Vibes-Coded Agent Security and Commerce Tools
io.github.doteyeso-ops/mcp-server-vibes-coded
About Vibes-Coded Agent Security and Commerce Tools
Vibes-Coded Agent Security and Commerce Tools is an MCP server published by the GitHub account doteyeso-ops. Agent supply-chain security, scanner consensus, x402 reliability, and commerce MCP tools.
It is hosted by the publisher at one address, so there is nothing to install: your AI client connects to it over the internet.
It asks for no keys or passwords.
Version 1.6.1 was published on 25 August 2026, and the source code is public, so you can read it before installing.
Written from the registry entry. 7 automated checks on the registry entry and the live tool descriptions: 4 pass, 0 warn, 0 fail, 3 info. How we check.
What it asks for
This server declares no environment variables, so it asks for no keys or settings.
Checks
| Check | Result | Detail |
|---|---|---|
| Source repository linked | Pass | https://github.com/doteyeso-ops/mcp-server-vibes-coded |
| Remote uses HTTPS | Pass | All remote endpoints use https:// |
| Secrets requested | Info | Asks for no secrets |
| Namespace ownership | Info | Name verified via GitHub account doteyeso-ops |
| Registry text aimed at the AI | Pass | Description and settings contain no hidden characters or instructions to the AI |
| Tool descriptions read | Info | Lists 33 tools: vc_web_search, vc_page_markdown, vc_json_repair, vc_agent_proof, vc_lease_issue, vc_lease_consume, vc_lease_revoke, vc_lease_status, vc_agent_state_guard, vc_idempotency_guard, vc_drift_guard, vc_retry_storm_guard, … |
| Hidden instructions in tools | Pass | Read every tool description and the server instructions: no hidden characters or instructions to the AI |
Popularity & health: 53 / 100
Worked out from public numbers and our own checks, not from user reviews or ratings. It says how used and how looked-after a server is, not whether it is safe.
0 forks, 1 merged pull requests. Sources: GitHub, npm, PyPI (pypistats.org) and Hacker News (Algolia), fetched 2026-10-31.
What people say
No Hacker News threads link to its source code.
Look further: search Reddit, search Hacker News, read its GitHub issues. These are not reviews we checked.
Facts
| Registry name | io.github.doteyeso-ops/mcp-server-vibes-coded |
|---|---|
| Publisher | GitHub account doteyeso-ops |
| How the name is verified | Name verified via GitHub account doteyeso-ops. The registry ties the name prefix to that account or domain; it does not check the code. |
| Type | Remote: hosted at a URL, nothing to install |
| Remote endpoints | streamable-http https://vibes-coded-mcp-production.up.railway.app/mcp |
| Version | 1.6.1 |
| Published | |
| Last updated | |
| Source repository | https://github.com/doteyeso-ops/mcp-server-vibes-coded |
| Website | https://vibes-coded.com |
| Category | Security (assigned by keyword rule, not by hand) |
Related servers in Security
- prodlint7/7Production readiness for vibe-coded apps. 52 checks for security,…
- AIShield Security Scanner7/7Scans MCP servers for tool poisoning, prompt injection and supply…
- TridentChain Security7/7Local supply-chain CVE scanner via OSV/NVD. Scans deps and IDE…
- security-suite7/7Every GuardBee MCP security tool in one server: OWASP MCP Top 10,…
- MCP Security Guard6/7Audit MCP servers for tool poisoning, rug pulls and supply-chain…
- agent-toolkit7/7Pay-per-call developer utilities and npm supply-chain security…