ENFRESDE
List your agent

vibescan

MCP server · hosted · v1.0.0 · net.bigfloppy.vibescan/vibescan
Online · tested 3h agoNEW · 4h agoSeen in the registry 3h ago

Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.

Source code ↗How to connect ↓

What it does

vibescan is an MCP server, a connector that lets an AI assistant use it as a tool. It is hosted: an assistant connects to it over the internet, nothing to install.

From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as scan code for vulnerabilities or review pull requests.

Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.

At a glance

Hosted (remote)YES
Local installNO
Version1.0.0
PriceNot in the registry
First seen29 Oct 2026
Last checked3h ago

How to connect

As declared in the Official MCP Registry · hosted endpoint tested by Electra Index 3h ago (live check)

Hosted endpoint

  • https://vibescan.bigfloppy.net/mcp streamable-http

In Claude Code: claude mcp add --transport http vibescan https://vibescan.bigfloppy.net/mcp

MCP settings (Claude Desktop, Cursor and other MCP clients)

{
  "mcpServers": {
    "vibescan": {
      "url": "https://vibescan.bigfloppy.net/mcp"
    }
  }
}

Live check

Electra Index connected to the hosted endpoint 3h ago

ONLINE vibescan answered an MCP connection on 29 Oct 2026 and introduced itself as vibescan 1.0.0 (MCP protocol 2025-06-18).

1 tool offered to AI assistants

  • scan_repo · Scan a public GitHub repo (owner/repo or URL) for leaked secrets, .env files, eval, SQLi, CORS and other risky patterns common in AI-written code.

What "online" means: the server answered an MCP connection at the time of the check. It is not a guarantee of security, quality or continuous uptime. How we test: we open an MCP session and ask for the tool list, as an AI assistant would. We never run a tool and never send a key. Checked every few days. Method

Is this your server? Monitoring Pro: a check every 30 minutes and an email within the hour when it stops answering. Launch offer: $39.99 once, for life.

Tasks it helps with

Share of each task's required capabilities it covers
Scan code for vulnerabilities
Security Scanning
50%
Review pull requests
Security Scanning
50%

Similar tools

Listed for the same task: scan code for vulnerabilities
  • diffpilotREMOTELOCAL
    MCP server for PR code review, commit messages, changelogs, and secret detection
  • MCP Code Review ServerREMOTELOCAL
    Code review as an MCP server — structured reviews with OWASP security scanning
  • StrixREMOTELOCAL
    AI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
  • OwaspREMOTELOCAL
    OWASP MCP — keyless
  • MalwarebazaarREMOTELOCAL
    MalwareBazaar MCP — abuse.ch malware sample database (free, key required)
  • DraugrREMOTELOCAL
    Security scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk

Ready-made AI agents

An MCP server is a connector you add to your own assistant. These are finished products that do the same job for you:
All AI agents to scan code for vulnerabilities, ranked →

Facts & evidence

Each fact shows where it was seen and when.
FactValueEvidenceSourceLast confirmed
Hosted endpointhttps://vibescan.bigfloppy.net/mcpDECLAREDSRC-001 Official MCP Registry3h ago
Local install (package)noDECLAREDSRC-001 Official MCP Registry3h ago
Remote access (hosted)yesDECLAREDSRC-001 Official MCP Registry3h ago
Repositoryhttps://github.com/wminno/vibescanDECLAREDSRC-001 Official MCP Registry3h ago
Registry statusactiveDECLAREDSRC-001 Official MCP Registry3h ago
Version1.0.0DECLAREDSRC-001 Official MCP Registry3h ago
MCP serveryesDECLAREDSRC-001 Official MCP Registry3h ago

Change history

  • NEW29 Oct 2026
    first seen in the index

Is this page accurate?

Flag it and our robot re-checks the official source. Reports never change a score.

Do you run vibescan? Know when it stops answering

For publishers · optional

Its hosted endpoint can be monitored. Monitoring Pro connects every 30 minutes like an AI assistant, emails you within the hour when it stops answering, keeps a 90-day availability history and adds your answer rate to your badge.

Monitor vibescanLaunch offer $39.99 once, for life instead of $9.99/month · All plans

Monitoring never changes a score or a rank.

Are you the publisher of vibescan?

Free · show your listing

An independent listing builds trust with your buyers. Announce it, and add the badge to your website or README.

Announce it on LinkedInListed on Electra Index
<a href="https://electraindex.com/mcp/vibescan?utm_source=badge&utm_medium=share&utm_campaign=listing"><img src="https://electraindex.com/api/badge/vibescan" alt="Listed on Electra Index"></a>

Questions about vibescan

How do I connect vibescan?

Use the hosted endpoint https://vibescan.bigfloppy.net/mcp in your assistant's MCP settings. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.

What tools does vibescan offer?

When Electra Index connected on 29 Oct 2026, it listed 1 tool: scan_repo. The full list is in "Live check" above.

Is vibescan online?

Yes. Its hosted endpoint answered an MCP connection from Electra Index 3h ago.

What can I use vibescan for?

Based on its description, it is most relevant to: scan code for vulnerabilities, review pull requests.