Log inSubmit server
Mobb Vibe Shield MCP logo

Mobb Vibe Shield MCP

by mobb-dev

Analyzes changed files in local Git repositories and returns automated vulnerability fixes through MCP.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Mobb Vibe Shield MCP

Pick your client, then add it in one click or paste the config.

STDIONode.js
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "mobb-dev-mobb-vibe-shield-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "mobbdev"
      ],
      "env": {
        "API_KEY": "YOUR_VALUE_HERE",
        "API_URL": "YOUR_VALUE_HERE",
        "MVS_AUTO_FIX": "YOUR_VALUE_HERE"
      }
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

Values are written into the snippet above so you can paste it as is. They never leave your browser.

We couldn’t confirm it starts correctly

We ran the install command but it didn't respond within our test window — this can mean a slow first-time install rather than a real problem.

npx -y mobbdev

No response to initialize.

This is an experimental automated check and can have false negatives — missing environment variables, a slow cold install, etc. It doesn’t necessarily mean something’s wrong. Last checked 24d ago.

Overview

The mobb-dev/mobb-vibe-shield-mcp MCP server connects an AI assistant to Mobb's vulnerability analysis service for local Git repositories. It checks modified, added, or staged files, uploads them for analysis, and returns vulnerability fixes with patches and explanations through the `fix_vulnerabilities` tool. Run it with `npx mobbdev mcp` and configure an API key in the MCP client. Reach for it when developers want security analysis and remediation suggestions for uncommitted repository changes.

Use cases

  • Scan changed files before committing code
  • Review vulnerability fixes with an AI assistant
  • Analyze staged changes in a local Git repository
  • Generate code patches from detected security findings

Key features

  • Local Git change analysis
  • Automated vulnerability fix suggestions
  • Code patches with explanations
  • MCP tool for AI assistants
  • Configurable Mobb API endpoint
  • Optional automatic-fix override

Tools2

What Mobb Vibe Shield MCP lets your agent do. Expand a tool for its parameters.

Self-reported~33 tokens of context

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 1d ago

Recent health check succeeded.

18/21 checks healthy over the last 78d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 9d ago via OSV.dev · mobbdev (npm)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars68Stargazers on the source repository.
npm downloads23kPackage downloads in the last 30 days.
Last commit1mo agoMost recent push to the default branch.
Install checkInconclusiveDidn't respond in our test window — often a slow first install.
Tools exposed2Callable tools this server registers over MCP.
Directory activity2 viewsConfig copies, upvotes, and views on AllMCPs.

How Mobb Vibe Shield MCP works

What mobb-dev/mobb-vibe-shield-mcp MCP server does

The mobb-dev/mobb-vibe-shield-mcp MCP server lets an MCP-compatible assistant send changes from a local Git repository to Mobb for vulnerability analysis. Its main capability is the fix_vulnerabilities tool, which accepts a repository path and returns detailed remediation results, including code patches and explanations.

The repository must contain modified, added, or staged files. The server validates the path, checks that it is a Git repository, finds the changes, and uploads the relevant files for analysis. The assistant can then present the returned fixes to the developer for review.

Bugsy, the underlying CLI project, also supports separate scan and analyze workflows for SAST results. Those workflows can use Checkmarx, CodeQL, Fortify, or Snyk reports, while the MCP usage described here works against local repository changes.

How it works

After the assistant invokes fix_vulnerabilities, the server verifies the supplied path and checks for Git changes. It sends the changed files to Mobb's service, which analyzes the submitted code and generates fixes for supported vulnerabilities. Results include remediation details rather than an automatic commit to the repository.

The MCP server requires access to Mobb through an API key. By default, it uses https://app.mobb.ai; a different service endpoint can be selected with API_URL. The mobb-dev/mobb-vibe-shield-mcp MCP server is intended for an MCP client that can launch a command-based server such as npx mobbdev mcp.

Setup and configuration

Install and launch the server with:

Terminal
npx mobbdev mcp

Configure the command in an MCP client and provide these environment variables:

  • API_KEY is required and contains the Mobb API key.
  • API_URL is optional and replaces the default Mobb endpoint.
  • MVS_AUTO_FIX is optional. Set it to true or false to override the automatic-fix setting stored in the user's Mobb account.

The API key can be obtained by signing up through Mobb's application. Before invoking the tool, place the target code in a local Git repository and make, stage, or otherwise retain changes for the server to inspect.

Tools and capabilities

  • fix_vulnerabilities: analyzes changes in a local Git repository.
  • Accepts a path string pointing to the repository.
  • Returns vulnerability fixes, code patches, and explanations.
  • Checks repository validity and whether changed files are available.
  • Supports an optional automatic-fix override through MVS_AUTO_FIX.

Limitations and notes

The community edition analyzes public GitHub repositories. Private repository analysis is available only for a limited period, according to the project documentation. The broader Bugsy workflow relies on findings from supported SAST tools rather than independently detecting every vulnerability.

A missing API_KEY prevents the MCP server from running. An invalid Git path or a repository with no modified, added, or staged files prevents the requested analysis. The provided MCP documentation describes one tool and does not document automatic commits, support for arbitrary remote repositories, or a separate vulnerability database exposed directly through MCP.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Mobb Vibe Shield MCP

mobb-dev/mobb-vibe-shield-mcp is an MCP server that connects local Git repositories to Mobb's vulnerability analysis service and exposes the fix_vulnerabilities tool. It checks modified, added, or staged files, uploads them for analysis, and returns vulnerability fixes, code patches, and explanations. It runs with npx mobbdev mcp and requires API_KEY.

Run `npx mobbdev mcp` and add that command to your MCP client's server configuration. Set the required `API_KEY` environment variable, optionally set `API_URL` for a non-default Mobb endpoint, and point the tool at a local Git repository containing changed files.

Yes, the documentation provides a Cursor MCP configuration example. Configure Cursor to launch `npx mobbdev mcp` and pass `API_KEY`, with optional `API_URL` and `MVS_AUTO_FIX` environment variables.

The repository must have modified, added, or staged files. Confirm that the supplied path points to the intended local Git repository and that Git reports changes before invoking `fix_vulnerabilities`.

Related MCP servers

All in Security All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewMobb Vibe Shield MCP AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/mobb-dev-mobb-vibe-shield-mcp?style=directory)](https://allmcps.com/mcp/mobb-dev-mobb-vibe-shield-mcp)
HTML Embed
<a href="https://allmcps.com/mcp/mobb-dev-mobb-vibe-shield-mcp"><img src="https://allmcps.com/api/badge/mobb-dev-mobb-vibe-shield-mcp?style=directory" alt="Mobb Vibe Shield MCP on AllMCPs" /></a>