English Français العربية

io.github.Aguantar/vibescan-mcp-server

Official registry Security

MCP server for VibeScan — scan projects for leaked secrets and security issues

Source code Documentation

What can you do with io.github.Aguantar/vibescan-mcp-server?

  • vibescan_scan — Scan a project for secrets, dangerous patterns, and git hygiene issues
  • vibescan_rules — List all 17 detection rules

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

PYPI package vibescan-mcp-server
Claude Code 
claude mcp add vibescan-mcp-server -- uvx vibescan-mcp-server==0.1.0
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "vibescan-mcp-server": {
            "command": "uvx",
            "args": [
                "vibescan-mcp-server==0.1.0"
            ]
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. vibescan-mcp-server
  2. Features
  3. Installation
  4. Usage with Claude Code
  5. License

vibescan-mcp-server

mcp-name: io.github.Aguantar/vibescan-mcp-server

MCP server for VibeScan — scan projects for leaked secrets and security issues directly from Claude Code.

Features

  • vibescan_scan — Scan a project for secrets, dangerous patterns, and git hygiene issues
  • vibescan_rules — List all 17 detection rules
What VibeScan detects
  • 14 secret categories: env files, config hardcodes, cloud credentials, Docker/infra, CI/CD pipelines, IDE settings, SSH keys, hardcoded patterns, frontend env vars, data files, doc secrets, mobile files, system configs, editor remnants
  • Dangerous code patterns: eval(), exec(), shell injection, SQL injection, pickle, innerHTML
  • Git hygiene: missing .gitignore, unignored .env/.pem/.key files

All scanning runs locally — your code never leaves your machine.

Installation

pip install vibescan-mcp-server

Usage with Claude Code

Add to your .mcp.json:

{
  "mcpServers": {
    "vibescan": {
      "command": "vibescan-mcp-server"
    }
  }
}

Then ask Claude: "scan this project for security issues" or "check for leaked secrets".

License

MIT

Frequently asked questions

What is io.github.Aguantar/vibescan-mcp-server?

MCP server for VibeScan — scan projects for leaked secrets and security issues

How do I install io.github.Aguantar/vibescan-mcp-server?

It runs on your machine. In Claude Code: claude mcp add vibescan-mcp-server -- uvx vibescan-mcp-server==0.1.0. For other clients, paste the JSON configuration from this page into their MCP settings.

Does io.github.Aguantar/vibescan-mcp-server need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is io.github.Aguantar/vibescan-mcp-server open source?

Yes. Its code is on GitHub under the MIT license.

Who maintains io.github.Aguantar/vibescan-mcp-server?

It is published by Aguantar. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.