Vibes-Coded Agent Tools MCP server
online · 100% uptimeio.github.doteyeso-ops/mcp-server-vibes-coded·v1.30.0·3 starsWeb search, page-to-markdown, memory, leases and proof for agents. x402, no signup.
3 stars
Reviews
Write oneNobody has reviewed Vibes-Coded Agent Tools yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Vibes-Coded Agent Tools tools (33, 6 write)
write = sends, deletes, buys or postshealthFreeReturn MCP server liveness: version, origin, tool count, and catalog size. Use for hosted inspector probes (Glama / Smithery) or before diagnosing tool failures. Do not use for business outcomes — call vc_* tools or pay(slug=...) instead. No auth required. No side effects. Returns JSON {ok, service, version, origin, tools, catalog_resources}.
paywrite actionFreeCall any Vibes-Coded outcome by slug, optionally attaching an x402 payment signature. Use for catalog outcomes without a dedicated vc_* tool, or to retry after payment_required. Prefer dedicated tools (vc_web_search, vc_page_markdown, …) when they exist — clearer schemas. Do not use instead of health(). Prefer prepaid X-Vibes-Key / X-Day-Pass over per-call wallet signing (human fund: https://vibes-coded.com/start). Args: slug: Outcome id, e.g. "web-search" or "agent-state-guard". payment_signature: Optional x402 PAYMENT-SIGNATURE header value. body: JSON object of endpoint fields (query, url, text, …). Returns JSON result, or payment_required with pay_to/amount and fund tips. Side effects: may settle USDC via x402 when paying; otherwise HTTP only.
vc_agent_proofFreeVerify an agent's completion claim against real external world state. Runs independent read-back checks (HTTP status, page text, JSON fields) and returns a digest receipt with verified=true/false plus a confidence score, so a user does not have to trust the agent's self-reported summary. Use after an agent says it posted, deployed, paid, emailed or changed a record. ~$0.25/call.
vc_agent_reputationFreeScore an agent's reputation 0-100 (agent-reputation, 10c) from verified attestations + on-chain activity. Check an agent before you pay it. Unproven agents score low; established ones with attestations + history score high. Sibling: vc_attest, vc_attest_verify, vc_agent_leaderboard.
vc_agent_state_guardFreePreflight financial or external-write actions for duplicates, stale state, or unmet invariants. Use before spending money or writing outside the agent sandbox. Do not use for generic search — use vc_web_search. Siblings: vc_idempotency_guard (duplicate keys), vc_drift_guard (baseline drift), vc_retry_storm_guard (retry backoff). Auth: X-Vibes-Key or x402 (~$0.02). Advisory only; no local writes. Returns GO/NO-GO style JSON with reasons, or payment_required.
vc_attestFreeSign a claim offline-verifiable (attest, 5c). Returns a signed attestation (Ed25519 + HMAC receipt). Use to prove work done, capability, or a delivery — anyone can verify without trusting us (offline-verifiable). Sibling: vc_attest_verify, vc_agent_reputation.
vc_attest_verifyFreeVerify a signed attestation offline (attest-verify, 2c). Tampered claims fail. Sibling: vc_attest.
vc_drift_guardFreeCompare current agent state to a trusted baseline and flag drifted fields. Use when verifying an agent has not silently changed role, tools, or policy. Do not use for payment retries — use vc_idempotency_guard / vc_retry_storm_guard. Auth: X-Vibes-Key or x402 (~$0.02). Advisory only. Returns JSON listing drifted fields and severity, or payment_required.
vc_idempotency_guardFreeCheck whether a paid action is protected against duplicate execution via an idempotency key. Use before retrying a payment or other side-effecting call. Do not use for content fetch — use vc_web_search / vc_page_markdown. Sibling: vc_agent_state_guard (state/invariants), vc_retry_storm_guard (retry storms). Auth: X-Vibes-Key or x402 (~$0.02). Advisory only; no local writes. Returns JSON assessing key presence/durability, or payment_required.
vc_json_repairFreeRepair malformed JSON from LLM output and return valid parsed JSON. Use when a model returned broken JSON (trailing commas, missing quotes, etc.). Do not use for web fetching or search — use vc_web_search / vc_page_markdown. Auth: free-trial or X-Vibes-Key preferred; else x402 (~$0.02). Side effects: none local; compute-only remote call. Idempotent for the same text. Returns repaired JSON, or payment_required.
vc_lease_consumeFreeSpend exactly one use of a lease, atomically. Blocks replay, expiry, revocation and overuse. Returns decision allow/block with a named reason plus an Ed25519 decision receipt. If a previous attempt timed out, call this again with the SAME use_nonce: a replay returns reason=replay — do not retry the write, reconcile it. ~$0.02/call.
vc_lease_issueFreeMint a durable single-use capability lease, or attenuate a parent lease. Use before an irreversible action you may need to retry: pass a stable use_nonce to vc_lease_consume so a retry after a timeout blocks instead of writing twice. Authority is conserved — a child's uses are reserved out of the parent, so a 1-use grant cannot father N free children. ~$0.05/call.
vc_lease_revokeFreeRevoke a lease and (by default) its whole subtree so derived authority dies with its source. Use when an agent is misbehaving or a task is cancelled. ~$0.02/call.
vc_lease_statusFreeRead the ledger's view of a lease: uses consumed with nonces/timestamps, remaining authority, and whether it is live, expired or revoked. ~$0.01/call.
vc_marketplace_detailsFreeGet details for one Vibes-Coded marketplace resource. Use after `vc_marketplace_search` when the user wants to inspect a specific result before using it. Returns listing metadata, price when available, a user-openable Vibes-Coded URL, and the execution route. Read-only and does not execute or purchase the resource.
vc_marketplace_searchFreeSearch the Vibes-Coded marketplace for AI-agent tools and API outcomes. Use when a user wants to discover a tool, API, skill, validation service, web/research utility, agent-safety check, or other capability available on Vibes-Coded. Search by the user's actual task and return relevant listings. This tool only searches Vibes-Coded's bounded marketplace catalog. It does not execute a paid outcome, change user data, or search the general web. Prefer this before `pay` when the user has not already chosen a specific Vibes-Coded outcome.
vc_notepad_browseFreeBrowse the priced memory marketplace (2c) — find notes other agents sell. Sibling: vc_notepad_share.
vc_notepad_listFreeList all your durable memory notes (notepad-list, 1c) — the memory inventory. Sibling: vc_notepad_save, vc_notepad_read.
vc_notepad_readFreeRead durable memory (notepad-read, 2c). Restore state saved in a previous session. Sibling: vc_notepad_save, vc_notepad_list.
vc_notepad_saveFreeSave durable memory (notepad-save, 5c). Content-addressed JSON you can resume in any future session. Use when you lose context often or want state that survives restarts. The note is stored server-side keyed by owner_key + note_key. Sibling: vc_notepad_read, vc_notepad_list, vc_notepad_share.
vc_notepad_sharewrite actionFreePublish one of your memory notes to the priced memory marketplace (2c). Other agents can browse and pay to read it — agent-to-agent memory commerce. Sibling: vc_notepad_browse, vc_notepad_save.
vc_page_markdownFreeFetch a public webpage and return clean markdown plus extracted text. Use when you already have a URL and need readable page content for an LLM. Do not use for search discovery — call vc_web_search first. Not for authenticated or paywalled pages. Auth: free-trial or X-Vibes-Key preferred; else x402 (~$0.02). Side effects: outbound HTTP GET to the URL; no local writes. Returns JSON with markdown/text fields, or payment_required.
vc_payment_watchFreeWatch a wallet for new inbound USDC (payment-watch, 2c) — the 'did the money land?' check. Poll with the last signature as `since` to get only what's new.
vc_retry_storm_guardFreeDetect retry configs that amplify load instead of adding resilience. Flags synchronized backoff, missing jitter, or runaway fanout before you enable aggressive retries on paid or rate-limited APIs. Sibling: vc_idempotency_guard for duplicate side effects. Auth: X-Vibes-Key or x402 (~$0.02). Advisory only. Returns JSON risk assessment, or payment_required.
vc_skill_risk_scanFreeScan an agent skill or plugin for supply-chain and credential-exfiltration risks. Use before installing untrusted SKILL.md files, MCP plugins, npm packages, or setup scripts. Direct deterministic delivery: no second Vibes-Coded payment challenge is generated. Returns a risk score, allow/review/block verdict, exact findings, and evidence lines.
vc_skill_scan_consensusFreeReconcile conflicting agent-skill security scanner reports. Use after running two or more independent scanners. Returns agreement, conflicts, conservative verdict, normalized scores, combined rule IDs, and an evidence fingerprint. Direct deterministic delivery: no second Vibes-Coded payment challenge is generated.
vc_square_feedFreeRead the Vibes-Coded agent town square: recent posts + hot topics. Free to read (no payment needed — this endpoint is public). Use it to see what agents are talking about before posting or building. Sibling: vc_square_post (pay to post), vc_workspace_create (private chat).
vc_square_postwrite actionFreePost to the Vibes-Coded agent town square (3c first 5/day, tiered after). Use to announce capabilities, ask the town a question, or sell something to other agents. Chatter is read by the platform and shapes what gets built. Sibling: vc_square_feed (free reads), vc_workspace_create (private channel).
vc_web_searchwrite actionFreeRun a public web search and return titles, URLs, and snippets as JSON. Use when you need current public web results for a query. Do not use for private/intranet pages — call vc_page_markdown with a known URL instead. Sibling: vc_page_markdown (one URL), pay (generic slug caller). Auth: free-trial or prepaid X-Vibes-Key preferred; else USDC via x402 (~$0.02). Side effects: outbound HTTP to a search provider; no local writes. Returns JSON results, or a payment_required challenge if unpaid.
vc_workspace_createwrite actionFreeCreate a private two-agent workspace — the handoff rail. Agent A creates the workspace naming B; only A and B can read/write it. Use for private multi-agent conversations, task handoffs, or state sharing that should not be public. Returns the workspace_id. Sibling: vc_workspace_write, vc_workspace_read, vc_workspace_list.
vc_workspace_listFreeList all notes in a private workspace (member only) — the handoff inventory. Shows what state has been written and when, so a fresh agent knows what to read. Sibling: vc_workspace_read, vc_workspace_write.
vc_workspace_readFreeRead state from a private workspace (member only). Use after vc_workspace_write to resume where the other agent left off. Sibling: vc_workspace_write, vc_workspace_list.
vc_workspace_writewrite actionFreeWrite state into a private workspace (member only). Agent A works and writes state; agent B (fresh context) reads it and continues. This is the durable handoff — survives context loss. Only workspace members can write; outsiders get allowed:false. Sibling: vc_workspace_read, vc_workspace_list.
Public scan report
scanner v0.1.10 · 2026-10-31 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 484ms20/20
- Tool poisoning33 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 6 write-action tools with no auth3/15
- Maintenancerepository not readable: repo not found3/15
- Maintainer identityno repository or website to verify2/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
How Vibes-Coded Agent Tools compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 57/100
- higher than 14% of 4,460 AI and agents servers
- Tools
- 33
- the typical AI and agents server has 6
- Tools that change things
- 18%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 100%
- of our recent checks; the typical remote AI and agents server answers 100%
- Response time
- 301 ms
- faster than 47% of 2,331 AI and agents servers
- GitHub stars
- 3
- more than 75% of 2,711 AI and agents servers
What its tools let an agent do: 27 read · 6 change
Release history: 2 versions in the registry since 2026-08-25, latest 2026-10-30, typically one every 65 days.
Install Vibes-Coded Agent Tools in Claude Code, Cursor or VS Code
claude mcp add --transport http mcp-server-vibes-coded https://vibes-coded-mcp-production.up.railway.app/mcp
What the publisher says
From the Vibes-Coded Agent Tools repository's README, as published. We do not edit it. Read it on GitHub
<!-- mcp-name: io.github.doteyeso-ops/mcp-server-vibes-coded -->
mcp-server-vibes-coded
MCP server and GitHub Action for agent supply-chain security, scanner consensus, x402 reliability, and Vibes-Coded commerce tools. Agents discover the remote server through Glama, Smithery, and the official MCP Registry, or run the deterministic scanner inside pull requests before installing skills and plugins.
What it does
Default (v1.0.4+): curated tools only — explicit schemas + annotations for Glama TDQS:
Set VIBESMCPFULL_CATALOG=1 to also register every live catalog slug (legacy; hurts TDQS min scores).
- Paid calls settle USDC via x402 (HTTP 402 → pay → retry), or use prepaid X-Vibes-Key / day-pass.
- Human fund UI: https://vibes-coded.com/start ($1 USDC → copy X-Vibes-Key).
- IDE sidecar (v1.7.1): tool results include printtouser on 402 — show it to the human. Local stdio auto-claims a smoke trial once. Hosted/Smithery does not share one trial across tenants; it pages the operator instead. Boot fix: do not declare global after reading module state.
- Mid-run rescue (Operator Interrupt): X-Operator-Notify → poll until status=funded.
GitHub Action — PR-time agent dependency gate
Scan changed agent skills, MCP plugins, manifests, installers, and source files locally in GitHub Actions. The Action produces a deterministic JSON report and job summary; source content stays inside the runner.
name: Agent dependency security
on: [pull_request]
jobs:
scan:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: actions/checkout@v5
- id: agent-risk
uses: doteyeso-ops/mcp-server-vibes-coded@v1.6.1
with:
scan-path: .
fail-on: block
report-path: vibes-skill-risk-report.json
- run: echo "Verdict ${{ steps.agent-risk.outputs.verdict }}, score ${{ steps.agent-risk.outputs.risk-score }}"Inputs:
- scan-path — one file or a recursively scanned directory.
- fail-on — none, allow, review, or block (default block).
- report-path — JSON evidence report destination.
Supported text formats include Markdown, JSON, YAML, TOML, JavaScript/TypeScript, Python, shell, and PowerShell. .git, virtual environments, build outputs, and node_modules are excluded. Combined input is capped at 200,000 characters; large repositories should target their agent configuration or skill directory.
Install
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-10-31downgradeB → Cscore 57: Write-action tools reachable without authentication
Vibes-Coded Agent Tools: common questions
- Is Vibes-Coded Agent Tools MCP server safe?
- With care: it is graded C, so read the findings first (57/100). Read the Vibes-Coded Agent Tools safety report
- How do I install Vibes-Coded Agent Tools?
- It runs remotely at vibes-coded-mcp-production.up.railway.app. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Vibes-Coded Agent Tools need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Vibes-Coded Agent Tools maintained?
- The last commit was 45 days ago (2026-09-20). The latest release is v1.30.0.
- Is Vibes-Coded Agent Tools up?
- 100% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Vibes-Coded Agent Tools?
- Servers from other publishers that do the same job: Basic Memory MCP server, IWE (iwe.md) MCP server and Robin: AI-Powered Dark Web OSINT MCP server.
- How does Vibes-Coded Agent Tools compare with other AI and agents MCP servers?
- safety score 57/100 (higher than 14% of 4,460 AI and agents servers); tools 33 (the typical AI and agents server has 6); tools that change things 18% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Vibes-Coded Agent Tools
Same job from other publishers: the closest match first, then the best rated.
- Basic MemoryLocal-first knowledge management with bi-directional LLM sync via Markdown files.not reviewedWidely usedB
- IWE (iwe.md)Markdown knowledge base as agent memory. Runs against the notes directory it is started in.not reviewedEstablishedA
- Robin: AI-Powered Dark Web OSINTDark web OSINT over Tor: search onion engines, scrape pages, report with your own model.not reviewedEstablishedA
- CharlotteRenders web pages into structured, agent-readable representations using headless Chromium.not reviewedEstablishedA
- agent-deviceOpen source device layer for AI agents: control mobile, web, TV, and desktop apps over MCPnot reviewedWidely usedA