Is VibeKit MCP server safe?
Yes, with the usual care.
Safe to use. Minor gaps such as a missing repository or slower maintenance.
What to know before installing
- highWrite-action tools reachable without authentication
How VibeKit compares
Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 80/100
- higher than 55% of 1,119 Developer tools servers
- Tools that change things
- 31%
- typical: 5%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote Developer tools server answers 100%
What its tools let an agent do: 25 read · 11 change
Public scan report
scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it
1 high
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 1107ms20/20
- Tool poisoning36 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 11 write-action tools with no auth3/15
- Maintenancelast push 11 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
Overall 80/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what VibeKit does
Aiven MCPProvision PostgreSQL, manage Apache Kafka, and deploy apps with Aiven - all from your AI assistant.not reviewedEstablishedA- NoraOperate self-hosted OpenClaw and Hermes agent fleets on Docker or Kubernetes from MCP clients.not reviewedGrowingB
EdgegapDeploy and operate multiplayer game servers on Edgegap's global edge network.not reviewedGrowingA
