Vibe Shield MCP Server

@avivgerz-hue

Basic information

About Vibe Shield MCP Server

60-rule static security scanner, MCP server & skill poisoning auditor for AI-generated codebases (Claude Code, Codex, Cursor).

Vibe Shield MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "github": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/server-github"
      ]
    },
    "vibe-shield": {
      "command": "npx",
      "args": [
        "--yes",
        "@vibefoundry/vibe-shield@2.0.0",
        "mcp"
      ]
    }
  }
}

Vibe Shield MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Vibe Shield?

60-rule static security scanner, MCP server & skill poisoning auditor for AI-generated codebases (Claude Code, Codex, Cursor).

How to use Vibe Shield?

The README includes setup instructions such as npx -y @vibefoundry/vibe-shield@latest scan ..

Key features of Vibe Shield

uses: actions/checkout@v4
uses: actions/setup-node@v4
name: Scan and upload SARIF
uses: github/codeql-action/upload-sarif@v3
name: Enforce the gate

Use cases of Vibe Shield

Connect an MCP-compatible client to this repository's service.
Review the README-backed setup before enabling it in production.

Frequently asked questions

Where is the source code for Vibe Shield?

The source code is linked from the repository URL on this page.

Does Vibe Shield include a standard MCP config?

If the README contains a parseable MCP configuration block, it is shown in the Config tab.

Comments

More Developer Tools MCP servers

Foremerge

naw103

Catch intent conflicts before code conflicts. The open-source coordination protocol for coding agents, built above Git.

offprompt

MCP server that lets Claude Code, Cursor or Codex ask you for API keys on a local page and write them to .env. The agent only ever sees key names.

OrangePro

Aamir Siddiqui

OrangePro local-first CLI + MCP server for behavior mapping, grounded test generation, and dynamic proof.

Ramen

bkraad47

Multi-zone MCP server for GKE/EKS/AKS: Python tools from git, NeMo guardrails, SSO, autoscaling.

Repo Test Architect

RepoAssay

Local-first, read-only MCP server for evidence-backed repository test architecture audits and test planning.