MCP Radar
Serveur MCP

VibeRaven Guides

io.github.ohad6k/viberaven-guides
Connaissance et documentation Sécurité Public et accessible MCP 2025-11-25

Ce que fait ce MCP

Provides VibeRaven security finding explanations, launch checklists, and guides for Supabase and Vercel applications.

Capacités

Outils

3 outils
explain_finding
Explain a VibeRaven finding
Use this when the user asks what a VibeRaven finding id means, for example rls_disabled or env_var_drift, or pastes a finding from a VibeRaven 1.6.1 report. Returns what the rule detects in repository files, why it matters, how to fix it and what it does not check, quoted from viberaven.dev with a source link for each part. It does not read the user's repository, database or Vercel project. Known ids: rls_disabled, rls_no_policies, rls_policy_allows_all_read, rls_policy_allows_all_write, security_definer_function_executable, pooler_port_mismatch, service_role_key_in_client_code, env_var_drift. An unknown id returns found: false and the list of known ids.
Lecture seule Idempotent
Schéma d’entrée 
{'type': 'object', 'required': ['gap_id'], 'properties': {'gap_id': {'type': 'string', 'maxLength': 100, 'minLength': 1, 'description': 'The finding id as printed by VibeRaven, for example rls_disabled.'}}, 'additionalProperties': False}
Schéma de sortie 
{'type': 'object', 'required': ['found', 'viberaven_version'], 'properties': {'found': {'type': 'boolean'}, 'gap_id': {'type': 'string'}, 'detects': {'type': 'array', 'items': {'type': 'object', 'required': ['text', 'source'], 'properties': {'text': {'type': 'string'}, 'source': {'type': 'string'}}}}, 'named_on': {'type': 'string'}, 'known_ids': {'type': 'array', 'items': {'type': 'string'}}, 'how_to_fix': {'type': 'array', 'items': {'type': 'object', 'required': ['text', 'source'], 'properties': {'text': {'type': 'string'}, 'source': {'type': 'string'}}}}, 'does_not_check': {'type': 'array', 'items': {'type': 'object', 'required': ['text', 'source'], 'properties': {'text': {'type': 'string'}, 'source': {'type': 'string'}}}}, 'why_it_matters': {'type': 'array', 'items': {'type': 'object', 'required': ['text', 'source'], 'properties': {'text': {'type': 'string'}, 'source': {'type': 'string'}}}}, 'viberaven_version': {'type': 'string'}}}
launch_checklist
Get a launch checklist
Use this when the user wants a manual pre-launch checklist for a Lovable + Supabase app or a Next.js + Supabase app on Vercel. Returns the checklist published on viberaven.dev for that stack with its sources, and the one optional local VibeRaven step (`npx -y viberaven@1.6.1 check`), which is advice, not a gate. The items are manual checks the user does in their dashboards and code; this tool does not run any of them.
Lecture seule Idempotent
Schéma d’entrée 
{'type': 'object', 'required': ['stack'], 'properties': {'stack': {'enum': ['lovable-supabase', 'nextjs-supabase-vercel'], 'type': 'string', 'description': 'lovable-supabase for a Lovable app with Supabase, nextjs-supabase-vercel for a Next.js app with Supabase deployed on Vercel.'}}, 'additionalProperties': False}
Schéma de sortie 
{'type': 'object', 'required': ['stack', 'title', 'url', 'short_answer', 'items', 'optional_repo_check', 'sources'], 'properties': {'url': {'type': 'string'}, 'items': {'type': 'array', 'items': {'type': 'string'}}, 'stack': {'type': 'string'}, 'title': {'type': 'string'}, 'sources': {'type': 'array', 'items': {'type': 'string'}}, 'short_answer': {'type': 'string'}, 'optional_repo_check': {'type': 'object', 'required': ['command', 'details'], 'properties': {'command': {'type': 'string'}, 'details': {'type': 'string'}}}}}
search_guides
Search VibeRaven launch guides
Use this when the user has a launch question about an AI-built app on Vercel + Supabase, such as Supabase RLS, env vars on Vercel, a Stripe webhook after deploy or a client handoff. Searches the launch guides published on viberaven.dev by keyword and returns up to 5 matches, each with its title, URL and the short answer from the page. It only searches those published pages: it does not browse the web or read the user's project. No match returns an empty list.
Lecture seule Idempotent
Schéma d’entrée 
{'type': 'object', 'required': ['query'], 'properties': {'query': {'type': 'string', 'maxLength': 200, 'minLength': 1, 'description': 'A few keywords from the question, for example "supabase tables missing rls".'}}, 'additionalProperties': False}
Schéma de sortie 
{'type': 'object', 'required': ['results'], 'properties': {'results': {'type': 'array', 'items': {'type': 'object', 'required': ['title', 'url', 'answer'], 'properties': {'url': {'type': 'string'}, 'title': {'type': 'string'}, 'answer': {'type': 'string'}}}}}}
Historique

Modifications récentes des outils

Ajouté
launch_checklist
2 October 2026 02:40
Ajouté
search_guides
2 October 2026 02:40
Ajouté
explain_finding
2 October 2026 02:40
Découvrir

Serveurs MCP similaires

Security Recipes

io.github.stevologic/security-recipes

Provides read-only CVE intelligence, security remediation playbooks, and governance guidance for agentic workflows and MCP enviro…

website-search

com.zeltser/website-search

Provides security article search and structured guidance, templates, frameworks, and review criteria for incident response, threa…

Mitre Attck

io.github.pipeworx-io/mitre-attck

Provides searchable MITRE ATT&CK data on adversary groups, tactics, techniques, mitigations, and related STIX domains.

Bardo

id.bardo/bardo

Provides persistent encrypted notes, versioning, links, identity derivation, attestations, encryption, signing, revocation, and a…

Owasp

io.github.pipeworx-io/owasp

Provides OWASP ASVS chapters and requirements plus defensive guidance from the OWASP Cheat Sheet Series.

Ai Incident Db

io.github.pipeworx-io/ai-incident-db

Provides access to the AI Incident Database, including recent incidents, detailed incident records, and taxonomies for classifyin…

Hex.pm MCP

io.github.joshrotenberg/hexpm-mcp

Searches and inspects Hex.pm Elixir packages, documentation, dependencies, releases, health, and dependency security risks.

Remnant — Collective Memory & Evidence-Backed Trust for AI Agents

com.dedale-bi.remnant/remnant

Provides searchable collective memories, public agent discovery, provenance inspection, and cryptographically verifiable trust pa…