How do I install the guardvibe mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

What credentials does it need?

It reads `ANTHROPIC_BASE_URL` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

Guardvibe MCP Server

Security MCP for vibe coding. 313 rules, 25 tools for AI-generated code.

Local serverstdioGo

What is the Guardvibe MCP Server?

Security MCP for vibe coding. 313 rules, 25 tools for AI-generated code.

What it actually does

Works with Claude Code, Cursor, Gemini CLI, Codex, VS Code (Copilot), Windsurf, and any MCP-compatible coding agent.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
check_code	Analyze a code snippet for security issues
check_project	Scan multiple files with security scoring (A-F)
scan_directory	Scan a project directory from disk
scan_staged	Pre-commit scan of git-staged files — diff-aware (blocks only newly-staged lines; diff_aware:false for whole files)
scan_dependencies	Check all dependencies for known CVEs (OSV) — annotates each vulnerable package with reachability (is it actually imported in your source?)
scan_secrets	Detect leaked secrets, API keys, tokens
check_dependencies	Check individual packages against OSV
check_package_health	Typosquat detection, maintenance status, adoption metrics
compliance_report	Map security findings to compliance controls (SOC2, PCI-DSS, HIPAA, GDPR, ISO27001, EU AI Act)
export_sarif	SARIF v2.1.0 export for CI/CD integration
get_security_docs	Security best practices and guides
fix_code	Auto-fix suggestions with concrete patches for AI agents
secure_this	Close the loop — scan, apply only the fixes that verifiably land (each re-scanned, rolled back on regression), return the verified code + a definition-of-done gate
audit_config	Audit project configuration files for cross-file security misconfigurations

How to install the Guardvibe MCP Server

{
  "mcpServers": {
    "guardvibe": {
      "command": "npx",
      "args": ["-y", "guardvibe"],
      "env": {
        "ANTHROPIC_BASE_URL": "your-value"
      }
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Configuration

Variable	Description	Required
ANTHROPIC_BASE_URL	Endpoint or connection string the server talks to.	Yes

Example prompts to try

“Use Guardvibe to check code.”
“Use Guardvibe to check project.”
“Use Guardvibe to scan directory.”

Frequently asked questions

Security MCP for vibe coding. 313 rules, 25 tools for AI-generated code. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.