
Research
/Security News
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain Attack
Popular npm packages keyv and cacheable compromised.
vibelens-mcp
Advanced tools
VibeLens MCP tool for AI to visualize code changes with inline annotations in VS Code/Cursor
MCP server that provides the show_diff_explanation tool for visualizing code changes with AI annotations.
npx -y vibelens-mcp
Or install globally:
npm install -g vibelens-mcp
Add to your MCP client configuration:
{
"mcpServers": {
"vibelens": {
"command": "npx",
"args": ["-y", "vibelens-mcp"]
}
}
}
show_diff_explanationDisplays a git diff with AI-generated annotations in the VibeLens extension panel.
| Parameter | Type | Required | Description |
|---|---|---|---|
title | string | Yes | Title for the explanation |
diff | string | Yes | Raw git diff output (unified format) |
summary | string | No | High-level overview of changes |
annotations | array | No | Explanations for specific parts of the diff |
workspacePath | string | No | Absolute path to project folder (for workspace filtering) |
editor | string | No | "cursor" or "vscode" (default: "cursor") |
| Field | Type | Required | Description |
|---|---|---|---|
file | string | Yes | File path the annotation refers to |
line | number | No | Line number in the new file |
explanation | string | Yes | Your explanation of this change |
actions | array | No | Action buttons with prompts |
| Field | Type | Required | Description |
|---|---|---|---|
label | string | Yes | Button label (e.g., "Add tests") |
prompt | string | Yes | Full prompt to send to chat |
{
"title": "Add user authentication",
"summary": "Added JWT middleware and protected API routes.",
"diff": "diff --git a/src/auth.ts b/src/auth.ts\n...",
"workspacePath": "/Users/me/myproject",
"annotations": [
{
"file": "src/auth.ts",
"line": 15,
"explanation": "Extracts and validates JWT token from Authorization header",
"actions": [
{
"label": "Add refresh token",
"prompt": "Add refresh token support to this auth middleware"
}
]
}
]
}
vibelensThe MCP server also provides a prompt with instructions for explaining code changes. Reference it with @vibelens in your chat.
The prompt guides the AI to:
git diff if needed)show_diff_explanation with appropriate parametersThe MCP server writes to ~/.vibelens/pending.json and stores reviews in ~/.vibelens/vibelens.db. The companion VS Code/Cursor extension watches this data and displays the diff in a webview panel.
MCP Server Extension
│ │
│ writes to │ watches
│ ~/.vibelens/ │ ~/.vibelens/
│ pending.json │ pending.json
└────────────────────────────┘
# Build
npm run build
# The server runs via stdio
node dist/index.js
MIT
FAQs
VibeLens MCP tool for AI to visualize code changes with inline annotations in VS Code/Cursor
We found that vibelens-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.