VibeShift Web tester
About
[MCP Server] The Security Agent for AI assisted coding
Details
- Author
- Ilikepizza2
- GitHub stars
- 68
- Downloads
- 389
- Categories
- Other, Developer Tools
Jump to
- MCP integration with Cursor, Copilot, Roo Code and others
- Automated static (Semgrep) and dynamic (Nuclei) security scanning
- AI-assisted test recording via natural language descriptions
- Deterministic test execution with Playwright
- AI-powered test discovery by crawling websites
- Regression testing and self-healing of existing tests
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
VibeShift Web testerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Install the repository, set up a Python virtual environment, install dependencies and Playwright browsers, configure an LLM API key in .env, and add the MCP server configuration to your AI coding assistant. Interact via natural language commands such as “Scan this code for security issues” or “Record a test for login.”
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"vibeshift web tester": {
"VibeShift": {
"command": "python",
"args": [
"-m",
"venv",
"venv"
]
}
}
}
}McpServers
{
"VibeShift": {
"command": "python",
"args": [
"-m",
"venv",
"venv"
]
}
}VibeShift: The Security Engineer for Vibe Coders
VibeShift is an intelligent security agent designed to integrate seamlessly with AI coding assistants (like Cursor, GitHub Copilot, Claude Code, etc.). It acts as your automated security engineer, analyzing code generated by AI, identifying vulnerabilities, and facilitating AI-driven remediation before insecure code makes it to your codebase. It leverages the MCP (Model Context Protocol) for smooth interaction within your existing AI coding environment.
<a href="https://www.producthunt.com/posts/vibeshift-mcp?embed=true&utm_source=badge-featured&utm_medium=badge&utm_source=badge-vibeshift-mcp" target="_blank">
</a>
The Problem: AI coding assistants accelerate development dramatically, but they can also generate code with subtle or overt security vulnerabilities. Manually reviewing all AI-generated code for security flaws is slow, error-prone, and doesn't scale with the speed of AI development. This "vibe-driven development" can leave applications exposed.
The Solution: GroundNG's VibeShift bridges this critical security gap by enabling your AI coding assistant to:
1. Automatically Analyze AI-Generated Code: As code is generated or modified by an AI assistant, VibeShift can be triggered to perform security analysis using a suite of tools (SAST, DAST components) and AI-driven checks.
2. Identify Security Vulnerabilities: Pinpoints common and complex vulnerabilities (e.g., XSS, SQLi, insecure configurations, logic flaws) within the AI-generated snippets or larger code blocks.
3. Facilitate AI-Driven Remediation: Provides detailed feedback and vulnerability information directly to the AI coding assistant, enabling it to suggest or even automatically apply fixes.
4. Create a Security Feedback Loop: Ensures that developers and their AI assistants are immediately aware of potential security risks, allowing for rapid correction and learning.
This creates a "shift-left" security paradigm for AI-assisted coding, embedding security directly into the development workflow and helping to ship more secure code, faster.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
