Vibesafe MCP Server

VibeSafe security scanner as an MCP server — scan code, live URLs, and run a Launch Check on your app from any MCP client (Claude, Cursor, etc.).

Local serverstdio

What is the Vibesafe MCP Server?

VibeSafe security scanner as an MCP server — scan code, live URLs, and run a Launch Check on your app from any MCP client (Claude, Cursor, etc.).

What you get

Run the VibeSafe security scanner directly inside any MCP client — Claude Desktop, Cursor, Windsurf, and others. Ask your AI to "scan this file with VibeSafe" and get a plain-English security report with fixes, without leaving your chat.

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
vibesafe_scan_codeScan code for exposed secrets, injection flaws, and risky patterns → security score + per-issue fixes
vibesafe_scan_urlScan a deployed site for missing security headers, HTTPS issues, exposed paths, CORS problems
vibesafe_launch_checkOpen your deployed app in a real browser like a user, capture errors, return a launch-readiness score

How to install the Vibesafe MCP Server

{
  "mcpServers": {
    "vibesafe": {
      "command": "npx",
      "args": ["-y", "vibesafe-mcp"],
      "env": {
        "VIBESAFE_API_KEY": "vibesafe_sk_your_key_here"
      }
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

VariableDescriptionRequired
VIBESAFE_API_KEYCredential the server authenticates with.Yes

Example prompts to try

  • “Use Vibesafe to vibesafe scan code.”
  • “Use Vibesafe to vibesafe scan url.”
  • “Use Vibesafe to vibesafe launch check.”

Frequently asked questions

VibeSafe security scanner as an MCP server — scan code, live URLs, and run a Launch Check on your app from any MCP client (Claude, Cursor, etc.). Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.