Can I analyze private repositories?

Private repository analysis is allowed only for a limited time; primarily designed for public GitHub repos.

What environment variables are required?

You must set API_KEY with your Mobb API key; API_URL and MVS_AUTO_FIX are optional.

How do I run the MCP server?

Run the command 'npx mobbdev mcp' to start the MCP server locally.

What input does the MCP server require to scan code?

A local git repository path with modified, added, or staged files is required for scanning.

Mobb Vibe Shield MCP

securitysastvulnerability-remediationmcpgit

Automates security vulnerability remediation by analyzing SAST reports or scanning repos, providing fix recommendations via MCP.

Quick Install

Automated & IDE Setup

Copy the AI prompt to install this server into Claude Code, Cursor, or another agent — or use 1-click editor setup below.

Add to Cursor Add to VS Code

Not yet automatically verified

We haven't yet run this listing's install command through our automated sandbox check. This isn't a red flag — we're steadily working through the catalog.

Manual Client & Custom JSON ConfigExpand JSON ▾

Client Config & Setup

Choose your client or environment

Target File:~/Library/Application Support/Claude/claude_desktop_config.json

claude_desktop_config.json

{
  "mcpServers": {
    "mobb-dev-mobb-vibe-shield-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "mobbdev"
      ]
    }
  }
}

💡 Paste the JSON block into your client's configuration file under mcpServers, then restart the application.

Overview

This MCP server integrates with the Mobb platform to identify and remediate security vulnerabilities in code repositories. It supports analyzing pre-generated SAST reports or running scans using Checkmarx or Snyk on public GitHub/GitLab/ADO repos. The server requires a Mobb API key and a local git repository with changes to analyze. Use it to automate vulnerability fixes and receive detailed patch recommendations through AI assistants.

Use cases

Scan public GitHub/GitLab/ADO repositories for security vulnerabilities

Analyze existing SAST reports to generate automated code fixes

Integrate with AI assistants to automatically detect and fix vulnerabilities in changed code

Review and commit recommended security patches generated from scans

Automate security remediation workflows in development pipelines

Key features

Supports SAST tools: Checkmarx, CodeQL, Fortify, Snyk

Two modes: Scan (runs SAST scan) and Analyze (uses existing SAST report)

Generates automated code fixes for detected vulnerabilities

MCP server interface for AI assistant integration

Requires local git repo with uncommitted changes for analysis

Configurable auto-fix application via environment variable

Capabilities & Tool Schemas

Inspect callable tools, capabilities, and parameters exposed to AI agents by Mobb Vibe Shield MCP.

Extracted Tool Capabilities

Supports SAST tools: Checkmarx, CodeQL, Fortify, Snyk

Two modes: Scan (runs SAST scan) and Analyze (uses existing SAST report)

Generates automated code fixes for detected vulnerabilities

MCP server interface for AI assistant integration

Requires local git repo with uncommitted changes for analysis

Configurable auto-fix application via environment variable

Documentation Overview

Mobb Vibe Shield MCP is a 🔒 Security MCP server from mobb-dev listed on AllMCPs. Mobb Vibe Shield identifies and remediates vulnerabilities in both human and AI-written code, ensuring your applications remain secure without slowing development.

Read the full README →View source on GitHub →

Related MCP Servers

View all in Security View all alternatives

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars

Stargazers on the source repository.

npm downloads

20k

Package downloads in the last 30 days.

Last commit

11d ago

Most recent push to the default branch.

Directory activity

2 views

Config copies, upvotes, and views on AllMCPs.

Reviews

No reviews yet — be the first to share how this listing worked for you.

Frequently Asked Questions about Mobb Vibe Shield MCP

No, it relies on vulnerability findings from supported SAST tools like Checkmarx, CodeQL, Fortify, and Snyk.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:

Live Dynamic SVG Preview

Mobb Vibe Shield MCP AllMCPs Directory Badge

Markdown (GitHub README)

[![AllMCPs](https://allmcps.com/api/badge/mobb-dev-mobb-vibe-shield-mcp?style=directory)](https://allmcps.com/mcp/mobb-dev-mobb-vibe-shield-mcp)

HTML Embed

<a href="https://allmcps.com/mcp/mobb-dev-mobb-vibe-shield-mcp"><img src="https://allmcps.com/api/badge/mobb-dev-mobb-vibe-shield-mcp?style=directory" alt="Mobb Vibe Shield MCP on AllMCPs" /></a>

Technical Specs & Signals

CategorySecurity

PricingBring your own API key (usage-based cost)

9/12 checks healthy over the last 32d

59Quality signal: Good · 59/100How this signal is calculated ▾

Server availabilityNot measured

Not scored for repo-hosted servers — we can't reach the running server, only its GitHub page. Hosted MCP endpoints are health-checked live.

Verified ownership10/20

Documentation & tools23/30

Adoption & activity11/15

Community engagement0/10

A guidance signal from public completeness & health data — not a user rating. New listings start lower and rise as they add docs, get verified, and grow adoption. Signals we can't observe for a listing are skipped, not counted against it.

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 23d ago via OSV.dev · mobbdev (npm)

★ Featured

AllMCPs Server

The official MCP server for AllMCPs.com - submit and manage tools directly from your AI. The open directory for MCP servers. Connect Claude, Cursor, Windsurf, and AI agents to databases, tools, files, and APIs. Explore 10,000+ servers. AllMCPs is the premier, open directory for discovering, evaluating, and installing Model Context Protocol (MCP) servers to equip AI agents and LLMs with real-world superpowers.

Explore Server →

Own this project?

This directory is pre-filled from public sources. Claim via GitHub README, site badge, or DNS TXT to unlock edit access and the Official badge — proof is checked automatically, then reviewed by our team.

Free dofollow backlink: add your website and place the AllMCPs badge on it — no claim needed. We detect it automatically and keep it verified as long as the badge stays live.

Claim & get free dofollow