Viberaven MCP server
io.github.ohad6k/viberaven·v1.7.1·60 starsChecks a Vercel + Supabase repo before deploy: RLS, grants, leaked keys, webhooks. Runs locally.
not scanned yet
60 stars205 downloads/wk
Reviews
Write oneNobody has reviewed Viberaven yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Viberaven tools
No tool declarations could be read from the package source. They show once the server is installed.
How Viberaven compares
Against every graded Databases MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 90% of 802 Databases servers
- GitHub stars
- 60
- more than 91% of 602 Databases servers
- Downloads a week
- 205
- more than 71% of 330 Databases servers with a package
Release history: 7 versions in the registry since 2026-06-13, latest 2026-10-30, typically one every 8 days.
Install Viberaven in Claude Code, Cursor or VS Code
Runs npx -y @viberaven/mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add viberaven -- npx -y @viberaven/mcp
What the publisher says
From the Viberaven repository's README, as published. We do not edit it. Read it on GitHub
VibeRaven VibeRaven checks AI-built apps on Vercel + Supabase for launch gaps before you ship: tables without RLS, permissive policies such as using (true), service_role keys in client code, anon-callable security definer functions, the wrong pooler port and unverified Stripe webhooks. Run npx -y viberaven@1.6.12 check in your app's folder. It reads the repository on your machine, needs no account, and names the file and line for each gap.
Website · What it checks · When to use it · How it compares · Local Studio · Agent skills · Releases
Quick start
Requires Node.js 20 or newer. From your app's project root:
npx -y viberaven@1.6.12 check- In a terminal or CI: npx -y viberaven@1.6.12 check
- For coding agents: npx -y viberaven@1.6.12 --agent-mode
- Windows PowerShell: use npx.cmd if npx is blocked by the execution policy.
It reads supabase/migrations, your client and server code, package.json and .env.example. It does not connect to your Supabase project or send requests to your app. It exits 1 when it finds a blocker, so it also works as a CI step.
What it checks
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Viberaven: common questions
- Is Viberaven MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Viberaven safety report
- How do I install Viberaven?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Viberaven need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Viberaven maintained?
- The last commit was 40 days ago (2026-09-26). The latest release is v1.7.1.
- What can I use instead of Viberaven?
- Servers from other publishers that do the same job: SupaForge MCP server, Supabase MCP server and Appwrite MCP server.
- How does Viberaven compare with other Databases MCP servers?
- safety score 92/100 (higher than 90% of 802 Databases servers); github stars 60 (more than 91% of 602 Databases servers); downloads a week 205 (more than 71% of 330 Databases servers with a package). Full comparison.
Alternatives to Viberaven
Same job from other publishers: the closest match first, then the best rated.
- SupaForgeFind and fix drift between Supabase environments: schema, RLS, roles, auth, storage and more.not reviewedGrowingA
SupabaseMCP server for interacting with the Supabase platformnot reviewedWidely usedA- AppwriteBuild and deploy backends: auth, Postgres/MySQL/vector databases, storage, functions, hosting, CDNnot reviewedEstablishedA
Ekwo OS — open source accounting: ledger, invoices and VAT on your own Supabase or PostgresDouble-entry books an agent keeps as the user: invoices, VAT returns, 174 country packs.not reviewedEstablishedA- PostgreSQLMCP server for PostgreSQL: local, Docker, RDS, Neon, Supabase, or behind an SSH bastion.not reviewedEstablishedB
