io.github.ohad6k/viberaven

@viberaven/mcp

Checks a Vercel + Supabase repo before deploy: RLS, grants, leaked keys, webhooks. Runs locally.

1.3k/wk 3 tools GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 3d ago

Works with most clients

Transport: stdio, sse, http

3 tools · ~178 tok

Grade A · 0.1% of 200K ctx

MCPpedia last refreshed this data 2d ago

Edit this pageView history

io.github.ohad6k/viberaven is an MCP server that checks a Vercel + Supabase repo before deploy: RLS, grants, leaked keys, webhooks. Runs locally. Its tool list has not been published yet over stdio, sse and http, requires no API key, and scores 91/100 on MCPpedia's security, maintenance and efficiency rubric.

Data

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-ohad6k-viberaven-ohad6k": {
      "args": [
        "-y",
        "@viberaven/mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-ohad6k-viberaven-ohad6k)](https://mcppedia.org/s/io-github-ohad6k-viberaven-ohad6k)

Read me

What io.github.ohad6k/viberaven does

Checks a Vercel + Supabase repo before deploy: RLS, grants, leaked keys, webhooks. Runs locally.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

91/100across 5 weighted dimensions

How we score →

0255075100

−9

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @viberaven/mcp against OSV.dev.

Inventory

Tools (3)

Click any tool to inspect its schema.

~178 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.ohad6k/viberaven safe to use?: io.github.ohad6k/viberaven has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.ohad6k/viberaven?: io.github.ohad6k/viberaven supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.ohad6k/viberaven do?: io.github.ohad6k/viberaven provides 3 tools: security_definer_view, function_search_path_mutable, plugin. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.ohad6k/viberaven?: io.github.ohad6k/viberaven is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
Is io.github.ohad6k/viberaven actively maintained?: io.github.ohad6k/viberaven is actively maintained - last commit was 3 days ago.

Similar servers

Others in data

View all →

Dbhub96

Token-efficient database MCP server for PostgreSQL, MySQL, MariaDB, SQL Server, Oracle, SQLite

3.8k 2

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

3.0k 4

Vibe Assistant95

A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。

169 3

Apify Mcp Server95

Extract data from any website with thousands of scrapers, crawlers, and automations on Apify Store ⚡

16.1k 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.ohad6k/viberaven and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

VibeRaven

VibeRaven checks AI-built apps on Vercel + Supabase for launch gaps before you ship: tables without RLS, permissive policies such as using (true), service_role keys in client code, anon-callable security definer functions, the wrong pooler port and unverified Stripe webhooks.

Run npx -y viberaven@1.7.6 check in your app's folder. It reads the repository on your machine, needs no account, and names the file and line for each gap.

Quick start

Requires Node.js 20 or newer. From your app's project root:

npx -y viberaven@1.7.6 check

In a terminal or CI: npx -y viberaven@1.7.6 check

For coding agents: npx -y viberaven@1.7.6 check

Windows PowerShell: use npx.cmd if npx is blocked by the execution policy.

In a coding agent you can also just ask: "check this with viberaven".

It reads supabase/migrations, your client and server code, package.json and .env.example. It does not connect to your Supabase project or send requests to your app. It exits 1 when it finds a blocker, so it also works as a CI step.

What it checks

Finding

Gap ID

Related Supabase Security Advisor lint

A public table created in a migration with row level security never enabled

rls_disabled

rls_disabled_in_public (guide)

A policy with using (true) that lets anyone read or write every row

rls_policy_allows_all_write, rls_policy_allows_all_read

none

The service_role key in a file that ships to the browser, or under a NEXT_PUBLIC_ name

service_role_key_in_client_code, service_role_key_in_client_env

none

A security definer function in public that no migration closes to anon

security_definer_function_executable

anon_security_definer_function_executable (guide

Frequently Asked Questions

Is io.github.ohad6k/viberaven safe to use?

io.github.ohad6k/viberaven has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install io.github.ohad6k/viberaven?

io.github.ohad6k/viberaven supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.ohad6k/viberaven do?

io.github.ohad6k/viberaven provides 3 tools: security_definer_view, function_search_path_mutable, plugin. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.ohad6k/viberaven?

io.github.ohad6k/viberaven is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.

Is io.github.ohad6k/viberaven actively maintained?

io.github.ohad6k/viberaven is actively maintained - last commit was 3 days ago.

VibeRaven

Run npx -y viberaven@1.7.6 check in your app's folder. It reads the repository on your machine, needs no account, and names the file and line for each gap.

Website · What it checks · When to use it · How it compares · Local Studio · Agent skills · Releases

Quick start

Requires Node.js 20 or newer. From your app's project root:

npx -y viberaven@1.7.6 check

In a terminal or CI: npx -y viberaven@1.7.6 check
For coding agents: npx -y viberaven@1.7.6 check
Windows PowerShell: use npx.cmd if npx is blocked by the execution policy.
In a coding agent you can also just ask: "check this with viberaven".

What it checks

Finding	Gap ID	Related Supabase Security Advisor lint
A public table created in a migration with row level security never enabled	`rls_disabled`	`rls_disabled_in_public` (guide)
A policy with `using (true)` that lets anyone read or write every row	`rls_policy_allows_all_write`, `rls_policy_allows_all_read`	none
The service_role key in a file that ships to the browser, or under a `NEXT_PUBLIC_` name	`service_role_key_in_client_code`, `service_role_key_in_client_env`	none
A security definer function in `public` that no migration closes to `anon`	`security_definer_function_executable`	`anon_security_definer_function_executable` (guide

... View full README on GitHub