English Français العربية

net.bigfloppy.vibescan/vibescan

Official registry Developer tools

Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (streamable-http)
Claude Code 
claude mcp add --transport http vibescan 'https://vibescan.bigfloppy.net/mcp'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "vibescan": {
            "type": "http",
            "url": "https://vibescan.bigfloppy.net/mcp"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

VibeScan

A security scanner for vibe-coded repos. Stdlib-only Python, nothing to pip install. Run: PORT=8473 python3 server.py · Health: /api/health · Vhost: vibescan.bigfloppy.net → 127.0.0.1:8473

Frequently asked questions

What is net.bigfloppy.vibescan/vibescan?

Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.

How do I install net.bigfloppy.vibescan/vibescan?

It runs as a remote server. In Claude Code: claude mcp add --transport http vibescan 'https://vibescan.bigfloppy.net/mcp'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does net.bigfloppy.vibescan/vibescan need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is net.bigfloppy.vibescan/vibescan open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains net.bigfloppy.vibescan/vibescan?

It is published by wminno. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.