About vibescan
VibeScan is a Python security scanner for repositories created with AI coding tools. It checks for leaked keys, .env files, eval, SQL injection and CORS issues; the README does not describe an MCP interface.
Key features
- 01Scans for leaked keys
- 02Checks .env files
- 03Detects eval and SQLi
- 04Checks CORS configuration
Use cases
- 01Review an AI-written GitHub repository
- 02Check a repository for exposed credentials
Configuration
Remote servers need no local install. Pick your client, then copy the config or install in one click.
https://vibescan.bigfloppy.net/mcpclaude mcp add --transport http net-bigfloppy-vibescan-vibescan https://vibescan.bigfloppy.net/mcp{"mcpServers":{"net-bigfloppy-vibescan-vibescan":{"type":"http","url":"https://vibescan.bigfloppy.net/mcp"}}}Open in Cursor{"servers":{"net-bigfloppy-vibescan-vibescan":{"type":"http","url":"https://vibescan.bigfloppy.net/mcp"}}}Open in VS Code{"mcpServers":{"net-bigfloppy-vibescan-vibescan":{"type":"http","url":"https://vibescan.bigfloppy.net/mcp"}}}{"mcpServers":{"net-bigfloppy-vibescan-vibescan":{"serverUrl":"https://vibescan.bigfloppy.net/mcp"}}}Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.
Tools
Details
From the project READMEVibeScan
A security scanner for vibe-coded repos. Stdlib-only Python, nothing to pip install.
Run: PORT=8473 python3 server.py · Health: /api/health · Vhost: vibescan.bigfloppy.net → 127.0.0.1:8473
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.