🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

@vibecheckdev/vibecheck-mcp

Package Overview
Dependencies
Maintainers
1
Versions
2
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@vibecheckdev/vibecheck-mcp

VibeCheck — AI Code Firewall | MCP Server for hallucination prevention in AI-assisted development

latest
Source
npmnpm
Version
1.0.1
Version published
Maintainers
1
Created
Source

@vibecheck/mcp-server

VibeCheck — AI Code Firewall
MCP Server for hallucination prevention in AI-assisted development

npm version License

What is this?

The VibeCheck MCP Server provides AI agents (like Claude, Cursor, Windsurf) with tools to prevent hallucinations in generated code. It integrates directly with MCP-compatible clients to:

  • Block ghost routes - Prevent AI from referencing API endpoints that don't exist
  • Validate environment variables - Ensure env vars exist before they're used
  • Enforce file locks - Protect critical files from AI modification
  • Generate truthpacks - Create a source of truth from your codebase
  • Provide smart context - Give AI accurate information about your project

Installation

# npm
npm install -g @vibecheck/mcp-server

# pnpm
pnpm add -g @vibecheck/mcp-server

# yarn
yarn global add @vibecheck/mcp-server

Quick Start

Cursor Integration

Add to your Cursor MCP settings (~/.cursor/mcp.json):

{
  "mcpServers": {
    "vibecheck": {
      "command": "vibecheck-mcp"
    }
  }
}

Claude Desktop

Add to your Claude MCP settings (~/Library/Application Support/Claude/claude_desktop_config.json):

{
  "mcpServers": {
    "vibecheck": {
      "command": "vibecheck-mcp"
    }
  }
}

CLI Usage

# Start with stdio (default, for Cursor/Claude)
vibecheck-mcp

# Start HTTP server (for custom integrations)
vibecheck-mcp --http --port 3001

# Start WebSocket server (for real-time connections)
vibecheck-mcp --websocket --port 3002

# Show help
vibecheck-mcp --help

Available Tools

Truthpack Tools

ToolDescription
truthpack_generateScan codebase and generate truthpack (routes, env, auth, contracts)
truthpack_queryQuery truthpack for specific information
truthpack_validateValidate truthpack against current codebase
truthpack_routesGet API routes with filtering
truthpack_envGet environment variables (required/optional)

Firewall Tools

ToolDescription
firewall_evaluateFull evaluation with evidence resolution
firewall_quick_checkFast hallucination check
firewall_get_tierGet confidence tier for a rule
firewall_should_blockCheck if tier should block
firewall_tier_statsGet statistics by confidence tier
firewall_set_modeSet mode (observe/enforce/lockdown)

Context Tools

ToolDescription
context_gatherGather AI context for a coding task
context_fileGet context for a specific file
context_smartSmart context based on task description

Validation Tools

ToolDescription
validate_codeValidate generated code against truthpack
validate_importsCheck import statements
validate_api_callsVerify API endpoint usage

Intent (ISL) Tools

ToolDescription
intent_setSet current coding intent/spec
intent_getGet active intent
intent_clearClear current intent
intent_validateValidate code against intent

Hook Tools

ToolDescription
hook_pre_generationPre-generation checks with enhanced context
hook_post_generationValidate generated code for issues
hook_file_writeValidate file write operations

Lock Tools

ToolDescription
lock_checkCheck if file/folder is locked
lock_listGet all locked files/folders

Forge Tools

ToolDescription
forge_generateGenerate AI context rules for .cursor/rules
forge_scanScan codebase for rule generation

DocGuard Tools

ToolDescription
docguard_checkCheck documentation quality
docguard_validateValidate docs against code

Translator Tools

ToolDescription
translate_nl_to_islConvert natural language to ISL spec
translate_isl_to_checksConvert ISL to validation checks

Confidence Tiers

The firewall uses three confidence tiers:

TierConfidenceBehavior
hard_blockHighGhost routes, missing env vars → Always blocks
soft_blockMediumDynamic routes, patterns → Blocks in enforce mode
warnLowStyle issues, best practices → Warning only

Environment Variables

VariableDescriptionDefault
VIBECHECK_MODEMode (local/cloud/hybrid)local
VIBECHECK_TRANSPORTTransport (stdio/http/websocket)stdio
VIBECHECK_PORTPort for HTTP/WS3001
VIBECHECK_HOSTHost for HTTP/WSlocalhost
VIBECHECK_PROJECT_ROOTProject root pathprocess.cwd()

Example Usage

Once the MCP server is connected, AI agents can use tools like:

User: Add a new API endpoint for user profiles

AI (using truthpack_routes): Let me check existing routes...
   Found 15 routes. Similar patterns: GET /api/v1/users/:id

AI (using hook_pre_generation): Running pre-generation checks...
   ✓ No conflicts with existing routes
   ✓ Auth patterns identified

AI: I'll create GET /api/v1/users/:id/profile following your existing patterns...

Development

# Clone the monorepo
git clone https://github.com/vibecheckai/vibecheck.git
cd vibecheck

# Install dependencies
pnpm install

# Build MCP server
pnpm --filter @vibecheck/mcp-server build

# Run tests
pnpm --filter @vibecheck/mcp-server test

# Start in dev mode
pnpm --filter @vibecheck/mcp-server dev

Changelog

v1.2.0

  • Enhanced Tool Set - All MCP tools verified and tested
  • Improved Firewall - Better confidence tier evaluation
  • Context Tools - Smarter context gathering for AI agents
  • Performance - Faster truthpack generation and validation
  • Stability - Various bug fixes and improvements

v1.1.1

  • Bug fixes and stability improvements

v1.1.0

  • Added confidence tiers (hard_block, soft_block, warn)
  • Added tier statistics tool
  • Improved firewall evaluation
  • Added DocGuard and Translator tools

v1.0.0

  • Initial release
  • Truthpack management tools
  • Firewall evaluation
  • Context gathering
  • ISL (Intent Specification Language) support

License

MIT © VibeCheck Team

WebsiteTwitter

Keywords

vibecheck

FAQs

Package last updated on 24 Feb 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts