vibecheck-mcp-server 4.1.0 → 4.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -1,211 +1,284 @@
1
- # vibecheck MCP Server v4.0
1
+ # @vibecheck/mcp-server
2
2
 
3
- Professional Model Context Protocol server for vibecheck AI.
3
+ <p align="center">
4
+ <strong>VibeCheck — AI Code Firewall</strong><br/>
5
+ MCP Server for hallucination prevention in AI-assisted development
6
+ </p>
4
7
 
5
- > "Stop shipping pretend features."
8
+ <p align="center">
9
+ <a href="https://www.npmjs.com/package/@vibecheck/mcp-server"><img alt="npm version" src="https://img.shields.io/npm/v/@vibecheck/mcp-server?style=flat-square&color=CB3837&logo=npm" /></a>
10
+ <a href="LICENSE"><img alt="License" src="https://img.shields.io/badge/license-MIT-blue?style=flat-square" /></a>
11
+ </p>
12
+
13
+ ---
14
+
15
+ ## What is this?
16
+
17
+ The VibeCheck MCP Server provides AI agents (like Claude, Cursor, Windsurf) with tools to prevent hallucinations in generated code. It integrates directly with MCP-compatible clients to:
18
+
19
+ - **Block ghost routes** - Prevent AI from referencing API endpoints that don't exist
20
+ - **Validate environment variables** - Ensure env vars exist before they're used
21
+ - **Enforce file locks** - Protect critical files from AI modification
22
+ - **Generate truthpacks** - Create a source of truth from your codebase
23
+ - **Provide smart context** - Give AI accurate information about your project
24
+
25
+ ---
6
26
 
7
27
  ## Installation
8
28
 
9
29
  ```bash
10
- npm install -g @vibecheckai/cli
30
+ # npm
31
+ npm install -g @vibecheck/mcp-server
32
+
33
+ # pnpm
34
+ pnpm add -g @vibecheck/mcp-server
35
+
36
+ # yarn
37
+ yarn global add @vibecheck/mcp-server
11
38
  ```
12
39
 
13
- ## Configuration
40
+ ---
41
+
42
+ ## Quick Start
43
+
44
+ ### Cursor Integration
14
45
 
15
- Add to your AI IDE's MCP configuration:
46
+ Add to your Cursor MCP settings (`~/.cursor/mcp.json`):
16
47
 
17
48
  ```json
18
49
  {
19
50
  "mcpServers": {
20
51
  "vibecheck": {
21
- "command": "npx",
22
- "args": ["@vibecheckai/cli", "mcp"]
52
+ "command": "vibecheck-mcp"
23
53
  }
24
54
  }
25
55
  }
26
56
  ```
27
57
 
28
- See [MCP-QUICK-START.md](../docs/MCP-QUICK-START.md) for editor-specific setup.
58
+ ### Claude Desktop
29
59
 
30
- ## Development
60
+ Add to your Claude MCP settings (`~/Library/Application Support/Claude/claude_desktop_config.json`):
61
+
62
+ ```json
63
+ {
64
+ "mcpServers": {
65
+ "vibecheck": {
66
+ "command": "vibecheck-mcp"
67
+ }
68
+ }
69
+ }
70
+ ```
71
+
72
+ ### CLI Usage
31
73
 
32
74
  ```bash
33
- cd mcp-server
34
- npm install
35
- npm start
75
+ # Start with stdio (default, for Cursor/Claude)
76
+ vibecheck-mcp
77
+
78
+ # Start HTTP server (for custom integrations)
79
+ vibecheck-mcp --http --port 3001
80
+
81
+ # Start WebSocket server (for real-time connections)
82
+ vibecheck-mcp --websocket --port 3002
83
+
84
+ # Show help
85
+ vibecheck-mcp --help
36
86
  ```
37
87
 
38
88
  ---
39
89
 
40
- ## Core MCP Tools (v4.0)
90
+ ## Available Tools
41
91
 
42
- These are the primary tools available via MCP:
92
+ ### Truthpack Tools
43
93
 
44
94
  | Tool | Description |
45
95
  |------|-------------|
46
- | `vibecheck_audit` | 🔍 Static analysis - routes, secrets, contracts |
47
- | `vibecheck_ship` | 🚀 Verdict engine - SHIP / WARN / BLOCK |
48
- | `vibecheck_prove` | 🔬 Full proof loop: audit → reality → ship |
49
- | `vibecheck_fix` | 🛠️ Mission-based auto-fix with safety gates |
50
- | `vibecheck_reality` | 🧪 Browser-based runtime verification |
51
- | `vibecheck_forge` | 📝 Generate AI IDE rules (.cursorrules, .windsurf) |
52
- | `vibecheck_shield` | 🛡️ Agent Firewall controls |
53
- | `vibecheck_doctor` | 🏥 Environment health check |
54
- | `vibecheck_checkpoint` | 📍 Snapshot & restore, baseline comparison |
55
- | `vibecheck_polish` | ✨ Production polish - final cleanup |
96
+ | `truthpack_generate` | Scan codebase and generate truthpack (routes, env, auth, contracts) |
97
+ | `truthpack_query` | Query truthpack for specific information |
98
+ | `truthpack_validate` | Validate truthpack against current codebase |
99
+ | `truthpack_routes` | Get API routes with filtering |
100
+ | `truthpack_env` | Get environment variables (required/optional) |
56
101
 
57
- ---
102
+ ### Firewall Tools
58
103
 
59
- ## Shield (Agent Firewall) Tools
104
+ | Tool | Description |
105
+ |------|-------------|
106
+ | `firewall_evaluate` | Full evaluation with evidence resolution |
107
+ | `firewall_quick_check` | Fast hallucination check |
108
+ | `firewall_get_tier` | Get confidence tier for a rule |
109
+ | `firewall_should_block` | Check if tier should block |
110
+ | `firewall_tier_stats` | Get statistics by confidence tier |
111
+ | `firewall_set_mode` | Set mode (observe/enforce/lockdown) |
60
112
 
61
- Control the Agent Firewall via MCP:
113
+ ### Context Tools
62
114
 
63
115
  | Tool | Description |
64
116
  |------|-------------|
65
- | `vibecheck_shield_status` | Get firewall status |
66
- | `vibecheck_shield_enforce` | Enable enforcement mode |
67
- | `vibecheck_shield_observe` | Enable observe-only mode |
68
- | `vibecheck_shield_lock` | Hard lockdown (all rules enforced) |
69
- | `vibecheck_shield_unlock` | Release lock |
70
- | `vibecheck_shield_verify` | Verify claims/prompts |
117
+ | `context_gather` | Gather AI context for a coding task |
118
+ | `context_file` | Get context for a specific file |
119
+ | `context_smart` | Smart context based on task description |
71
120
 
72
- ---
121
+ ### Validation Tools
73
122
 
74
- ## Intent & Approval Tools
123
+ | Tool | Description |
124
+ |------|-------------|
125
+ | `validate_code` | Validate generated code against truthpack |
126
+ | `validate_imports` | Check import statements |
127
+ | `validate_api_calls` | Verify API endpoint usage |
75
128
 
76
- For declaring AI intent and approving changes:
129
+ ### Intent (ISL) Tools
77
130
 
78
131
  | Tool | Description |
79
132
  |------|-------------|
80
- | `vibecheck_intent_start` | 🎯 Declare intent before making changes |
81
- | `vibecheck_intent_check` | Check if changes align with stated intent |
82
- | `vibecheck_intent_complete` | Complete step and generate proof artifact |
83
- | `vibecheck_approve` | 👍 Review and approve session changes |
133
+ | `intent_set` | Set current coding intent/spec |
134
+ | `intent_get` | Get active intent |
135
+ | `intent_clear` | Clear current intent |
136
+ | `intent_validate` | Validate code against intent |
84
137
 
85
- ---
138
+ ### Hook Tools
139
+
140
+ | Tool | Description |
141
+ |------|-------------|
142
+ | `hook_pre_generation` | Pre-generation checks with enhanced context |
143
+ | `hook_post_generation` | Validate generated code for issues |
144
+ | `hook_file_write` | Validate file write operations |
145
+
146
+ ### Lock Tools
86
147
 
87
- ## Checkpoint Tools
148
+ | Tool | Description |
149
+ |------|-------------|
150
+ | `lock_check` | Check if file/folder is locked |
151
+ | `lock_list` | Get all locked files/folders |
88
152
 
89
- Pre-write validation and time machine:
153
+ ### Forge Tools
90
154
 
91
155
  | Tool | Description |
92
156
  |------|-------------|
93
- | `vibecheck_checkpoint` | 🛡️ Validate code before writing - blocks on issues |
94
- | `vibecheck_checkpoint_status` | 📊 Get current checkpoint status |
95
- | `vibecheck_checkpoint_restore` | ⏪ Restore to a previous checkpoint |
96
- | `vibecheck_checkpoint_compare` | 📈 Compare baseline vs current |
157
+ | `forge_generate` | Generate AI context rules for .cursor/rules |
158
+ | `forge_scan` | Scan codebase for rule generation |
97
159
 
98
- ---
160
+ ### DocGuard Tools
99
161
 
100
- ## Report & Artifact Tools
162
+ | Tool | Description |
163
+ |------|-------------|
164
+ | `docguard_check` | Check documentation quality |
165
+ | `docguard_validate` | Validate docs against code |
101
166
 
102
- Generate outputs and evidence:
167
+ ### Translator Tools
103
168
 
104
169
  | Tool | Description |
105
170
  |------|-------------|
106
- | `vibecheck_packs_evidence` | 📦 Bundle videos, traces, screenshots |
107
- | `vibecheck_packs_report` | 📄 Generate HTML/MD/SARIF reports |
108
- | `vibecheck_packs_graph` | 📊 Proof graph visualization |
109
- | `vibecheck_seal` | 🏆 Generate ship badge and attestation |
171
+ | `translate_nl_to_isl` | Convert natural language to ISL spec |
172
+ | `translate_isl_to_checks` | Convert ISL to validation checks |
110
173
 
111
174
  ---
112
175
 
113
- ## Example Usage
176
+ ## Confidence Tiers
114
177
 
115
- ### Run Analysis
178
+ The firewall uses three confidence tiers:
116
179
 
117
- ```json
118
- {
119
- "tool": "vibecheck_audit",
120
- "arguments": {
121
- "path": ".",
122
- "profile": "full"
123
- }
124
- }
125
- ```
180
+ | Tier | Confidence | Behavior |
181
+ |------|------------|----------|
182
+ | `hard_block` | High | Ghost routes, missing env vars → **Always blocks** |
183
+ | `soft_block` | Medium | Dynamic routes, patterns → **Blocks in enforce mode** |
184
+ | `warn` | Low | Style issues, best practices → **Warning only** |
126
185
 
127
- ### Get Ship Verdict
186
+ ---
128
187
 
129
- ```json
130
- {
131
- "tool": "vibecheck_ship",
132
- "arguments": {
133
- "path": "."
134
- }
135
- }
136
- ```
188
+ ## Environment Variables
137
189
 
138
- ### Full Proof Loop
190
+ | Variable | Description | Default |
191
+ |----------|-------------|---------|
192
+ | `VIBECHECK_MODE` | Mode (local/cloud/hybrid) | `local` |
193
+ | `VIBECHECK_TRANSPORT` | Transport (stdio/http/websocket) | `stdio` |
194
+ | `VIBECHECK_PORT` | Port for HTTP/WS | `3001` |
195
+ | `VIBECHECK_HOST` | Host for HTTP/WS | `localhost` |
196
+ | `VIBECHECK_PROJECT_ROOT` | Project root path | `process.cwd()` |
139
197
 
140
- ```json
141
- {
142
- "tool": "vibecheck_prove",
143
- "arguments": {
144
- "url": "http://localhost:3000",
145
- "maxFixRounds": 3
146
- }
147
- }
148
- ```
198
+ ---
149
199
 
150
- ### Runtime Verification
200
+ ## Example Usage
201
+
202
+ Once the MCP server is connected, AI agents can use tools like:
151
203
 
152
- ```json
153
- {
154
- "tool": "vibecheck_reality",
155
- "arguments": {
156
- "url": "http://localhost:3000",
157
- "headed": false,
158
- "maxPages": 18,
159
- "maxDepth": 2
160
- }
161
- }
162
204
  ```
205
+ User: Add a new API endpoint for user profiles
163
206
 
164
- ### AI-Powered Fixes
207
+ AI (using truthpack_routes): Let me check existing routes...
208
+ Found 15 routes. Similar patterns: GET /api/v1/users/:id
165
209
 
166
- ```json
167
- {
168
- "tool": "vibecheck_fix",
169
- "arguments": {
170
- "apply": true,
171
- "autopilot": false,
172
- "maxMissions": 8
173
- }
174
- }
210
+ AI (using hook_pre_generation): Running pre-generation checks...
211
+ ✓ No conflicts with existing routes
212
+ Auth patterns identified
213
+
214
+ AI: I'll create GET /api/v1/users/:id/profile following your existing patterns...
175
215
  ```
176
216
 
177
- ### Generate IDE Rules
217
+ ---
178
218
 
179
- ```json
180
- {
181
- "tool": "vibecheck_forge",
182
- "arguments": {
183
- "format": "cursor",
184
- "enhanced": true
185
- }
186
- }
219
+ ## Development
220
+
221
+ ```bash
222
+ # Clone the monorepo
223
+ git clone https://github.com/vibecheckai/vibecheck.git
224
+ cd vibecheck
225
+
226
+ # Install dependencies
227
+ pnpm install
228
+
229
+ # Build MCP server
230
+ pnpm --filter @vibecheck/mcp-server build
231
+
232
+ # Run tests
233
+ pnpm --filter @vibecheck/mcp-server test
234
+
235
+ # Start in dev mode
236
+ pnpm --filter @vibecheck/mcp-server dev
187
237
  ```
188
238
 
189
239
  ---
190
240
 
191
- ## Resources
241
+ ## Related Packages
192
242
 
193
- - `vibecheck://rules` - Generated AI rules
194
- - `vibecheck://truthpack` - Repo reality index
195
- - `vibecheck://status` - Server status and health
243
+ - [vibecheck-ai](https://www.npmjs.com/package/vibecheck-ai) - CLI tool
244
+ - [VibeCheck VS Code Extension](https://marketplace.visualstudio.com/items?itemName=Vibecheck-AI.vibecheck-ai) - VS Code integration
196
245
 
197
246
  ---
198
247
 
199
- ## Documentation
248
+ ## Changelog
249
+
250
+ ### v1.2.0
251
+ - **Enhanced Tool Set** - All MCP tools verified and tested
252
+ - **Improved Firewall** - Better confidence tier evaluation
253
+ - **Context Tools** - Smarter context gathering for AI agents
254
+ - **Performance** - Faster truthpack generation and validation
255
+ - **Stability** - Various bug fixes and improvements
200
256
 
201
- - [MCP Quick Start](../docs/MCP-QUICK-START.md)
202
- - [Full CLI Documentation](../docs/CLI-REFERENCE.md)
203
- - [Agent Firewall Spec](../docs/AGENT_FIREWALL_V2_SPEC.md)
257
+ ### v1.1.1
258
+ - Bug fixes and stability improvements
259
+
260
+ ### v1.1.0
261
+ - Added confidence tiers (hard_block, soft_block, warn)
262
+ - Added tier statistics tool
263
+ - Improved firewall evaluation
264
+ - Added DocGuard and Translator tools
265
+
266
+ ### v1.0.0
267
+ - Initial release
268
+ - Truthpack management tools
269
+ - Firewall evaluation
270
+ - Context gathering
271
+ - ISL (Intent Specification Language) support
204
272
 
205
273
  ---
206
274
 
207
- ## Privacy & Trust
275
+ ## License
276
+
277
+ MIT © VibeCheck Team
278
+
279
+ ---
208
280
 
209
- - Runs locally
210
- - Artifacts saved to `.vibecheck/`
211
- - No upload unless you explicitly export/share
281
+ <p align="center">
282
+ <a href="https://vibecheckai.dev">Website</a>
283
+ <a href="https://x.com/VibeCheck_AI">Twitter</a>
284
+ </p>