions or retain prompts or completions.

The Optics home is moving to github.com/vantioai/vantio-optics. Publishing still runs from this repository. The editor extension stays at extensions/vantio-optics. Commands and local install notes are in extensions/vantio-optics/README.md.

Install

These are the versions npm and PyPI served on 2026-10-21. Manifests in this git tree can be newer than the registry.

PackageRegistryVersion
@vantio/clinpm0.3.24
@vantio/agent-sdknpm0.2.4
vantio-agent-sdkPyPI3.1.1
@vantio/optics-mcpnpm0.1.2
@vantio/gate-mcpnpm0.1.0

@vantio/gate-mcp is a compatibility package for an older integration.

Optics CLI, on macOS, Linux, and Windows (WSL):

bash
npm install -g @vantio/[email protected]vantio run node agent.js

vantio run injects the Node interceptor with NODE_OPTIONS --require for node, npx, tsx, and ts-node. On Node it covers fetch, undici, http/https, http2, net/tls, WebSocket, and spawned curl or wget.

Python SDK:

bash
pip install vantio-agent-sdk==3.1.1

Wrap a Python callable with @shield. Prefixing vantio run python does not intercept by itself.

Node SDK:

bash
npm install @vantio/[email protected]

The Node SDK exposes shield(). Outbound Node coverage comes from vantio run.

Optics MCP:

bash
npm install @vantio/[email protected]

Free Optics needs no account and no API key.

Browser paths stay outside this wrap.

A process can miss the wrapper when it opens a socket the Node interceptor does not see, starts a subprocess outside vantio run, or uses a runtime other than Node without the Python SDK. Optics records the paths it wrapped.

vantio coverage prints the processes and connections recorded on this system, and which of those paths are on a local allowlist. vantio destinations flags the first time a recorded program connects to a destination that is not on that list. vantio export sends those events as OTLP/HTTP JSON, syslog or JSON lines, or a webhook. Optics does not stop the call.

Telemetry is disabled by default. Set VANTIO_TELEMETRY=1 to opt in. VANTIO_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1 override that opt-in.

Phantom Engine installer

Phantom Engine is enforcement and control for enrolled Linux systems. Contact Vantio. The product page is vantio.ai/phantom-engine.

The installer source is packages/vantio-install. vantio-install is not on npm or PyPI. Operator install uses the sealed wheel described in packages/vantio-install/docs/QUICKSTART.md. The commands are vantio-install and vantio-verify. That install does not replace @vantio/cli. The installer notes in that package target Ubuntu 24.04 LTS on x86_64.

Documentation

License

@vantio/cli, @vantio/agent-sdk, and vantio-agent-sdk declare MIT. License files for the CLI and the Python SDK are packages/vantio-cli/LICENSE and packages/vantio-agent-sdk-py/LICENSE. The Node SDK declares MIT in packages/vantio-agent-sdk/package.json. There is no root LICENSE file. The MIT grant covers the published packages named here.

Security

Report a suspected vulnerability to [email protected]. The process is SECURITY.md.

Contributing

See CONTRIBUTING.md and CODE_OF_CONDUCT.md.

Source: README.md at commit 7e4eef9

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.2LatestSep 16, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.