Vibes-Coded Agent Security and Commerce Tools MCP Server

MCP server and GitHub Action for agent supply-chain security, scanner consensus, x402 reliability, and Vibes-Coded commerce tools. Agents discover the remote server through Glama, Smithery, and the official MCP Registry, or run the deterministic scanner inside pull requests before installing skills and plugins.

Teams that work with agent skills, x402 and fastmcp and want a hosted endpoint instead of running a local process. The project is written in Python.

VERIFIED ACTIVE

LAST COMMIT 2026-09-08 · ★ 3 · #182 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18

MIT · Python servers · how we verify → /methodology

01 · Install Vibes-Coded Agent Security and Commerce Tools

Claude Code

claude mcp add doteyeso-ops-mcp-server-vibes-coded --transport http https://vibes-coded-mcp-production.up.railway.app/mcp

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "doteyeso-ops-mcp-server-vibes-coded": {
      "url": "https://vibes-coded-mcp-production.up.railway.app/mcp"
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

https://vibes-coded-mcp-production.up.railway.app/mcp

transport: streamable-http

endpoint alive - responded to MCP initialize · probed 2026-09-18

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as remote - your agent's requests go to vibes-coded-mcp-production.up.railway.app

endpoint auth accepted our unauthenticated MCP initialize - no credentials needed to connect

license MIT - declared in the repository

registry namespace io.github.doteyeso-ops is GitHub-verified and matches the repo owner

03 · What Vibes-Coded Agent Security and Commerce Tools can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v1.6.1 · 2026-08-25

New acquisition and security surface for agent builders. · reusable GitHub Action: uses: doteyeso-ops/mcp-server-vibes-coded@v1.6.1 · local recursive scans for skills, MCP plugins, manifests, installers, and source…

v1.6.0 · 2026-08-25

Production release for agent-security distribution. · 26 live MCP tools · deterministic skill/plugin supply-chain risk scanner · multi-scanner consensus and conflict reconciliation · direct marketplace POST routes with…

v1.0.5 · 2026-07-29

mcp 2.0.0 broke FastMCP imports in CI/OCI. Pin mcp>=1.26,<2. Curated TDQS tools unchanged from 1.0.4.

04 · Who maintains Vibes-Coded Agent Security and Commerce Tools

Vibes-Coded Agent Security and Commerce Tools is maintained by doteyeso-ops. It's the only MCP server we track from this author; the repo dates to Jul 2026.

05 · Facts

repository: github.com/doteyeso-ops/mcp-server-vibes-coded
website: https://vibes-coded.com/
category: security - ranked #182 of 204 actively-maintained security servers as of 2026-09-18.
release cadence: 4 releases in the last 90 days (latest 2026-08-25)
registry: io.github.doteyeso-ops/mcp-server-vibes-coded (active, first published 2026-07-21 · 6 versions)

06 · Vibes-Coded Agent Security and Commerce Tools FAQ

What is Vibes-Coded Agent Security and Commerce Tools?

Is Vibes-Coded Agent Security and Commerce Tools still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-08 and it shipped 4 releases in the last 90 days. We re-verify nightly.

How do I install Vibes-Coded Agent Security and Commerce Tools?

Run `claude mcp add doteyeso-ops-mcp-server-vibes- --transport http https://vibes-coded-mcp-production.up.railway.app/mcp`. You can also paste the ready-made client config above.

Does Vibes-Coded Agent Security and Commerce Tools require authentication?

No - the endpoint accepted our unauthenticated MCP initialize when probed on 2026-09-18; you can connect without credentials.

07 · Alternatives to Vibes-Coded Agent Security and Commerce Tools

Alternatives to Vibes-Coded Agent Security and Commerce Tools

Maintained security servers if Vibes-Coded Agent Security and Commerce Tools isn't the fit.

Pairs well with

Servers that cover what Vibes-Coded Agent Security and Commerce Tools doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Megalinter · Draugr · DSers Official MCP Server · ZAP Server · Toolmesh

More Python MCP servers · Mitos · Livepilot · fcp-MCP - Final Cut Pro MCP Server · Server 12306 · Immich Photo Manager · see all