Atlas / MCP servers / freshtechbro / Vibe Coder

Vibe CoderBLOCK

Name: Vibe Coder
Author: freshtechbro

mcp/freshtechbro/vibe-coder-2

MCP server by freshtechbro · agents · augmentcode · claude desktop · Audited 2026-10-07

⚑ Report / re-scan Source ↗

Vibe-Coder-MCP server extends AI assistants with specialized software development tools.

Verdict

BLOCK

Grade

Trust score

46 /100

Exposed tools

26 25r · 1w · 0d

Transport

sse · stdio

License

NOASSERTION

Stars

103

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://www.npmjs.com/package/vibe-coder-mcp) [](https://www.npmjs.com/package/vibe-coder-mcp) [](https://www.npmjs.com/package/vibe-coder-mcp) [](https://github.com/freshtechbro/Vibe-Coder-MCP/releases) [](https://nodejs.org/) [](LICENSE) [](https://github.com/freshtechbro/Vibe-Coder-MCP/stargazers)

Vibe Coder is an MCP (Model Context Protocol) server designed to supercharge your AI assistant (like Cursor, Cline AI, or Claude Desktop) with powerful tools for software development. It helps with research, planning, generating requirements, creating starter projects, and more!

🆕 What's New in Version 0.3.5

🎉 Latest Release - Enhanced CLI, REPL, and Parameter Extraction

Major Improvements:

✨ Complete Hybrid Matcher Overhaul: All 15 MCP tools now have comprehensive parameter extraction
🚀 CLI/REPL Experience: Interactive confirmations, job status polling with visual progress
🔧 Fixed Critical Bugs: Task-list-generator auto-generates user stories, multi-turn conversations work flawlessly
📊 Better Tool Matching: Mu

Read from source at commit ed6e976edc4cOBSERVED · 2026-10-07

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add code-map-generator --env OPENROUTER_API_KEY=${OPENROUTER_API_KEY} --env VIBE_AUTH_SECRET=${VIBE_AUTH_SECRET} --env VIBE_CONTEXT_CURATOR_KEYWORD_WEIGHT=${VIBE_CONTEXT_CURATOR_KEYWORD_WEIGHT} --env VIBE_CONTEXT_CURATOR_MAX_TOKENS_PER_FILE=${VIBE_CONTEXT_CURATOR_MAX_TOKENS_PER_FILE} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "code-map-generator": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "OPENROUTER_API_KEY": "${OPENROUTER_API_KEY}",
        "VIBE_AUTH_SECRET": "${VIBE_AUTH_SECRET}",
        "VIBE_CONTEXT_CURATOR_KEYWORD_WEIGHT": "${VIBE_CONTEXT_CURATOR_KEYWORD_WEIGHT}",
        "VIBE_CONTEXT_CURATOR_MAX_TOKENS_PER_FILE": "${VIBE_CONTEXT_CURATOR_MAX_TOKENS_PER_FILE}"
      }
    }
  }
}

Exposed tools (26)

25 read · 1 write · 0 destructive.

Tool	Risk	Description
`dark`	read	High contrast theme for dark terminals
`default`	read	Default balanced color scheme
`default-project`	read	Default project for testing
`errorTool`	read	A tool that returns an error result
`forest`	read	Forest-inspired green and earth color scheme
`fullstack-starter-kit-generator`	read	Generates full-stack project starter kits by composing YAML modules based on user requirements, tech stacks, research-informed recommendations, and then provides setup scripts. Dynamically generates missing YAML modules using LLM.
`generate-fullstack-starter-kit`	read	Generates full-stack project starter kits with custom tech stacks
`generate-prd`	read	Creates comprehensive product requirements documents
`generate-rules`	read	Creates project-specific development rules based on product description
`generate-task-list`	read	Creates structured development task lists with dependencies
`generate-user-stories`	read	Creates detailed user stories with acceptance criteria
`get-agent-tasks`	read	Get pending tasks for an agent (stdio polling)
`get-job-result`	read	Retrieves the current status and, if available, the final result of a background job. Supports enhanced diagnostic information for debugging and troubleshooting.
`light`	read	Soft colors optimized for light terminals
`ocean`	read	Ocean-inspired blue and aqua color scheme
`prd-generator`	read	Product requirements tool
`process-request`	read	Processes natural language requests and routes them to the appropriate tool
`register-agent`	read	Register an AI agent with the task management system
`research-manager`	read	Research management tool
`rules-generator`	read	Creates project-specific development rules based on product description, user stories, and research.
`submit-task-response`	write	Submit task completion response from agent
`successTool`	read	A tool that always succeeds
`task-list-generator`	read	Creates structured development task lists, decomposing high-level tasks into detailed sub-tasks with implementation guidance.
`throwingTool`	read	A tool executor that throws
`user-stories-generator`	read	Creates detailed user stories with acceptance criteria based on a product description and research.
`vibe-task-manager`	read	AI-agent-native task management system with recursive decomposition design (RDD) methodology. Supports project creation, task decomposition, dependency management, and agent coordination for autonomous software development workflows.

Trust audit

BLOCKgrade F · trust 46/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (3 observation(s))
Network: declared (6 observation(s))
Shell: declared (6 observation(s))
Dependencies: not all pinned
Secrets in source: found

Findings (25)

HIGHCode injection · code.deserialize · CWE-78, CWE-94, CWE-95

src/tools/context-curator/services/output-formatter.ts:399

const parsed = yaml.load(content) as Record<string, unknown>;

Why it matters. deserialises untrusted bytes into live objects

Fix. use json or yaml.safe_load

HIGHCode injection · code.deserialize · CWE-78, CWE-94, CWE-95

src/tools/fullstack-starter-kit-generator/yaml-composer.ts:571

const parsed = yaml.load(fileContent) as Record<string, unknown>;

Why it matters. deserialises untrusted bytes into live objects

Fix. use json or yaml.safe_load

HIGHCode injection · code.deserialize · CWE-78, CWE-94, CWE-95

src/tools/vibe-task-manager/utils/file-utils.ts:207

const parsedData = yaml.load(readResult.data!) as T;

Why it matters. deserialises untrusted bytes into live objects

Fix. use json or yaml.safe_load

MEDIUMInventory / provenance · inv.binary · CWE-1104

src/tools/code-map-generator/grammars/tree-sitter-c.wasm

tree-sitter-c.wasm