MCP Marketplace
Sign inSign up
Back to Browse

Vibo MCP Server

by Chris Hall
Developer ToolsModerate6.0Local
Free

Vibo (vibodj.com) MCP — plan & manage event music: timeline, songs, ideas, questions, guests

About

Vibo (vibodj.com) MCP — plan & manage event music: timeline, songs, ideas, questions, guests

Security Report

6.0
Moderate6.0Moderate Risk

The vibo-mcp server is a well-structured MCP server for Vibo event music planning with proper authentication mechanisms and careful credential handling. However, there are several concerns: credentials are stored in plaintext in user-provided .env files and config (a limitation of MCP design but still a risk), the server defers config validation to first use which could mask setup errors, and session tokens are persisted to disk (~/.vibo-mcp/session.json) without encryption. Input validation is generally solid with good use of GraphQL queries to constrain API surface. Permissions are appropriate for the server's purpose. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

6 files analyzed · 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

What You'll Need

Set these up before or after installing:

Vibo account email (or use VIBO_ACCESS_TOKEN for SSO accounts)Optional

Environment variable: VIBO_EMAIL

Vibo account passwordRequired

Environment variable: VIBO_PASSWORD

Captured x-token from a signed-in web.vibodj.com session (SSO alternative)Required

Environment variable: VIBO_ACCESS_TOKEN

Matching x-refresh-token so the session can renewRequired

Environment variable: VIBO_REFRESH_TOKEN

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-chrischall-vibo-mcp": {
      "env": {
        "VIBO_EMAIL": "your-vibo-email-here",
        "VIBO_PASSWORD": "your-vibo-password-here",
        "VIBO_ACCESS_TOKEN": "your-vibo-access-token-here",
        "VIBO_REFRESH_TOKEN": "your-vibo-refresh-token-here"
      },
      "args": [
        "-y",
        "vibo-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

vibo-mcp

MCP server for Vibo (vibodj.com) — plan your event music as a host/couple. Browse your events and timeline, see and add song requests, like songs, manage notifications, and export selections to Spotify/Apple Music, all via natural language.

Developed and maintained by AI (Claude Code). Use at your own discretion. Unofficial — not affiliated with Vibo. Works only with your own account/data.

Install

{
  "mcpServers": {
    "vibo": {
      "command": "npx",
      "args": ["-y", "vibo-mcp"],
      "env": {
        "VIBO_EMAIL": "you@example.com",
        "VIBO_PASSWORD": "your_password"
      }
    }
  }
}

Authentication

Choose one method:

MethodEnv varsWhen
Email + password (recommended)VIBO_EMAIL, VIBO_PASSWORDYou sign in to Vibo with an email/password.
Captured tokenVIBO_ACCESS_TOKEN (+ VIBO_REFRESH_TOKEN)Your account uses Apple/Google/Facebook sign-in (no password). Capture x-token/x-refresh-token from a signed-in web.vibodj.com session.
Browser capture (SSO)run vibo_capture_sessionWith the fetchproxy browser extension installed and signed into web.vibodj.com, capture the token automatically (saved to ~/.vibo-mcp/session.json).

The server boots without credentials; the config error only surfaces on the first tool call.

How it works

Vibo's app talks to a GraphQL API at https://api.vibodj.com/v2/graphql, authenticating with an x-token header obtained from an email/password signIn. This server reuses that same flow server-side (no browser needed) and wraps the host/couple operations as MCP tools. Every mutating tool is confirm-gated: without confirm: true it returns a dry-run preview and makes no network call.

See docs/VIBO-API.md for the reverse-engineered API notes and skills/vibo-mcp/SKILL.md for the full tool list.

Development

npm install
npm run build   # tsc + esbuild bundle → dist/
npm test        # vitest

License

MIT

Reviews

No reviews yet

Be the first to review this server!

More Developer Tools MCP Servers

Git

Free

by Modelcontextprotocol · Developer Tools

Read, search, and manipulate Git repositories programmatically

80.0K
Stars
9
Installs
6.5
Security
No ratings yet
Local

Toleno

Free

by Toleno · Developer Tools

Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.

137
Stars
565
Installs
8.0
Security
4.8
Local

mcp-creator-python

Free

by mcp-marketplace · Developer Tools

Create, build, and publish Python MCP servers to PyPI — conversationally.

-
Stars
90
Installs
10.0
Security
4.6
Local

MarkItDown

Free

by Microsoft · Content & Media

Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption

168.6K
Stars
62
Installs
4.2
Security
5.0
Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.

-
Stars
60
Installs
10.0
Security
5.0
Remote

FinAgent

Free

by mcp-marketplace · Finance

Free stock data and market news for any MCP-compatible AI assistant.

-
Stars
28
Installs
10.0
Security
No ratings yet
Local