vibecheck-mcp-server 4.1.0 → 4.3.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +200 -127
- package/dist/index.js +98517 -0
- package/dist/index.js.map +1 -0
- package/package.json +54 -40
- package/agent-checkpoint.js +0 -364
- package/agent-firewall-interceptor.js +0 -500
- package/architect-tools.js +0 -707
- package/audit-mcp.js +0 -206
- package/authority-tools.js +0 -569
- package/codebase-architect-tools.js +0 -838
- package/consolidated-tools.js +0 -1170
- package/deprecation-middleware.js +0 -282
- package/hygiene-tools.js +0 -428
- package/index-v1.js +0 -698
- package/index.js +0 -2940
- package/intelligence-tools.js +0 -664
- package/intent-drift-tools.js +0 -873
- package/intent-firewall-interceptor.js +0 -529
- package/logger.js +0 -173
- package/mdc-generator.js +0 -298
- package/premium-tools.js +0 -1275
- package/proof-tools.js +0 -571
- package/test-mcp.js +0 -108
- package/test-tools.js +0 -36
- package/tier-auth.js +0 -767
- package/tools-v3.js +0 -1004
- package/truth-context.js +0 -622
- package/truth-firewall-tools.js +0 -2183
- package/vibecheck-2.0-tools.js +0 -761
- package/vibecheck-tools.js +0 -1075
package/README.md
CHANGED
|
@@ -1,211 +1,284 @@
|
|
|
1
|
-
# vibecheck
|
|
1
|
+
# @vibecheck/mcp-server
|
|
2
2
|
|
|
3
|
-
|
|
3
|
+
<p align="center">
|
|
4
|
+
<strong>VibeCheck — AI Code Firewall</strong><br/>
|
|
5
|
+
MCP Server for hallucination prevention in AI-assisted development
|
|
6
|
+
</p>
|
|
4
7
|
|
|
5
|
-
|
|
8
|
+
<p align="center">
|
|
9
|
+
<a href="https://www.npmjs.com/package/@vibecheck/mcp-server"><img alt="npm version" src="https://img.shields.io/npm/v/@vibecheck/mcp-server?style=flat-square&color=CB3837&logo=npm" /></a>
|
|
10
|
+
<a href="LICENSE"><img alt="License" src="https://img.shields.io/badge/license-MIT-blue?style=flat-square" /></a>
|
|
11
|
+
</p>
|
|
12
|
+
|
|
13
|
+
---
|
|
14
|
+
|
|
15
|
+
## What is this?
|
|
16
|
+
|
|
17
|
+
The VibeCheck MCP Server provides AI agents (like Claude, Cursor, Windsurf) with tools to prevent hallucinations in generated code. It integrates directly with MCP-compatible clients to:
|
|
18
|
+
|
|
19
|
+
- **Block ghost routes** - Prevent AI from referencing API endpoints that don't exist
|
|
20
|
+
- **Validate environment variables** - Ensure env vars exist before they're used
|
|
21
|
+
- **Enforce file locks** - Protect critical files from AI modification
|
|
22
|
+
- **Generate truthpacks** - Create a source of truth from your codebase
|
|
23
|
+
- **Provide smart context** - Give AI accurate information about your project
|
|
24
|
+
|
|
25
|
+
---
|
|
6
26
|
|
|
7
27
|
## Installation
|
|
8
28
|
|
|
9
29
|
```bash
|
|
10
|
-
npm
|
|
30
|
+
# npm
|
|
31
|
+
npm install -g @vibecheck/mcp-server
|
|
32
|
+
|
|
33
|
+
# pnpm
|
|
34
|
+
pnpm add -g @vibecheck/mcp-server
|
|
35
|
+
|
|
36
|
+
# yarn
|
|
37
|
+
yarn global add @vibecheck/mcp-server
|
|
11
38
|
```
|
|
12
39
|
|
|
13
|
-
|
|
40
|
+
---
|
|
41
|
+
|
|
42
|
+
## Quick Start
|
|
43
|
+
|
|
44
|
+
### Cursor Integration
|
|
14
45
|
|
|
15
|
-
Add to your
|
|
46
|
+
Add to your Cursor MCP settings (`~/.cursor/mcp.json`):
|
|
16
47
|
|
|
17
48
|
```json
|
|
18
49
|
{
|
|
19
50
|
"mcpServers": {
|
|
20
51
|
"vibecheck": {
|
|
21
|
-
"command": "
|
|
22
|
-
"args": ["@vibecheckai/cli", "mcp"]
|
|
52
|
+
"command": "vibecheck-mcp"
|
|
23
53
|
}
|
|
24
54
|
}
|
|
25
55
|
}
|
|
26
56
|
```
|
|
27
57
|
|
|
28
|
-
|
|
58
|
+
### Claude Desktop
|
|
29
59
|
|
|
30
|
-
|
|
60
|
+
Add to your Claude MCP settings (`~/Library/Application Support/Claude/claude_desktop_config.json`):
|
|
61
|
+
|
|
62
|
+
```json
|
|
63
|
+
{
|
|
64
|
+
"mcpServers": {
|
|
65
|
+
"vibecheck": {
|
|
66
|
+
"command": "vibecheck-mcp"
|
|
67
|
+
}
|
|
68
|
+
}
|
|
69
|
+
}
|
|
70
|
+
```
|
|
71
|
+
|
|
72
|
+
### CLI Usage
|
|
31
73
|
|
|
32
74
|
```bash
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
75
|
+
# Start with stdio (default, for Cursor/Claude)
|
|
76
|
+
vibecheck-mcp
|
|
77
|
+
|
|
78
|
+
# Start HTTP server (for custom integrations)
|
|
79
|
+
vibecheck-mcp --http --port 3001
|
|
80
|
+
|
|
81
|
+
# Start WebSocket server (for real-time connections)
|
|
82
|
+
vibecheck-mcp --websocket --port 3002
|
|
83
|
+
|
|
84
|
+
# Show help
|
|
85
|
+
vibecheck-mcp --help
|
|
36
86
|
```
|
|
37
87
|
|
|
38
88
|
---
|
|
39
89
|
|
|
40
|
-
##
|
|
90
|
+
## Available Tools
|
|
41
91
|
|
|
42
|
-
|
|
92
|
+
### Truthpack Tools
|
|
43
93
|
|
|
44
94
|
| Tool | Description |
|
|
45
95
|
|------|-------------|
|
|
46
|
-
| `
|
|
47
|
-
| `
|
|
48
|
-
| `
|
|
49
|
-
| `
|
|
50
|
-
| `
|
|
51
|
-
| `vibecheck_forge` | 📝 Generate AI IDE rules (.cursorrules, .windsurf) |
|
|
52
|
-
| `vibecheck_shield` | 🛡️ Agent Firewall controls |
|
|
53
|
-
| `vibecheck_doctor` | 🏥 Environment health check |
|
|
54
|
-
| `vibecheck_checkpoint` | 📍 Snapshot & restore, baseline comparison |
|
|
55
|
-
| `vibecheck_polish` | ✨ Production polish - final cleanup |
|
|
96
|
+
| `truthpack_generate` | Scan codebase and generate truthpack (routes, env, auth, contracts) |
|
|
97
|
+
| `truthpack_query` | Query truthpack for specific information |
|
|
98
|
+
| `truthpack_validate` | Validate truthpack against current codebase |
|
|
99
|
+
| `truthpack_routes` | Get API routes with filtering |
|
|
100
|
+
| `truthpack_env` | Get environment variables (required/optional) |
|
|
56
101
|
|
|
57
|
-
|
|
102
|
+
### Firewall Tools
|
|
58
103
|
|
|
59
|
-
|
|
104
|
+
| Tool | Description |
|
|
105
|
+
|------|-------------|
|
|
106
|
+
| `firewall_evaluate` | Full evaluation with evidence resolution |
|
|
107
|
+
| `firewall_quick_check` | Fast hallucination check |
|
|
108
|
+
| `firewall_get_tier` | Get confidence tier for a rule |
|
|
109
|
+
| `firewall_should_block` | Check if tier should block |
|
|
110
|
+
| `firewall_tier_stats` | Get statistics by confidence tier |
|
|
111
|
+
| `firewall_set_mode` | Set mode (observe/enforce/lockdown) |
|
|
60
112
|
|
|
61
|
-
|
|
113
|
+
### Context Tools
|
|
62
114
|
|
|
63
115
|
| Tool | Description |
|
|
64
116
|
|------|-------------|
|
|
65
|
-
| `
|
|
66
|
-
| `
|
|
67
|
-
| `
|
|
68
|
-
| `vibecheck_shield_lock` | Hard lockdown (all rules enforced) |
|
|
69
|
-
| `vibecheck_shield_unlock` | Release lock |
|
|
70
|
-
| `vibecheck_shield_verify` | Verify claims/prompts |
|
|
117
|
+
| `context_gather` | Gather AI context for a coding task |
|
|
118
|
+
| `context_file` | Get context for a specific file |
|
|
119
|
+
| `context_smart` | Smart context based on task description |
|
|
71
120
|
|
|
72
|
-
|
|
121
|
+
### Validation Tools
|
|
73
122
|
|
|
74
|
-
|
|
123
|
+
| Tool | Description |
|
|
124
|
+
|------|-------------|
|
|
125
|
+
| `validate_code` | Validate generated code against truthpack |
|
|
126
|
+
| `validate_imports` | Check import statements |
|
|
127
|
+
| `validate_api_calls` | Verify API endpoint usage |
|
|
75
128
|
|
|
76
|
-
|
|
129
|
+
### Intent (ISL) Tools
|
|
77
130
|
|
|
78
131
|
| Tool | Description |
|
|
79
132
|
|------|-------------|
|
|
80
|
-
| `
|
|
81
|
-
| `
|
|
82
|
-
| `
|
|
83
|
-
| `
|
|
133
|
+
| `intent_set` | Set current coding intent/spec |
|
|
134
|
+
| `intent_get` | Get active intent |
|
|
135
|
+
| `intent_clear` | Clear current intent |
|
|
136
|
+
| `intent_validate` | Validate code against intent |
|
|
84
137
|
|
|
85
|
-
|
|
138
|
+
### Hook Tools
|
|
139
|
+
|
|
140
|
+
| Tool | Description |
|
|
141
|
+
|------|-------------|
|
|
142
|
+
| `hook_pre_generation` | Pre-generation checks with enhanced context |
|
|
143
|
+
| `hook_post_generation` | Validate generated code for issues |
|
|
144
|
+
| `hook_file_write` | Validate file write operations |
|
|
145
|
+
|
|
146
|
+
### Lock Tools
|
|
86
147
|
|
|
87
|
-
|
|
148
|
+
| Tool | Description |
|
|
149
|
+
|------|-------------|
|
|
150
|
+
| `lock_check` | Check if file/folder is locked |
|
|
151
|
+
| `lock_list` | Get all locked files/folders |
|
|
88
152
|
|
|
89
|
-
|
|
153
|
+
### Forge Tools
|
|
90
154
|
|
|
91
155
|
| Tool | Description |
|
|
92
156
|
|------|-------------|
|
|
93
|
-
| `
|
|
94
|
-
| `
|
|
95
|
-
| `vibecheck_checkpoint_restore` | ⏪ Restore to a previous checkpoint |
|
|
96
|
-
| `vibecheck_checkpoint_compare` | 📈 Compare baseline vs current |
|
|
157
|
+
| `forge_generate` | Generate AI context rules for .cursor/rules |
|
|
158
|
+
| `forge_scan` | Scan codebase for rule generation |
|
|
97
159
|
|
|
98
|
-
|
|
160
|
+
### DocGuard Tools
|
|
99
161
|
|
|
100
|
-
|
|
162
|
+
| Tool | Description |
|
|
163
|
+
|------|-------------|
|
|
164
|
+
| `docguard_check` | Check documentation quality |
|
|
165
|
+
| `docguard_validate` | Validate docs against code |
|
|
101
166
|
|
|
102
|
-
|
|
167
|
+
### Translator Tools
|
|
103
168
|
|
|
104
169
|
| Tool | Description |
|
|
105
170
|
|------|-------------|
|
|
106
|
-
| `
|
|
107
|
-
| `
|
|
108
|
-
| `vibecheck_packs_graph` | 📊 Proof graph visualization |
|
|
109
|
-
| `vibecheck_seal` | 🏆 Generate ship badge and attestation |
|
|
171
|
+
| `translate_nl_to_isl` | Convert natural language to ISL spec |
|
|
172
|
+
| `translate_isl_to_checks` | Convert ISL to validation checks |
|
|
110
173
|
|
|
111
174
|
---
|
|
112
175
|
|
|
113
|
-
##
|
|
176
|
+
## Confidence Tiers
|
|
114
177
|
|
|
115
|
-
|
|
178
|
+
The firewall uses three confidence tiers:
|
|
116
179
|
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
|
|
122
|
-
"profile": "full"
|
|
123
|
-
}
|
|
124
|
-
}
|
|
125
|
-
```
|
|
180
|
+
| Tier | Confidence | Behavior |
|
|
181
|
+
|------|------------|----------|
|
|
182
|
+
| `hard_block` | High | Ghost routes, missing env vars → **Always blocks** |
|
|
183
|
+
| `soft_block` | Medium | Dynamic routes, patterns → **Blocks in enforce mode** |
|
|
184
|
+
| `warn` | Low | Style issues, best practices → **Warning only** |
|
|
126
185
|
|
|
127
|
-
|
|
186
|
+
---
|
|
128
187
|
|
|
129
|
-
|
|
130
|
-
{
|
|
131
|
-
"tool": "vibecheck_ship",
|
|
132
|
-
"arguments": {
|
|
133
|
-
"path": "."
|
|
134
|
-
}
|
|
135
|
-
}
|
|
136
|
-
```
|
|
188
|
+
## Environment Variables
|
|
137
189
|
|
|
138
|
-
|
|
190
|
+
| Variable | Description | Default |
|
|
191
|
+
|----------|-------------|---------|
|
|
192
|
+
| `VIBECHECK_MODE` | Mode (local/cloud/hybrid) | `local` |
|
|
193
|
+
| `VIBECHECK_TRANSPORT` | Transport (stdio/http/websocket) | `stdio` |
|
|
194
|
+
| `VIBECHECK_PORT` | Port for HTTP/WS | `3001` |
|
|
195
|
+
| `VIBECHECK_HOST` | Host for HTTP/WS | `localhost` |
|
|
196
|
+
| `VIBECHECK_PROJECT_ROOT` | Project root path | `process.cwd()` |
|
|
139
197
|
|
|
140
|
-
|
|
141
|
-
{
|
|
142
|
-
"tool": "vibecheck_prove",
|
|
143
|
-
"arguments": {
|
|
144
|
-
"url": "http://localhost:3000",
|
|
145
|
-
"maxFixRounds": 3
|
|
146
|
-
}
|
|
147
|
-
}
|
|
148
|
-
```
|
|
198
|
+
---
|
|
149
199
|
|
|
150
|
-
|
|
200
|
+
## Example Usage
|
|
201
|
+
|
|
202
|
+
Once the MCP server is connected, AI agents can use tools like:
|
|
151
203
|
|
|
152
|
-
```json
|
|
153
|
-
{
|
|
154
|
-
"tool": "vibecheck_reality",
|
|
155
|
-
"arguments": {
|
|
156
|
-
"url": "http://localhost:3000",
|
|
157
|
-
"headed": false,
|
|
158
|
-
"maxPages": 18,
|
|
159
|
-
"maxDepth": 2
|
|
160
|
-
}
|
|
161
|
-
}
|
|
162
204
|
```
|
|
205
|
+
User: Add a new API endpoint for user profiles
|
|
163
206
|
|
|
164
|
-
|
|
207
|
+
AI (using truthpack_routes): Let me check existing routes...
|
|
208
|
+
Found 15 routes. Similar patterns: GET /api/v1/users/:id
|
|
165
209
|
|
|
166
|
-
|
|
167
|
-
|
|
168
|
-
|
|
169
|
-
|
|
170
|
-
|
|
171
|
-
"autopilot": false,
|
|
172
|
-
"maxMissions": 8
|
|
173
|
-
}
|
|
174
|
-
}
|
|
210
|
+
AI (using hook_pre_generation): Running pre-generation checks...
|
|
211
|
+
✓ No conflicts with existing routes
|
|
212
|
+
✓ Auth patterns identified
|
|
213
|
+
|
|
214
|
+
AI: I'll create GET /api/v1/users/:id/profile following your existing patterns...
|
|
175
215
|
```
|
|
176
216
|
|
|
177
|
-
|
|
217
|
+
---
|
|
178
218
|
|
|
179
|
-
|
|
180
|
-
|
|
181
|
-
|
|
182
|
-
|
|
183
|
-
|
|
184
|
-
|
|
185
|
-
|
|
186
|
-
|
|
219
|
+
## Development
|
|
220
|
+
|
|
221
|
+
```bash
|
|
222
|
+
# Clone the monorepo
|
|
223
|
+
git clone https://github.com/vibecheckai/vibecheck.git
|
|
224
|
+
cd vibecheck
|
|
225
|
+
|
|
226
|
+
# Install dependencies
|
|
227
|
+
pnpm install
|
|
228
|
+
|
|
229
|
+
# Build MCP server
|
|
230
|
+
pnpm --filter @vibecheck/mcp-server build
|
|
231
|
+
|
|
232
|
+
# Run tests
|
|
233
|
+
pnpm --filter @vibecheck/mcp-server test
|
|
234
|
+
|
|
235
|
+
# Start in dev mode
|
|
236
|
+
pnpm --filter @vibecheck/mcp-server dev
|
|
187
237
|
```
|
|
188
238
|
|
|
189
239
|
---
|
|
190
240
|
|
|
191
|
-
##
|
|
241
|
+
## Related Packages
|
|
192
242
|
|
|
193
|
-
-
|
|
194
|
-
-
|
|
195
|
-
- `vibecheck://status` - Server status and health
|
|
243
|
+
- [vibecheck-ai](https://www.npmjs.com/package/vibecheck-ai) - CLI tool
|
|
244
|
+
- [VibeCheck VS Code Extension](https://marketplace.visualstudio.com/items?itemName=Vibecheck-AI.vibecheck-ai) - VS Code integration
|
|
196
245
|
|
|
197
246
|
---
|
|
198
247
|
|
|
199
|
-
##
|
|
248
|
+
## Changelog
|
|
249
|
+
|
|
250
|
+
### v1.2.0
|
|
251
|
+
- **Enhanced Tool Set** - All MCP tools verified and tested
|
|
252
|
+
- **Improved Firewall** - Better confidence tier evaluation
|
|
253
|
+
- **Context Tools** - Smarter context gathering for AI agents
|
|
254
|
+
- **Performance** - Faster truthpack generation and validation
|
|
255
|
+
- **Stability** - Various bug fixes and improvements
|
|
200
256
|
|
|
201
|
-
|
|
202
|
-
-
|
|
203
|
-
|
|
257
|
+
### v1.1.1
|
|
258
|
+
- Bug fixes and stability improvements
|
|
259
|
+
|
|
260
|
+
### v1.1.0
|
|
261
|
+
- Added confidence tiers (hard_block, soft_block, warn)
|
|
262
|
+
- Added tier statistics tool
|
|
263
|
+
- Improved firewall evaluation
|
|
264
|
+
- Added DocGuard and Translator tools
|
|
265
|
+
|
|
266
|
+
### v1.0.0
|
|
267
|
+
- Initial release
|
|
268
|
+
- Truthpack management tools
|
|
269
|
+
- Firewall evaluation
|
|
270
|
+
- Context gathering
|
|
271
|
+
- ISL (Intent Specification Language) support
|
|
204
272
|
|
|
205
273
|
---
|
|
206
274
|
|
|
207
|
-
##
|
|
275
|
+
## License
|
|
276
|
+
|
|
277
|
+
MIT © VibeCheck Team
|
|
278
|
+
|
|
279
|
+
---
|
|
208
280
|
|
|
209
|
-
|
|
210
|
-
|
|
211
|
-
|
|
281
|
+
<p align="center">
|
|
282
|
+
<a href="https://vibecheckai.dev">Website</a> •
|
|
283
|
+
<a href="https://x.com/VibeCheck_AI">Twitter</a>
|
|
284
|
+
</p>
|