Free security scan for AI-written GitHub repos: leaked keys, .env, eval, SQLi, CORS.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Scan a public GitHub repo (owner/repo or URL) for leaked secrets, .env files, eval, SQLi, CORS and other risky patterns common in AI-written code.
owner/repo or https://github.com/owner/repo
This tool isn't marked read-only, so it may change something on the server or in an account you connected.
Scan a public GitHub repo (owner/repo or URL) for leaked secrets, .env files, eval, SQLi, CORS and other risky patterns common in AI-written code.
| Argument | Type | Description |
|---|---|---|
| repo* | string | owner/repo or https://github.com/owner/repo |
{
"type": "object",
"required": [
"repo"
],
"properties": {
"repo": {
"type": "string",
"description": "owner/repo or https://github.com/owner/repo"
}
}
}https://vibescan.bigfloppy.net/mcpclaude mcp add --transport http vibescan https://vibescan.bigfloppy.net/mcp