VibeCheck MCP Server

AI-powered security audit with real-time vulnerability database lookups.

Analyzes code for:

• Authentication and authorization issues

• API security vulnerabilities

• Database security rules

• Exposed secrets and environment variables

• Dependency vulnerabilities (via npm audit)

• Data flow and injection vulnerabilities

Returns findings with:

• Severity ratings (critical, high, medium, low)

• AI reasoning and confidence scores

• CWE and OWASP references

• Remediation steps

Run npm audit to check dependencies for known vulnerabilities.

Uses the GitHub Advisory Database (same as npm audit). Returns known CVEs, severity levels, and patched versions.

Requirements:

• npm must be installed

• Directory must contain package-lock.json (or yarn.lock/pnpm-lock.yaml)