@vibeaudit/mcp

VibeAudit MCP Server — Run production-readiness security audits directly from Claude Code, Cursor, Windsurf, or any MCP-compatible AI tool.

Quick Start

Claude Code

claude mcp add vibeaudit npx @vibeaudit/mcp

Claude Desktop / Cursor / Windsurf

Add to your MCP config:

{
  "mcpServers": {
    "vibeaudit": {
      "command": "npx",
      "args": ["-y", "@vibeaudit/mcp"],
      "env": {
        "VIBEAUDIT_API_KEY": "your-api-key"
      }
    }
  }
}

Available Tools

| Tool | Description | |------|-------------| | vibeaudit_scan | Full scan — scores + findings across 11 categories | | vibeaudit_check_headers | Check security headers (CSP, HSTS, etc.) | | vibeaudit_check_dns | Check SPF, DKIM, DMARC, MX records | | vibeaudit_check_rls | Test Supabase Row Level Security | | vibeaudit_get_report | Fetch an existing scan report by ID |

Example Prompts

• "Scan https://my-app.vercel.app and fix any critical issues"
• "What security headers is my app missing?"
• "Check if my Supabase RLS is configured correctly"
• "Run a full VibeAudit and give me a summary of what to fix first"

Get an API Key

Sign up at vibeaudit-gamma.vercel.app — API access is included with the Monitor plan.