MCP enabled

VibeSecure MCP

Bring VibeSecure into your AI coding workflow. Use Local MCP for files on your machine, or Hosted MCP for authenticated repository and live-URL scans.

Manage API keys

Local MCP

No API key required

Runs from your machine over stdio and scans the current project directly. Nothing is cloned from GitHub for local workspace scans.

{
  "mcpServers": {
    "vibesecure": {
      "command": "python",
      "args": ["/absolute/path/to/VibeSecure/mcp_server.py"]
    }
  }
}

Hosted MCP

API-key authenticated

The hosted endpoint uses a VibeSecure API key. Create a key in Settings, then add it as the X-API-Key header in your MCP client.

Endpoint

https://fixloop-api.onrender.com/mcp

{
  "mcpServers": {
    "vibesecure": {
      "type": "http",
      "url": "https://fixloop-api.onrender.com/mcp",
      "headers": {
        "X-API-Key": "vsk_your_key_here"
      }
    }
  }
}

Create / revoke API keys

What the AI agent can do

scan_repository

Scan a public Git repository

scan_live_url

Run passive live checks

get_scan_status

Check progress

get_findings

Read structured findings and fixes

rescan

Verify fixes after code changes

Your API key is never shown again after creation.