What are the prerequisites for running VibeShift?
Python 3.10+, an LLM API key (Gemini 2.0 Flash works well), the MCP package installed (`pip install mcp[cli]`), and Playwright browsers installed (`patchright install --with-deps`).
@Ilikepizza2
Basic information
[MCP Server] The Security Agent for AI assisted coding
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"GroundNG-Web-Tester": {
"command": "uv",
"args": [
"--directory",
"path/to/cloned_repo",
"run",
"mcp_server.py"
]
}
}
}Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
VibeShift is a security agent that integrates with AI coding assistants via the Model Context Protocol (MCP). It analyzes code generated by AI, identifies vulnerabilities, and facilitates AI-driven remediation before insecure code reaches the codebase. It is designed for developers using tools like Cursor, GitHub Copilot, or Claude Code.
Install Python 3.10+, clone the repository, create a virtual environment, install dependencies with pip install -r requirements.txt, and install Playwright browsers with patchright install --with-deps. Rename .env.example to .env and add your LLM API key. Add the MCP server configuration to your AI assistant's MCP config. Then interact with VibeShift through natural language commands via your AI coding assistant.
Python 3.10+, an LLM API key (Gemini 2.0 Flash works well), the MCP package installed (`pip install mcp[cli]`), and Playwright browsers installed (`patchright install --with-deps`).
Rename the `.env.example` file to `.env` in the project root and add your LLM API key under the `LLM_API_KEY` variable.
VibeShift uses Semgrep for static code analysis (SAST) and Nuclei for template‑based dynamic scanning (DAST). It also leverages Playwright for browser automation.
Recorded tests are saved as JSON files in the `output/` directory. Execution results are returned to the AI assistant and also saved to `output/execution_result_....json`. Discovery results are saved to `output/discovery_results_....json`.
Yes, it supports UI tests not natively supported by Playwright, such as checking if text is overflowing in a div.
A search tool helps dev to solve the naming things problem.

A good sequence diagram can solve almost any communication problem in engineering. Volley lets your agent write them as plain text, with the real request and response payloads on every arrow. It checks its own syntax wi
Painless E2E Automation for Mobile and Web
PickFu MCP is a Model Context Protocol (MCP) server that connects AI assistants, developers, marketers, product managers, and AI agents to PickFu's consumer research platform. It enables users to create surveys, conduct

Model Context Protocol Servers
Comments