VibeCheck MCP Server

1. **Automatically Analyze AI-Generated Code:** As code is generated or modified by an AI assistant, VibeShift can be triggered to perform security

Local serverstdioPython

What is the VibeCheck MCP server?

If you already use VibeCheck, the vibecheck mcp server is the piece that lets your assistant work with it directly. 1. Automatically Analyze AI-Generated Code: As code is generated or modified by an AI assistant, VibeShift can be triggered to perform security analysis using a suite of tools (SAST, DAST components) and AI-driven checks. 2. **Identify.

What the server does

  • MCP Integration: — Seamlessly integrates with Cursor/Windsurf/Github Copilot/Roo Code
  • Automated Security Scanning: — Triggers on AI code generation/modification to perform:
  • Static Code Analysis (SAST): — Integrates tools like Semgrep to find vulnerabilities in source code
  • Dynamic Analysis (DAST Primitives): — Can invoke tools like Nuclei or ZAP for checks against running components (where applicable)
  • AI-Assisted Test Recording: — Generate Playwright-based test scripts from natural language descriptions (in automated mode)
  • Deterministic Test Execution: — Run recorded JSON test files reliably using Playwright

Installation

The server ships on PyPI as mcp, so your MCP client can launch it on demand — there is no separate build step. Add the server block to your client's configuration, restart it, and the tools register themselves.

Available tools

The toolset is worth reading before you wire it up, because it tells you what the integration is really for:

  • Prerequisites — The Prerequisites tool exposed by this server
  • Installation — 1. Clone the repository: bash git clone https://github.com/GroundNG/VibeShift cd VibeShift 2. Create a virtual environment (recommended):
  • Configuration — 1. Rename the .env.example to .env file in the project root directory. 2. Add your LLM API key and other necessary details: dotenv # .env

Credentials and setup notes

Configuration is passed through the environment: LLM_API_KEY, YOUR_LLM_API_KEY. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.

  • Python 3.10+ * Access to any LLM (gemini 2.0 flash works best for free in my testing) * MCP installed (pip install mcp[cli]) * Playwright browsers installed (patchright install)

Worth knowing first

  • It runs with your machine's permissions. That is convenient and also the reason to think about what you point it at before you approve a tool call.
  • Missing credentials fail quietly in some clients — if no tools show up, check the environment block first.
  • Keep per-call confirmation enabled while you learn its behaviour; it is the cheapest safeguard you have.

Where it fits

This sits in the developer tooling group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. VibeCheck's toolset — Prerequisites, Installation, Configuration — is a fair guide to whether it matches your workflow. It is maintained by Ilikepizza2; worth a glance at recent repository activity before you build anything load-bearing on it.

This entry was verified against VibeCheck's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.

Available tools

ToolWhat it does
PrerequisitesThe Prerequisites tool exposed by this server.
Installation1. **Clone the repository:** bash git clone https://github.com/GroundNG/VibeShift cd VibeShift 2. **Create a virtual environment (recommended):** bash python -m venv venv source venv/bin/activate # Linux/macOS # venv\Scr
Configuration1. Rename the .env.example to .env file in the project root directory. 2. Add your LLM API key and other necessary details: dotenv # .env LLM_API_KEY="YOUR_LLM_API_KEY" * Replace YOUR_LLM_API_KEY with your actual key.

How to install the VibeCheck MCP server

{
  "mcpServers": {
    "vibecheck": {
      "command": "uvx",
      "args": ["mcp"],
      "env": {
        "LLM_API_KEY": "your-value",
        "YOUR_LLM_API_KEY": "your-value"
      }
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Configuration

  • Python 3.10+ * Access to any LLM (gemini 2.0 flash works best for free in my testing) * MCP installed (pip install mcp[cli]) * Playwright browsers installed (patchright install)
VariableDescriptionRequired
LLM_API_KEYCredential the server authenticates with.Yes
YOUR_LLM_API_KEYCredential the server authenticates with.Yes

Example prompts to try

  • Use VibeCheck to Prerequisites.
  • Use VibeCheck to Installation.
  • Use VibeCheck to Configuration.

Frequently asked questions

It connects VibeCheck to MCP-compatible AI assistants such as Claude and Cursor, exposing 3 tools (Prerequisites, Installation, Configuration) that the assistant can call on your behalf. Instead of copying data back and forth by hand, the assistant works with VibeCheck directly.