vibe-shield — security scanner for AI-generated code MCP Server

by avivgerz-hue Your server? Claim it

local only

vibe-shield — security scanner for AI-generated code runs on your own machine — the client starts it, so there is no endpoint to ping. 648 installs a week from npm. Last commit 10 Nov 2026.

Scans AI-written code for leaked secrets, unguarded routes and missing RLS.

Installs per day peak 597 · avg 21

a month agotoday

648

Installs / week

npm · @vibefoundry/vibe-shield

Stars

0 open issues

10 Nov 2026

Last commit

from GitHub

MIT

License

TypeScript

Nothing serious here today

Today is the operative word: we check vibe-shield — security scanner for AI-generated code every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add vibe-shield -- npx -y @vibefoundry/vibe-shield

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "vibe-shield": {
      "command": "npx",
      "args": [
        "-y",
        "@vibefoundry/vibe-shield"
      ]
    }
  }
}

~/.codex/config.toml

[mcp_servers.vibe-shield]
command = "npx"
args = ["-y", "@vibefoundry/vibe-shield"]

.cursor/mcp.json

{
  "mcpServers": {
    "vibe-shield": {
      "command": "npx",
      "args": [
        "-y",
        "@vibefoundry/vibe-shield"
      ]
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "vibe-shield": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@vibefoundry/vibe-shield"
      ]
    }
  }
}

Alternatives to vibe-shield — security scanner for AI-generated code

same job, measured the same way

Sentrint

by sentrint

Code security scanner for founders and small teams: leaked secrets, missing RLS, injection, CVEs

answering

SafeWeave

by safeweave

Security scanner for AI-written code: SAST, secrets, dependencies, IaC, containers and DAST.

110 installs/wk answering

CodeInspectus

by synvoya

Local-first MCP security scanner and CLI for AI-generated applications.

416 installs/wk local only

Code Guard MCP

by mlawsonking

Security scan for AI-generated code: injection, SSRF, secrets, weak crypto, unsafe deserialization.

87 installs/wk local only

LeakRank Guard

by prototeemo

Scans code changes for leaked secrets and insecure config, with actionable fixes for AI agents.

62 installs/wk local only

MCP Codeaudit

by infoinlet-marketplace

Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.

74 installs/wk local only

valvur

by maverickhq

Offline security scanning for AI-generated code: seven open-source scanners in one MCP server.

330 installs/wk local only

MCPVetter

by mcpvetter

Audit your MCP servers for poisoned tools and leaked secrets, and check AI-generated code for flaws.

1 053 installs/wk answering

vibe-shield — security scanner for AI-generated code — questions

Answers built from our own checks of this server.

Why is there no uptime for vibe-shield — security scanner for AI-generated code?

vibe-shield — security scanner for AI-generated code runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @vibefoundry/vibe-shield was installed 648 times last week.

How do I connect vibe-shield — security scanner for AI-generated code?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls @vibefoundry/vibe-shield straight from npm; nothing to host, nothing to sign up for.

How many people use vibe-shield — security scanner for AI-generated code?

The npm package @vibefoundry/vibe-shield was installed 648 times in the last week. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is vibe-shield — security scanner for AI-generated code open source?

Yes — it is published under the MIT licence, written in TypeScript and 26 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.