
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
vibe-coding-mcp
Advanced tools
MCP server for automatically collecting, summarizing, documenting, and publishing vibe coding sessions
MCP server that automatically collects, summarizes, documents, and publishes code and design decisions created during vibe coding sessions.
This MCP server provides 7 tools for managing vibe coding documentation:
| Tool | Description |
|---|---|
muse_collect_code_context | Collects code blocks and conversation summaries into structured context |
muse_summarize_design_decisions | Extracts key architectural and design decisions from conversation logs |
muse_generate_dev_document | Generates README, DESIGN, TUTORIAL, CHANGELOG, API, or ARCHITECTURE documents |
muse_normalize_for_platform | Converts Markdown documents for Notion, GitHub Wiki, or Obsidian |
muse_publish_document | Publishes generated documents to external platforms |
muse_create_session_log | Creates daily or session-based vibe coding session logs |
muse_analyze_code | AST-based code analysis with Mermaid diagram generation |
useAI: true parameterclaude mcp add vibe-coding-mcp npx vibe-coding-mcp
npm install -g vibe-coding-mcp
Add to claude_desktop_config.json:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"vibe-coding-mcp": {
"command": "npx",
"args": ["vibe-coding-mcp"]
}
}
}
# Anthropic API (optional, for AI-powered analysis)
ANTHROPIC_API_KEY=your_anthropic_api_key_here
# Notion API (optional)
NOTION_API_KEY=your_notion_api_key_here
NOTION_DATABASE_ID=your_database_id_here
# GitHub (optional, for Wiki publishing)
GITHUB_TOKEN=your_github_token_here
GITHUB_REPO=owner/repo
# Confluence (optional)
CONFLUENCE_BASE_URL=https://your-domain.atlassian.net
CONFLUENCE_USERNAME=your_email@example.com
CONFLUENCE_API_TOKEN=your_api_token_here
CONFLUENCE_SPACE_KEY=YOURSPACE
# Slack (optional, webhook URL passed via tool parameter)
SLACK_WEBHOOK_URL=https://hooks.slack.com/services/...
# Discord (optional, webhook URL passed via tool parameter)
DISCORD_WEBHOOK_URL=https://discord.com/api/webhooks/...
User: Collect the code we wrote today and create a README, then publish to Notion.
Claude: [Uses collect_code_context → generate_dev_document → normalize_for_platform → publish_document]
User: Summarize our design decisions and publish to GitHub Wiki.
Claude: [Uses summarize_design_decisions → generate_dev_document → normalize_for_platform → publish_document]
User: Create a session log for today's work.
Claude: [Uses collect_code_context → create_session_log]
src/
├── stdio.ts # MCP server entry point (stdio transport)
├── index.ts # HTTP/SSE server entry point
├── core/
│ ├── schemas.ts # Zod validation schemas
│ ├── errors.ts # Structured error classes
│ ├── cache.ts # LRU cache & memoization
│ ├── security.ts # Path traversal, SSRF, timeout utilities
│ ├── logger.ts # Structured JSON logging
│ └── config.ts # Platform configuration validation
├── tools/ # 7 MCP tools
├── platforms/ # Notion, GitHub Wiki, Obsidian, Confluence, Slack, Discord
├── types/ # TypeScript interfaces
└── utils/ # Markdown, AST, diagram utilities
# Watch mode
npm run dev
# Build
npm run build
# Start (HTTP/SSE mode)
npm start
# Start (stdio mode for Claude Desktop)
npm run stdio
# Run tests
npm test
# Run tests with coverage
npm run test:coverage
| Package | Purpose |
|---|---|
@modelcontextprotocol/sdk | MCP server SDK |
@notionhq/client | Notion API integration |
zod | Input validation |
typescript | TypeScript compiler |
MIT
FAQs
MCP server for automatically collecting, summarizing, documenting, and publishing vibe coding sessions
The npm package vibe-coding-mcp receives a total of 56 weekly downloads. As such, vibe-coding-mcp popularity was classified as not popular.
We found that vibe-coding-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.