io.github.Aguantar/vibescan-mcp-server

vibescan-mcp-server

MCP server for VibeScan — scan projects for leaked secrets and security issues

1 2 tools GitHub PyPI

No known CVEs

No license

Maintained

Last commit 71d ago

Works with most clients

Transport: stdio

2 tools · ~88 tok

Grade A · 0.0% of 200K ctx

Edit this pageView history

Security

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "vibescan": {
      "command": "vibescan-mcp-server"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-aguantar-vibescan-mcp-server)](https://mcppedia.org/s/io-github-aguantar-vibescan-mcp-server)

Read me

What io.github.Aguantar/vibescan-mcp-server does

MCP server for VibeScan — scan projects for leaked secrets and security issues

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

uvx 'vibescan-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

82/100across 5 weighted dimensions

How we score →

0255075100

−18

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked vibescan-mcp-server against OSV.dev.

Inventory

Tools (2)

Click any tool to inspect its schema.

~88 tokens total

Help improve this page

This server is missing a description.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.Aguantar/vibescan-mcp-server safe to use?: io.github.Aguantar/vibescan-mcp-server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.Aguantar/vibescan-mcp-server?: io.github.Aguantar/vibescan-mcp-server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.Aguantar/vibescan-mcp-server do?: io.github.Aguantar/vibescan-mcp-server provides 2 tools: vibescan_scan, vibescan_rules. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.Aguantar/vibescan-mcp-server?: io.github.Aguantar/vibescan-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.Aguantar/vibescan-mcp-server actively maintained?: io.github.Aguantar/vibescan-mcp-server is recently maintained — last commit was 71 days ago. It has 1 GitHub stars.

Similar servers

Others in security

View all →

Evil Mcp Server93

An evil MCP server used for redteam testing

30 1

io.github.jasonxkensei/xproof92

Proof primitive for AI agents on MultiversX. Anchor file hashes on-chain as verifiable proofs.

1 1

Ida Pro Mcp92

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

9.0k 3

Nothumanallowed91

Security-first platform for AI agents. 38 specialized agents, 15 AI-powered extensions, zero-knowledge multi-agent orchestration. SENTINEL WAF, Ed25519 auth, 2.6M grounding facts.

97 5

MCP Security Weekly

Get CVE alerts and security updates for io.github.Aguantar/vibescan-mcp-server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Features

vibescan_scan — Scan a project for secrets, dangerous patterns, and git hygiene issues

vibescan_rules — List all 17 detection rules

What VibeScan detects

14 secret categories: env files, config hardcodes, cloud credentials, Docker/infra, CI/CD pipelines, IDE settings, SSH keys, hardcoded patterns, frontend env vars, data files, doc secrets, mobile files, system configs, editor remnants

Dangerous code patterns: eval(), exec(), shell injection, SQL injection, pickle, innerHTML

Git hygiene: missing .gitignore, unignored .env/.pem/.key files

All scanning runs locally — your code never leaves your machine.

Frequently Asked Questions

Is io.github.Aguantar/vibescan-mcp-server safe to use?

io.github.Aguantar/vibescan-mcp-server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.Aguantar/vibescan-mcp-server?

io.github.Aguantar/vibescan-mcp-server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.Aguantar/vibescan-mcp-server do?

io.github.Aguantar/vibescan-mcp-server provides 2 tools: vibescan_scan, vibescan_rules. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.Aguantar/vibescan-mcp-server?

io.github.Aguantar/vibescan-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.Aguantar/vibescan-mcp-server actively maintained?

io.github.Aguantar/vibescan-mcp-server is recently maintained — last commit was 71 days ago. It has 1 GitHub stars.

vibescan-mcp-server

mcp-name: io.github.Aguantar/vibescan-mcp-server

MCP server for VibeScan — scan projects for leaked secrets and security issues directly from Claude Code.

Features

vibescan_scan — Scan a project for secrets, dangerous patterns, and git hygiene issues
vibescan_rules — List all 17 detection rules

What VibeScan detects

14 secret categories: env files, config hardcodes, cloud credentials, Docker/infra, CI/CD pipelines, IDE settings, SSH keys, hardcoded patterns, frontend env vars, data files, doc secrets, mobile files, system configs, editor remnants
Dangerous code patterns: eval(), exec(), shell injection, SQL injection, pickle, innerHTML
Git hygiene: missing .gitignore, unignored .env/.pem/.key files

All scanning runs locally — your code never leaves your machine.

Installation

pip install vibescan-mcp-server

Usage with Claude Code

Add to your .mcp.json:

{
  "mcpServers": {
    "vibescan": {
      "command": "vibescan-mcp-server"
    }
  }
}

Then ask Claude: "scan this project for security issues" or "check for leaked secrets".

License

MIT