Back to MCP Trust Indexm8ven
37
/ 100
1 month ago
mcp_so

🧭 Vibe Check MCP

Stop AI coding disasters before they cost you weeks. Real-time anti-pattern detection for vibe coders who love AI tools but need a safety net to avoid expensive overengineering traps.

→ kesslerio/vibe-check-mcp· listed on mcp_so
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

mcp.so

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
⚠️
Tool descriptions don’t match what handlers do
1 tool describes read intent but its handler mutates — claude_cli_status (line 41: which_result = subprocess.run()
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: GITHUB_PERSONAL_ACCESS_TOKEN, GITHUB_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configTOKEN_TARGET
configTOKEN_BUFFER_TARGET
configLOG_LEVEL— Cause: FastMCP uses case-sensitive environment variable validation. Lowercase values like =error will fail.
configVIBE_LEVEL
configVIBE_CHECK_PROJECT_ROOT
configWORKSPACE
configMCP_SERVER_HOST
configMCP_SERVER_PORT
configVIBE_CHECK_DEV_MODE— export =true
configVIBE_CHECK_DEV_MODE_OVERRIDE— export =true
configVIBE_CHECK_DIAGNOSTICS— export =true
configCONTEXT7_MAX_CACHE_SIZE
configCONTEXT7_MAX_MEMORY_MB
configCONTEXT7_CACHE_TTL_SECONDS
configCONTEXT7_TIMEOUT_SECONDS
configCONTEXT7_RATE_LIMIT_REQUESTS
configCONTEXT7_RATE_LIMIT_WINDOW_SECONDS
configCONTEXT7_CIRCUIT_BREAKER_THRESHOLD
configCONTEXT7_CIRCUIT_BREAKER_TIMEOUT
configVIBE_CHECK_DEBUG_MODE
configVIBE_CHECK_DEFAULT_REPO
configVIBE_CHECK_MAX_DIFF_SIZE
configMCP_TRANSPORT
configRUNNING_IN_DOCKER
configTERM
configCLAUDE_CODE_SSE_PORT
configMOCK_CLAUDE_CLI
configCLAUDE_CLI_PATH
configPYTEST_CURRENT_TEST
🔐 secretGITHUB_PERSONAL_ACCESS_TOKEN
🔐 secretGITHUB_TOKEN— claude mcp add vibe-check-npm -e ="your_github_token_here" -- npx vibe-check-mcp --stdio
configVIBE_CHECK_TEST_MODE
configCLAUDE_CODE_MODE
configCLAUDE_CLI_SESSION
configMCP_SERVER
configCLAUDE_PARENT_PROCESS
configVIBE_CHECK_CHARACTER_LIMIT
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 9 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/kesslerio-vibe-check-mcp-1i23ge)](https://m8ven.ai/mcp/kesslerio-vibe-check-mcp-1i23ge)
commit: c98bc09bb54ca68a3bd6535558e28d822d51e59d
code hash: 37900c10f651b010ceeb52b9e7b23da8cdbdb0c28a554c738c28a39b3d2670b3
verified: 6/16/2026, 12:17:36 PM
view raw JSON →