VibeCheck

AI-powered security audit server integrating MITRE CWE data and npm audit for codebase vulnerability analysis.

typescript

1

GitHub Stars

typescript

Language

4 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "philiphess1-vibecheck-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "vibecheck-audit-mcp"
      ]
    }
  }
}

VibeCheck MCP Server provides AI-powered security audit capabilities for codebases by combining real-time vulnerability data from MITRE CWE and npm audit with MCP-driven analysis, enabling you to identify and remediate security issues efficiently across your projects.

How to use

To use the VibeCheck MCP Server, you connect an MCP client to run security audits against your codebase. You can leverage the recommended Claude-based integration or a manual/standalone setup. The server analyzes your codebase, enriches findings with CWE references from MITRE, and reports dependency vulnerabilities from npm audit.

How to install

Prerequisites you need before installing include Node.js and npm (for building and running the server). Ensure your environment can access the internet to fetch dependencies.

/plugin marketplace add philiphess1/vibecheck-mcp
/plugin install vibecheck@vibecheck

Additional installation options

Manual installation configures the MCP server entry in your Claude Desktop setup. Use the provided JSON snippet to register the server for quick access.

{
  "mcpServers": {
    "vibecheck": {
      "command": "npx",
      "args": ["-y", "vibecheck-audit-mcp"]
    }
  }
}

From source

If you prefer to build from source, follow these steps to clone the repository, install dependencies, and build the project.

git clone https://github.com/philiphess1/vibecheck-mcp.git
cd vibecheck-mcp
npm install && npm run build

Available tools

scan_codebase

Performs an AI-powered security audit of the entire codebase, identifying authentication, API, data flow, secrets, and dependency vulnerabilities using MCP sampling and CWE data.

check_dependencies

Runs a quick dependency-only scan using npm audit to surface vulnerable packages and related issues.