Vibescan Mcp Server
Run VibeScan secret-leak and security-issue scans on your repo from the agent before you ship or open-source.
Overview
io.github.Aguantar/vibescan-mcp-server is a MCP server for the Ship phase that runs VibeScan to find leaked secrets and security issues in your project.
What is this MCP server?
- MCP wrapper for VibeScan project scanning (PyPI vibescan-mcp-server, v0.1.0)
- Stdio transport for Claude Code and compatible agents
- Detects leaked secrets and broader security issues in project trees
- GitHub source: Aguantar/vibescan-mcp-server
- No extra env vars declared in server.json—local project path drives scans
- Server version 0.1.0
- Transport: stdio
- PyPI identifier: vibescan-mcp-server
Community signal: 1 GitHub stars.
What problem does it solve?
Secrets and security misconfigs slip into indie codebases because you lack a one-click scan inside the agent session where you already edit files.
Who is it for?
Solo developers shipping frequently who want agent-assisted secret scanning without leaving the MCP toolchain.
Skip if: Enterprises needing formal SOC2 evidence collection only from a centralized SAST platform with no local agent workflow.
What do I get? / Deliverables
After registering the stdio server, you can trigger VibeScan-driven reviews and remediate findings before deploy or release.
- VibeScan-powered security and secret findings via MCP
- Actionable issue list for agent-guided fixes
- Repeatable on-demand scans during Ship hardening
Recommended MCP Servers
Journey fit
How it compares
VibeScan MCP adapter for interactive repo scans, not a full CI security pipeline or manual pentest engagement.
Common Questions / FAQ
Who is vibescan-mcp-server for?
Indie and solo builders using MCP agents who want VibeScan-style secret and security checks on demand in the repo they are editing.
When should I use vibescan-mcp-server?
Use it in Ship before releases, after adding integrations with API keys, or when open-sourcing a project.
How do I add vibescan-mcp-server to my agent?
Install vibescan-mcp-server from PyPI, register the stdio MCP server in your agent config, and invoke scan tools against your workspace path.