io.github.Aguantar/vibescan-mcp-server
MCP server for VibeScan — scan projects for leaked secrets and security issues
Servidor MCP · de Aguantar
Resumo
io.github.Aguantar/vibescan-mcp-server é um servidor MCP publicado por Aguantar. Marketplaces que lemos e que o listam: 1 (Official MCP Registry). Vimos pela primeira vez em 2026-10-11 e não registramos mudanças desde então. Conforme nossa passagem pelos marketplaces em 2026-10-14.
O que pede
- Roda na sua máquina
Nenhum dos marketplaces que lemos publica as ferramentas ou as configurações que ele pede.
O que declara, pede e executa, por completo
Instale apenas plugins de desenvolvedores em quem você confia. Mostramos o que os marketplaces publicam e não testamos plugins.
Pacote
PyPI vibescan-mcp-server (vibescan-mcp-server no PyPI)
- Downloads do PyPI por semana: 59 (2026-10-13)
- Downloads do PyPI por mês: 161 (2026-10-13)
- Última versão no PyPI: 0.1.0, publicada em 2026-03-19
Nenhuma vulnerabilidade conhecida no OSV para 0.1.0 (verificado em 2026-10-13)
Os dados do PyPI vêm do pypi.org e os downloads do PyPI do pypistats.org. Cada número é do próprio registro e nunca é somado a outro. Um registro que não publica um número não mostra nenhum: sem número não é zero. Os registros de vulnerabilidades vêm do OSV.dev (CC BY 4.0) e dizem respeito apenas à versão declarada; uma listagem sem versão declarada não recebe resposta. Não analisamos código.
Funciona com
- Claude Code
- Codex
- Cursor
- VS Code
- Copilot CLI
Um link de um clique abre o cliente, que pede confirmação antes de adicionar o servidor.
Pelos marketplaces que o listam e pelo transporte MCP que declara, conforme cada cliente documenta. Não testamos plugins.
Conectar
Comandos e configurações gerados apenas a partir do que os marketplaces declaram. Não os executamos por você e não testamos plugins.
Como servidor MCP local: pacote PyPI
Gerado a partir do que Official MCP Registry declara.
claude mcp add --transport stdio vibescan-mcp-server -- uvx vibescan-mcp-server[mcp_servers.vibescan-mcp-server]
command = "uvx"
args = ["vibescan-mcp-server"]{
"mcpServers": {
"vibescan-mcp-server": {
"command": "uvx",
"args": [
"vibescan-mcp-server"
]
}
}
}Onde está publicado
| Marketplace | Status | Versão | Números | Verificado | Visto pela primeira vez |
|---|---|---|---|---|---|
| Official MCP Registry (Abrir o registro) | Listado | 0.1.0 | Downloads por mês (PyPI): 161 Downloads por semana (PyPI): 59 Forks (GitHub): 0 Estrelas (GitHub): 1 |
Sem marcação |
Cada número é do próprio marketplace e nunca é somado entre marketplaces. Um marketplace que não publica números não mostra nenhum: sem número não é zero.
O que mudou
Nada mudou neste plugin desde que começamos a acompanhá-lo.
Plugins semelhantes
Produtos cujos próprios nomes, descrições, ferramentas e skills são os mais próximos deste pelo significado, em todos os marketplaces que lemos. A proximidade é ordenada apenas dentro desta lista.
-
secret-scanner io.github.4hmetuyar/secret-scanner
Scans files for leaked secrets and API keys
-
mcp-server io.github.middleBrick/mcp-server
Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.
-
datahogo io.github.datahogo/datahogo
Scan a project for security issues locally with the open-source Data Hogo engine.
-
vulnicheck io.github.andrasfe/vulnicheck
HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.
-
mcp-server-auditor io.github.4hmetuyar/mcp-server-auditor
Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets
-
mcp io.github.SymbioticSec/mcp
Symbiotic CLI MCP Server for security scanning and analysis
-
vulnerability-scanner io.github.4hmetuyar/vulnerability-scanner
Triggers GuardBee scans, queries findings, AI-assisted remediation guidance
-
secretguard-mcp io.github.vladimirbakalov/secretguard-mcp
Scans code for hardcoded secrets (AWS, Stripe, GitHub, JWTs) before an AI agent commits it.
-
mcp-server-security-scanner io.github.vpatser1/mcp-server-security-scanner
Scan MCP configs for 30+ CVEs, prompt injection, tool poisoning; validate OAuth configs
-
mcp-observatory io.github.KryptosAI/mcp-observatory
MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
Plugins semelhantes por marketplace
A mesma pergunta feita a cada marketplace separadamente: existe lá um equivalente deste plugin?
Listado em Claude Code: claude-plugins-community (5)
-
Security auditor and hardener for vibe-coded projects. 170+ vulnerability checks across 24 categories including injection, XSS, auth bypass, IDOR, Supabase RLS, prompt injection…
-
Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs
-
Agentic-Security is a powerful Claude Code plugin that automatically performs Application Security Testing (SAST, SCA, secrets detection, and more). Think of it as the easy button…
-
Comprehensive security scanner for codebases. Scans for hardcoded secrets (30+ API key formats), injection flaws (SQLi, XSS, command injection, SSRF), authentication issues (JWT…
-
Scan your codebase for exposed secrets and API keys, generate .env templates from environment variable usage, validate .env files against .env.example, and rotate secrets. Keeps…
Listado em Claude Code: claude-plugins-official (5)
-
Skills for working with NightVision, a DAST and API Discovery platform that finds exploitable vulnerabilities in web applications and REST APIs
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
Sonatype Guide MCP server for software supply chain intelligence and dependency security. Analyze dependencies for vulnerabilities, get secure version recommendations, and check…
-
Set up endorctl and use Endor Labs to scan, prioritize, and fix security risks across your software supply chain
Listado em Claude: knowledge-work-plugins (5)
-
The Vanta plugin connects Claude Code to Vanta's security and compliance platform through the Vanta MCP server. It combines Vanta's test-specific remediation intelligence with…
-
Configure, run, and interpret HawkScan DAST results inside Claude Code. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into…
-
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF…
-
Query the StackHawk platform API for security posture reporting, findings analysis, and app management. Guides agents through authentication, data retrieval, and result…
-
gk-cli com.gitkraken/gk-cli
The GitKraken MCP Server for managing repos, PRs, issues across GitHub, GitLab, Bitbucket and more.
Listado em Codex: openai-curated (openai/plugins) (5)
-
Codex Security workflows for security scans, analysis, and investigation.
-
Inspect recent issues and events in Sentry from Codex.
-
Inspect repositories, triage pull requests and issues, debug CI, and publish changes through a hybrid GitHub connector and CLI workflow.
-
CrowdStrike Falcon Foundry development skills for building cybersecurity applications on the Falcon platform. Includes UI development, collections, functions, workflows, API…
-
Cloudflare platform plugin with curated skills for Workers, Wrangler, and Agents SDK plus the official Cloudflare API MCP server.
Listado em Community GitHub marketplaces (5)
-
Passive security scanner: audits MCP servers against the OWASP MCP Top 10, graded A-F.
-
Local-first defensive scanner for vulnerable dependencies, leaked secrets, and risky agent configs
-
4da-mcp-server io.github.4DA-Systems/4da-mcp-server
Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.
-
calllint io.github.calllint/calllint
Static preflight safety gate for MCP servers — scan configs before you run them. Never executes.
-
Scan what an AI agent running as you can reach; optionally verify which keys are live (x402).
Listado em Copilot CLI: github/awesome-copilot (5)
-
Complete toolkit for building Model Context Protocol (MCP) servers in Go using the official github.com/modelcontextprotocol/go-sdk. Includes instructions for best practices, a…
-
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages…
-
Complete toolkit for building Model Context Protocol (MCP) servers in Kotlin using the official io.modelcontextprotocol:kotlin-sdk library. Includes instructions for best…
-
Safe BLE diagnostics, evidence workflows, and guarded automation for AI agents.
-
Triage Dependabot alerts and recommend safe, evidence-based dependency updates.
Listado em Copilot CLI: github/copilot-plugins (5)
-
Advanced Security plugin for GitHub Copilot.
-
Bring Azure DevOps work-item, repository, and pull-request workflows into GitHub Copilot.
-
mcp-apps
Generate MCP App widgets for MCP tools. Produces self-contained HTML widgets using the MCP Apps protocol.
-
Toolkit for building Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, and capability configuration.
-
Build Power Apps Canvas Apps using the Canvas Authoring MCP server.
Listado em Cursor: cursor/plugins (5)
-
CLI-backed repo compatibility scans plus agents that audit startup, validation, and docs against reality.
-
Let Grok Bot reach MCP servers on your private Tailscale network. Sign in to Tailscale to connect your tailnet; Grok Bot joins it as one tagged device and only reaches the hosts…
-
Build apps, scripts, and automations with the TypeScript SDK.
-
Skills for building on the Cursor Origin API. Fetch the live spec first, then follow the Origin rules for credentials, scopes, webhooks, paging, and errors. Includes a skill that…
-
if you want to go fast, go deep first. pstack helps you write less, but higher quality code. rigorous agent workflows you can parallelize with confidence.
Listado em Docker MCP Catalog (5)
-
stackhawk com.stackhawk/stackhawk
An MCP server that provides interaction with StackHawk's security scanning platform.
-
A comprehensive security scanner for MCP servers with YARA rules and static analysis capabilities.
-
npm-sentinel-mcp io.github.Nekzus/npm-sentinel-mcp
Advanced NPM analysis: Recursive security scanning, ecosystem awareness, and deep insights.
-
Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants.
-
Connects with the Beagle Security backend using a user token to manage applications, run automated security tests, track vulnerabilities across environments, and gain intelligence…
Listado em Official MCP Registry (5)
-
secret-scanner io.github.4hmetuyar/secret-scanner
Scans files for leaked secrets and API keys
-
mcp-server io.github.middleBrick/mcp-server
Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.
-
datahogo io.github.datahogo/datahogo
Scan a project for security issues locally with the open-source Data Hogo engine.
-
vulnicheck io.github.andrasfe/vulnicheck
HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.
-
mcp-server-auditor io.github.4hmetuyar/mcp-server-auditor
Scans MCP server tool definitions for excessive agency, injection sinks, hardcoded secrets
Encontrados pelo significado, não por código ou repositório em comum: plugins semelhantes continuam sendo produtos distintos, e isto não é uma avaliação nem uma recomendação.
Este plugin é seu?
Adicione-o aos seus projetos e prove que o mantém com um arquivo no repositório, um arquivo no seu domínio ou um registro DNS. Você recebe alertas quando um marketplace o publica, o remove, muda a marca de verificado ou o que ele pede, e o endpoint remoto passa a ser monitorado como um serviço web.
Dados de Official MCP Registry. Os números vêm das nossas próprias passagens regulares pelos marketplaces, última leitura em . Não publicamos dados de contato dos editores de plugins.