VibeShift Web Tester MCP Server

[MCP Server] The Security Agent for AI assisted coding

What the server does

1. Automatically Analyze AI-Generated Code: As code is generated or modified by an AI assistant, VibeShift can be triggered to perform security analysis using a suite of tools (SAST, DAST components) and AI-driven checks. 2. Identify Security Vulnerabilities: Pinpoints common and complex vulnerabilities (e.g., XSS, SQLi, insecure configurations, logic flaws) within the AI-generated snippets or larger code blocks. 3. Facilitate AI-Driven Remediation: Provides detailed feedback and vulnerability information directly to the AI coding assistant, enabling it to suggest or even automatically apply fixes.

• MCP Integration: — Seamlessly integrates with Cursor/Windsurf/Github Copilot/Roo Code
• Automated Security Scanning: — Triggers on AI code generation/modification to perform:
• Static Code Analysis (SAST): — Integrates tools like Semgrep to find vulnerabilities in source code
• Dynamic Analysis (DAST Primitives): — Can invoke tools like Nuclei or ZAP for checks against running components (where applicable)
• AI-Assisted Test Recording: — Generate Playwright-based test scripts from natural language descriptions (in automated mode)
• Deterministic Test Execution: — Run recorded JSON test files reliably using Playwright

Credentials and setup notes

• Python 3.10+ * Access to any LLM (gemini 2.0 flash works best for free in my testing) * MCP installed (pip install mcp[cli]) * Playwright browsers installed (patchright install)

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.