Viberaven runs on your own machine — the client starts it, so there is no endpoint to ping. 1 512 installs a week from npm. Last commit 29 Oct 2026.
Checks a Vercel + Supabase repo before deploy: RLS, grants, leaked keys, webhooks. Runs locally.
Nothing serious here today
Today is the operative word: we check Viberaven every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add viberaven -- npx -y @viberaven/mcp{
"mcpServers": {
"viberaven": {
"command": "npx",
"args": [
"-y",
"@viberaven/mcp"
]
}
}
}[mcp_servers.viberaven]
command = "npx"
args = ["-y", "@viberaven/mcp"]{
"mcpServers": {
"viberaven": {
"command": "npx",
"args": [
"-y",
"@viberaven/mcp"
]
}
}
}{
"servers": {
"viberaven": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@viberaven/mcp"
]
}
}
}Alternatives to Viberaven
same job, measured the same wayGrade a URL as an attacker and a customer would see it; scan a repo; check Supabase, Stripe, Vercel.
Scan a running app or repo for leaked secrets, exposed routes and open RLS, and verify live keys
Code review for diffs: rule-based checks for leaked secrets, unsafe migrations and more.
Finds retired API versions and removed sfdx force:* commands in your DX repo before a deploy or a CI
Check GitHub repos and shell commands for malware-delivery tricks before an AI agent runs them
Checkout-local repository context graph over MCP; `npx repovine setup` wires skills, agents, hooks.
Offline, rule-based security checks for your repo, dependencies, AI agent config and local app.
Make a coding agent prove it: run the repo's real tests, typecheck and lint before it says done.
Viberaven — questions
Answers built from our own checks of this server.