QA MCP (Probably will rename to vibecheck?)

Name: QA MCP (Probably will rename to vibecheck?)
Author: Ilikepizza2

@Ilikepizza2

Repository Homepage

About QA MCP (Probably will rename to vibecheck?)

[MCP Server] The Security Agent for AI assisted coding

#test #web #qa #automation #ai #coding

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "GroundNG-Web-Tester": {
      "command": "uv",
      "args": [
        "--directory",
        "path/to/cloned_repo",
        "run",
        "mcp_server.py"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is VibeShift?

VibeShift is a security agent that integrates with AI coding assistants via the Model Context Protocol (MCP). It analyzes code generated by AI, identifies vulnerabilities, and facilitates AI-driven remediation before insecure code reaches the codebase. It is designed for developers using tools like Cursor, GitHub Copilot, or Claude Code.

How to use VibeShift?

Install Python 3.10+, clone the repository, create a virtual environment, install dependencies with pip install -r requirements.txt, and install Playwright browsers with patchright install --with-deps. Rename .env.example to .env and add your LLM API key. Add the MCP server configuration to your AI assistant's MCP config. Then interact with VibeShift through natural language commands via your AI coding assistant.

Key features of VibeShift

MCP integration with major AI coding assistants
Automated SAST scanning using Semgrep
Dynamic analysis via Nuclei
AI-assisted test recording and execution
AI-powered test discovery and regression testing
Self‑healing tests that adapt to code changes
Visual regression testing (pixelmatch and LLM)

Use cases of VibeShift

Automatically scan AI‑generated code for security vulnerabilities
Record and run Playwright‑based test scripts from natural language descriptions
Execute regression test suites to catch regressions
Discover test steps by crawling websites and analyzing pages

FAQ from VibeShift

What are the prerequisites for running VibeShift?

Python 3.10+, an LLM API key (Gemini 2.0 Flash works well), the MCP package installed (pip install mcp[cli]), and Playwright browsers installed (patchright install --with-deps).

How do I configure VibeShift?

Rename the .env.example file to .env in the project root and add your LLM API key under the LLM_API_KEY variable.

What security tools does VibeShift integrate?

VibeShift uses Semgrep for static code analysis (SAST) and Nuclei for template‑based dynamic scanning (DAST). It also leverages Playwright for browser automation.

Where are test and security results stored?

Recorded tests are saved as JSON files in the output/ directory. Execution results are returned to the AI assistant and also saved to output/execution_result_....json. Discovery results are saved to output/discovery_results_....json.

Does VibeShift support UI testing beyond standard Playwright?

Yes, it supports UI tests not natively supported by Playwright, such as checking if text is overflowing in a div.

Comments

More Other MCP servers

Mcp

browsermcp

Browser MCP is a Model Context Provider (MCP) server that allows AI applications to control your browser

6.8K

MCP Registry

modelcontextprotocol

A community driven registry service for Model Context Protocol (MCP) servers.

7.0K

EverArt

modelcontextprotocol

Model Context Protocol Servers

88.1K

Activepieces

activepieces

AI Agents & MCPs & AI Workflow Automation • (~400 MCP servers for AI agents) • AI Automation / AI Agent with MCPs • AI Workflows & AI Agents • MCPs for AI Agents

23.2K

IDA Pro MCP

mrexodia

AI-powered reverse engineering assistant that bridges IDA Pro with language models through MCP.

9.9K