Security MCP for vibe coding. 424 rules, 36 tools, CLI + doctor. Host security, auth coverage mapping, LLM-powered deep scan (IDOR/business logic), taint analysis. 61 CVE rules refreshed daily from GH…
| Tool name | Description | Destructive? |
|---|---|---|
| fetchUrl | ✓ no | |
| getData | ✓ no | |
| readDoc | ✓ no | |
| execute⚠ | ⚠ yes | |
| status | ✓ no |
| foo | ✓ no | |
| get_user | ✓ no | |
| dump | ✓ no | |
| check_code | ✓ no | |
| check_project | ✓ no | |
| get_security_docs | ✓ no | |
| check_dependencies | ✓ no | |
| scan_directory | ✓ no | |
| scan_dependencies | ✓ no | |
| scan_secrets | ✓ no | |
| scan_staged | ✓ no | |
| compliance_report | ✓ no | |
| export_sarif | ✓ no | |
| check_package_health | ✓ no | |
| fix_code | ✓ no | |
| audit_config | ✓ no | |
| generate_policy | ✓ no | |
| review_pr | ✓ no | |
| scan_secrets_history | ✓ no | |
| policy_check | ✓ no | |
| analyze_dataflow | ✓ no | |
| analyze_cross_file_dataflow | ✓ no | |
| check_command | ✓ no | |
| scan_config_change | ✓ no | |
| repo_security_posture | ✓ no | |
| explain_remediation | ✓ no | |
| scan_file | ✓ no | |
| scan_changed_files | ✓ no | |
| security_stats | ✓ no | |
| audit_mcp_config | ✓ no | |
| scan_host_config | ✓ no | |
| guardvibe_doctor | ✓ no | |
| verify_fix | ✓ no | |
| security_workflow | ✓ no | |
| auth_coverage | ✓ no | |
| deep_scan | ✓ no | |
| full_audit | ✓ no | |
| remediation_plan | ✓ no | |
| verify_remediation | ✓ no | |
| lookup_user | ✓ no | |
| fetch_page | ✓ no | |
| fetch_weather | ✓ no |
{
"mcpServers": {
"guardvibe": {
"command": "npx",
"args": [
"-y",
"guardvibe"
]
}
}
}