
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
@vibecheckdev/vibecheck-mcp
Advanced tools
VibeCheck — AI Code Firewall | MCP Server for hallucination prevention in AI-assisted development
VibeCheck — AI Code Firewall
MCP Server for hallucination prevention in AI-assisted development
The VibeCheck MCP Server provides AI agents (like Claude, Cursor, Windsurf) with tools to prevent hallucinations in generated code. It integrates directly with MCP-compatible clients to:
# npm
npm install -g @vibecheck/mcp-server
# pnpm
pnpm add -g @vibecheck/mcp-server
# yarn
yarn global add @vibecheck/mcp-server
Add to your Cursor MCP settings (~/.cursor/mcp.json):
{
"mcpServers": {
"vibecheck": {
"command": "vibecheck-mcp"
}
}
}
Add to your Claude MCP settings (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"vibecheck": {
"command": "vibecheck-mcp"
}
}
}
# Start with stdio (default, for Cursor/Claude)
vibecheck-mcp
# Start HTTP server (for custom integrations)
vibecheck-mcp --http --port 3001
# Start WebSocket server (for real-time connections)
vibecheck-mcp --websocket --port 3002
# Show help
vibecheck-mcp --help
| Tool | Description |
|---|---|
truthpack_generate | Scan codebase and generate truthpack (routes, env, auth, contracts) |
truthpack_query | Query truthpack for specific information |
truthpack_validate | Validate truthpack against current codebase |
truthpack_routes | Get API routes with filtering |
truthpack_env | Get environment variables (required/optional) |
| Tool | Description |
|---|---|
firewall_evaluate | Full evaluation with evidence resolution |
firewall_quick_check | Fast hallucination check |
firewall_get_tier | Get confidence tier for a rule |
firewall_should_block | Check if tier should block |
firewall_tier_stats | Get statistics by confidence tier |
firewall_set_mode | Set mode (observe/enforce/lockdown) |
| Tool | Description |
|---|---|
context_gather | Gather AI context for a coding task |
context_file | Get context for a specific file |
context_smart | Smart context based on task description |
| Tool | Description |
|---|---|
validate_code | Validate generated code against truthpack |
validate_imports | Check import statements |
validate_api_calls | Verify API endpoint usage |
| Tool | Description |
|---|---|
intent_set | Set current coding intent/spec |
intent_get | Get active intent |
intent_clear | Clear current intent |
intent_validate | Validate code against intent |
| Tool | Description |
|---|---|
hook_pre_generation | Pre-generation checks with enhanced context |
hook_post_generation | Validate generated code for issues |
hook_file_write | Validate file write operations |
| Tool | Description |
|---|---|
lock_check | Check if file/folder is locked |
lock_list | Get all locked files/folders |
| Tool | Description |
|---|---|
forge_generate | Generate AI context rules for .cursor/rules |
forge_scan | Scan codebase for rule generation |
| Tool | Description |
|---|---|
docguard_check | Check documentation quality |
docguard_validate | Validate docs against code |
| Tool | Description |
|---|---|
translate_nl_to_isl | Convert natural language to ISL spec |
translate_isl_to_checks | Convert ISL to validation checks |
The firewall uses three confidence tiers:
| Tier | Confidence | Behavior |
|---|---|---|
hard_block | High | Ghost routes, missing env vars → Always blocks |
soft_block | Medium | Dynamic routes, patterns → Blocks in enforce mode |
warn | Low | Style issues, best practices → Warning only |
| Variable | Description | Default |
|---|---|---|
VIBECHECK_MODE | Mode (local/cloud/hybrid) | local |
VIBECHECK_TRANSPORT | Transport (stdio/http/websocket) | stdio |
VIBECHECK_PORT | Port for HTTP/WS | 3001 |
VIBECHECK_HOST | Host for HTTP/WS | localhost |
VIBECHECK_PROJECT_ROOT | Project root path | process.cwd() |
Once the MCP server is connected, AI agents can use tools like:
User: Add a new API endpoint for user profiles
AI (using truthpack_routes): Let me check existing routes...
Found 15 routes. Similar patterns: GET /api/v1/users/:id
AI (using hook_pre_generation): Running pre-generation checks...
✓ No conflicts with existing routes
✓ Auth patterns identified
AI: I'll create GET /api/v1/users/:id/profile following your existing patterns...
# Clone the monorepo
git clone https://github.com/vibecheckai/vibecheck.git
cd vibecheck
# Install dependencies
pnpm install
# Build MCP server
pnpm --filter @vibecheck/mcp-server build
# Run tests
pnpm --filter @vibecheck/mcp-server test
# Start in dev mode
pnpm --filter @vibecheck/mcp-server dev
MIT © VibeCheck Team
FAQs
VibeCheck — AI Code Firewall | MCP Server for hallucination prevention in AI-assisted development
We found that @vibecheckdev/vibecheck-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.