VibeDefender

Guides AI agents through professional security assessments with guided workflows, tool installation, and live testing for OWASP Top 10 coverage.

typescript

1

GitHub Stars

typescript

Language

6 months ago

First Indexed

2 months ago

Catalog Refreshed

Documentation & install

Readme and setup notes from the catalogue, plus a client-ready config you can copy for your MCP host.

Installation

Add the following to your MCP client configuration file.

Configuration

View docs

{
  "mcpServers": {
    "yunusj-vibedefender-mcp": {
      "command": "npx",
      "args": [
        "github:yunusj/VibeDefender-MCP"
      ]
    }
  }
}

VibeDefender is a Security Knowledge MCP Server that guides AI coding agents through professional security assessments. It provides step-by-step workflows, plain-English explanations, and automated setup for tools like Trivy, Semgrep, and Nuclei so your AI can perform thorough, standards-aligned security checks without requiring you to be a security expert.

How to use

You interact with the VibeDefender MCP through your preferred MCP editor (such as Claude Code, Cursor, Claude Desktop, or Google Antigravity). Start by configuring the MCP server once, then trigger the built-in workflows using natural language prompts. You can request setups, run full scans, perform fast pre-push checks, test live runtimes, or evaluate specific URLs. The server responds with guided, plain-English steps that tell your AI exactly what to do next.

How to install

Prerequisites: you need Node.js and npm installed on your system. Ensure you have a compatible MCP editor ready to connect to an MCP server.

Option 1: Run directly from GitHub using npx. This clones, installs dependencies, builds, and runs the MCP server in one step.

Option 2: Install globally with npm and run the server as a local command.

Configuration and startup example

{
  "mcpServers": {
    "vibedefender": {
      "command": "npx",
      "args": ["github:yunusj/VibeDefender-MCP"]
    }
  }
}

Additional setup and testing

If you want to verify the MCP server setup before wiring it to your editor, you can use the MCP Inspector tool. Install the inspector globally, then run the inspector with the MCP server reference to confirm a successful connection.

npm install -g @modelcontextprotocol/inspector
npx @modelcontextprotocol/inspector npx github:yunusj/VibeDefender-MCP

Available tools

Trivy

CVE and dependency vulnerability scanning to identify known vulnerabilities in dependencies and images.

Semgrep

Static code analysis with a large ruleset to find security issues in source code.

Nuclei

Runtime security testing using templates to detect vulnerabilities during execution.

Metasploit

Optional integration for discovery, exploitation, and post-exploitation workflows.