goklab/guardvibe

Overview

Guardvibe is a security MCP tool for 'vibe coding' with 390 rules and 36 tools. It provides host security, auth coverage mapping, and LLM-powered deep scan for IDOR and business logic flaws. It includes taint analysis for frameworks like Next.js, Supabase, Clerk, Stripe, Prisma, Drizzle, Hono, GraphQL, AI SDK, and MCP.

Best for

Best for
Developers building AI-native applications who want automated security scanning

Use cases

• Scan for security vulnerabilities in AI-native stacks
• Map authentication coverage and identify gaps
• Perform LLM-driven deep scan for business logic flaws

Notes

Guardvibe is a security MCP tool for ‘vibe coding’ with 390 rules and 36 tools. It provides host security, auth coverage mapping, and LLM-powered deep scan for IDOR and business logic flaws. It includes taint analysis for frameworks like Next.js, Supabase, Clerk, Stripe, Prisma, Drizzle, Hono, GraphQL, AI SDK, and MCP.

1 stars on GitHub. Last updated 2026-05-30. Licensed Apache-2.0.

Use cases

• Scan for security vulnerabilities in AI-native stacks
• Map authentication coverage and identify gaps
• Perform LLM-driven deep scan for business logic flaws

Pros

• Comprehensive set of 390 security rules covering many frameworks
• Includes LLM-powered analysis for complex vulnerabilities like IDOR
• Provides CLI and doctor mode for integration

Cons

• Very new project with limited adoption (only 1 star)
• May require significant setup for custom projects
• Relies on LLM which can be inconsistent or costly

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.