# mobb-dev/mobb-vibe-shield-mcp [Health: Active]

**Category:** 🔒 Security  
**Repository:** https://github.com/mobb-dev/bugsy?tab=readme-ov-file#model-context-protocol-mcp-server  
**GitHub Stars:** 68  
**npm Downloads (last month):** 20724  
**Views:** 2  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/mobb-dev-mobb-vibe-shield-mcp

## Description
Mobb Vibe Shield identifies and remediates vulnerabilities in both human and AI-written code, ensuring your applications remain secure without slowing development.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "mobb-vibe-shield-mcp": {
    "command": "npx",
    "args": ["-y","mobbdev"],
    "env": {
      "API_KEY": "",
      "API_URL": "",
      "MVS_AUTO_FIX": ""
    }
  }
}
```

**Requires environment variables:** `API_KEY`, `API_URL`, `MVS_AUTO_FIX` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation
This MCP server integrates with the Mobb platform to identify and remediate security vulnerabilities in code repositories. It supports analyzing pre-generated SAST reports or running scans using Checkmarx or Snyk on public GitHub/GitLab/ADO repos. The server requires a Mobb API key and a local git repository with changes to analyze. Use it to automate vulnerability fixes and receive detailed patch recommendations through AI assistants.

**Use cases:**
- Scan public GitHub/GitLab/ADO repositories for security vulnerabilities
- Analyze existing SAST reports to generate automated code fixes
- Integrate with AI assistants to automatically detect and fix vulnerabilities in changed code
- Review and commit recommended security patches generated from scans
- Automate security remediation workflows in development pipelines

**Key features:**
- Supports SAST tools: Checkmarx, CodeQL, Fortify, Snyk
- Two modes: Scan (runs SAST scan) and Analyze (uses existing SAST report)
- Generates automated code fixes for detected vulnerabilities
- MCP server interface for AI assistant integration
- Requires local git repo with uncommitted changes for analysis
- Configurable auto-fix application via environment variable

_Summarized from the repository README — see the link above for the full text._