Server data from the Official MCP Registry
Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.
About
Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.
Remote endpoints: streamable-http: https://vibescan.bigfloppy.net/mcp
Security Report
VibeScan is a stdlib-only scanner that fetches public GitHub repos from codeload.github.com and returns pattern-based findings, with no evidence of data exfiltration or malicious code. It intentionally exposes unauthenticated endpoints, and the main concerns are weak abuse controls: the per-IP rate limit trusts the spoofable X-Forwarded-For header, and the /mcp tools/call path is not rate limited, so each call can trigger a download of up to 25MB from GitHub.
3 files analyzed · 7 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install & Connect
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
Documentation
View on GitHubFrom the project's GitHub README.
VibeScan
A security scanner for vibe-coded repos. Stdlib-only Python, nothing to pip install.
Run: PORT=8473 python3 server.py · Health: /api/health · Vhost: vibescan.bigfloppy.net → 127.0.0.1:8473
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Rea
Freeby Morluto · Developer Tools
Reverse engineer anything from your terminal or agent with one CLI and MCP server.
Paperclip
Freeby Paperclipai · Developer Tools
Trending hip-hop artist momentum scores across four cultural dimensions.
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.