Back to Browse

Vibescan MCP Server

Developer ToolsModerate6.5MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for VibeScan — scan projects for leaked secrets and security issues

About

MCP server for VibeScan — scan projects for leaked secrets and security issues

Security Report

6.5
Moderate6.5Moderate Risk

Valid MCP server (1 strong, 4 medium validity signals). 1 code issue detected. 3 known CVEs in dependencies (0 critical, 3 high severity) Package registry verified. Imported from the Official MCP Registry.

7 files analyzed · 5 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-aguantar-vibescan-mcp-server": {
      "args": [
        "vibescan-mcp-server"
      ],
      "command": "uvx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

vibescan-mcp-server

mcp-name: io.github.Aguantar/vibescan-mcp-server

MCP server for VibeScan — scan projects for leaked secrets and security issues directly from Claude Code.

Features

  • vibescan_scan — Scan a project for secrets, dangerous patterns, and git hygiene issues
  • vibescan_rules — List all 17 detection rules

What VibeScan detects

  • 14 secret categories: env files, config hardcodes, cloud credentials, Docker/infra, CI/CD pipelines, IDE settings, SSH keys, hardcoded patterns, frontend env vars, data files, doc secrets, mobile files, system configs, editor remnants
  • Dangerous code patterns: eval(), exec(), shell injection, SQL injection, pickle, innerHTML
  • Git hygiene: missing .gitignore, unignored .env/.pem/.key files

All scanning runs locally — your code never leaves your machine.

Installation

pip install vibescan-mcp-server

Usage with Claude Code

Add to your .mcp.json:

{
  "mcpServers": {
    "vibescan": {
      "command": "vibescan-mcp-server"
    }
  }
}

Then ask Claude: "scan this project for security issues" or "check for leaked secrets".

License

MIT

Reviews

No reviews yet

Be the first to review this server!

Vibescan MCP Server - MCP server for VibeScan — scan projects for leaked secrets | MCP Marketplace