📦

io.github.Aguantar/vibescan-mcp-server

MCP server for VibeScan — scan projects for leaked secrets and security issues

0 installs

Trust: 37 — Low

Files

Ask AI about io.github.Aguantar/vibescan-mcp-server

I know everything about io.github.Aguantar/vibescan-mcp-server. Ask me about installation, configuration, usage, or troubleshooting.

0/500

Loading tools...

Reviews

mcp-name: io.github.Aguantar/vibescan-mcp-server

MCP server for VibeScan — scan projects for leaked secrets and security issues directly from Claude Code.

vibescan_scan — Scan a project for secrets, dangerous patterns, and git hygiene issues
vibescan_rules — List all 17 detection rules

14 secret categories: env files, config hardcodes, cloud credentials, Docker/infra, CI/CD pipelines, IDE settings, SSH keys, hardcoded patterns, frontend env vars, data files, doc secrets, mobile files, system configs, editor remnants
Dangerous code patterns: eval(), exec(), shell injection, SQL injection, pickle, innerHTML
Git hygiene: missing .gitignore, unignored .env/.pem/.key files

All scanning runs locally — your code never leaves your machine.

pip install vibescan-mcp-server

Add to your .mcp.json:

{
  "mcpServers": {
    "vibescan": {
      "command": "vibescan-mcp-server"
    }
  }
}

Then ask Claude: "scan this project for security issues" or "check for leaked secrets".

MIT