Back to Browse

Vibo MCP Server

Developer ToolsUse Caution3.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Persistent memory for AI agents: L1/L2/L3, web compression, threads.

About

Persistent memory for AI agents: L1/L2/L3, web compression, threads.

Security Report

3.2
Use Caution3.2High Risk

ViBo MCP server is a memory/caching service that relies entirely on external API authentication via VIBO_API_KEY. The server properly validates inputs with zod, uses HTTPS for API calls, and has no malicious patterns. However, it exhibits several security concerns: the API key is transmitted in request bodies and headers (redundant and error-prone), falls back to empty string when env var is missing, includes a Python web search utility with unsafe network operations (unchecked URL fetching, no validation), and lacks HTTPS enforcement for the configurable BASE_URL. For a service handling persistent user memory, these gaps create moderate risk. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue (1 critical, 0 high severity).

7 files analyzed ยท 10 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

Unverified package source

We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.

What You'll Need

Set these up before or after installing:

Your ViBo license key (VIBO-...). Get a free trial: https://wwwvibo.comRequired

Environment variable: VIBO_API_KEY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-vnbochkarev-netizen-vibo-mcp": {
      "env": {
        "VIBO_API_KEY": "your-vibo-api-key-here"
      },
      "args": [
        "-y",
        "@vibo-dev/vibo-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

๐Ÿฆž ViBo MCP Server

Memory for AI agents โ€” persistent memory (L1/L2/L3 encryption), web-search savings and thread memory. Works with any MCP client: Claude Desktop, Cursor, OpenClaw, Windsurf, Codex, and more.

Install

npm install -g @vibo-dev/vibo-mcp

Configuration

Add to your MCP client config (Claude Desktop example):

{
  "mcpServers": {
    "vibo": {
      "command": "npx",
      "args": ["-y", "@vibo-dev/vibo-mcp"],
      "env": {
        "VIBO_API_KEY": "YOUR_VIBO_KEY"
      }
    }
  }
}

Get a key: https://wwwvibo.com โ€” free 2-day trial, then $5/month.

Tools

ToolDescription
memory_searchFind relevant facts (returns token savings)
memory_addSave a fact (dedup by exact match)
memory_usageYour real savings statistics
thread_memoryThread: add / compress / ask / context

Example

Agent: "What does client Anna prefer?" โ†’ memory_search("Anna preferences") โ†’ โ€ข [L1] client-anna: Anna likes coffee without sugar, order #42 โ†’ ๐Ÿ’พ Saved 13,452 tokens (97.5%)

Honest numbers

  • Memory: 97.5% fewer tokens on 118 facts (grows with memory, 50-150ร— on 10K+).
  • Web search: 99.6% (measured 47,443 โ†’ 186 tokens).
  • Threads: -72%.
  • Secrets (L3) never reach the LLM โ€” encrypted by design.

Links


Related projects

  • CloudArc โ€” pack a 10 GiB folder into one .vibo archive at a flat ~26 MiB peak RSS, and read its index over HTTP without fetching the payload (Apache-2.0). Docs site
  • memory-shield โ€” poisoning defense for agent memory (MIT).
  • ViBo-memory โ€” persistent agent memory with L1/L2/L3 encryption.

Integrations

Reviews

No reviews yet

Be the first to review this server!