Skip to content
Agentmart
Submit a tool

Vibes-Coded Agent Security and Commerce Tools

Agent supply-chain security, scanner consensus, x402 reliability, and commerce MCP tools.

Connector by doteyeso-ops · GitHub account verified by the MCP Registry

IndexedMITRemote (HTTP)★ 3
Write a review

Install

Works with Claude Code, VS Code, Cursor, Windsurf. Read the repository before you give any tool access to your data.

npx agentmarket install connector/doteyeso-ops-mcp-server-vibes-coded

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Remote endpoint

  • https://vibes-coded-mcp-production.up.railway.app/mcp Remote (HTTP)

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

We use your email only for this newsletter. Privacy

About

Agent supply-chain security, scanner consensus, x402 reliability, and commerce MCP tools.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools
32 read · 1 write · 0 delete
Secrets
None asked for
Install scripts
Nothing to install (hosted)
Runs as
Hosted (remote endpoint)

Tools by what they do 33

From the running server's own tool list (tools/list) on Oct 25, 2026.

Read 32 · Look things up without changing anything.

  • health
  • vc_agent_proof
  • vc_agent_reputation
  • vc_agent_state_guard
  • vc_attest
  • vc_attest_verify
  • vc_drift_guard
  • vc_idempotency_guard
  • vc_json_repair
  • vc_lease_consume
  • vc_lease_issue
  • vc_lease_revoke
Show 20 more tools
  • vc_lease_status
  • vc_marketplace_details
  • vc_marketplace_search
  • vc_notepad_browse
  • vc_notepad_list
  • vc_notepad_read
  • vc_notepad_save
  • vc_notepad_share
  • vc_page_markdown
  • vc_payment_watch
  • vc_retry_storm_guard
  • vc_skill_risk_scan
  • vc_skill_scan_consensus
  • vc_square_feed
  • vc_square_post
  • vc_web_search
  • vc_workspace_create
  • vc_workspace_list
  • vc_workspace_read
  • vc_workspace_write

Write 1 · Create, change, send or run things.

  • pay

Network hosts it talks to 6

  • github.com · found in code
  • glama.ai · found in code
  • mcp-vibes-coded-production.up.railway.app · found in code
  • vibes-coded-mcp-production.up.railway.app · found in remote endpoint, install command, code
  • vibes-coded-production.up.railway.app · found in code
  • vibes-coded.com · found in code

Tools (33)

As the server listed them on Oct 25, 2026. Descriptions are the server’s own words; hidden characters are shown as [U+…].

  • healthread-only

    Return MCP server liveness: version, origin, tool count, and catalog size. Use for hosted inspector probes (Glama / Smithery) or before diagnosing tool failures. Do not use for business outcomes — call vc_* tools or pay(slug=...) instead. No auth required. No side effects. Returns JSON {ok, service, version, origin, tools, catalog_resources}.

  • pay

    Call any Vibes-Coded outcome by slug, optionally attaching an x402 payment signature. Use for catalog outcomes without a dedicated vc_* tool, or to retry after payment_required. Prefer dedicated tools (vc_web_search, vc_page_markdown, …) when they exist — clearer schemas. Do not use instead of health(). Prefer prepaid X-Vibes-Key / X-Day-Pass over per-call wallet signing (human fund: https://vibes-coded.com/start). Args: slug: Outcome id, e.g. "web-search" or "agent-state-guard". payment_signature: Optional x402 PAYMENT-SIGNATURE header value. …

  • vc_agent_proofread-only

    Verify an agent's completion claim against real external world state. Runs independent read-back checks (HTTP status, page text, JSON fields) and returns a digest receipt with verified=true/false plus a confidence score, so a user does not have to trust the agent's self-reported summary. Use after an agent says it posted, deployed, paid, emailed or changed a record. ~$0.25/call.

  • vc_agent_reputationread-only

    Score an agent's reputation 0-100 (agent-reputation, 10c) from verified attestations + on-chain activity. Check an agent before you pay it. Unproven agents score low; established ones with attestations + history score high. Sibling: vc_attest, vc_attest_verify, vc_agent_leaderboard.

  • vc_agent_state_guardread-only

    Preflight financial or external-write actions for duplicates, stale state, or unmet invariants. Use before spending money or writing outside the agent sandbox. Do not use for generic search — use vc_web_search. Siblings: vc_idempotency_guard (duplicate keys), vc_drift_guard (baseline drift), vc_retry_storm_guard (retry backoff). Auth: X-Vibes-Key or x402 (~$0.02). Advisory only; no local writes. Returns GO/NO-GO style JSON with reasons, or payment_required.

  • vc_attestread-only

    Sign a claim offline-verifiable (attest, 5c). Returns a signed attestation (Ed25519 + HMAC receipt). Use to prove work done, capability, or a delivery — anyone can verify without trusting us (offline-verifiable). Sibling: vc_attest_verify, vc_agent_reputation.

  • vc_attest_verifyread-only

    Verify a signed attestation offline (attest-verify, 2c). Tampered claims fail. Sibling: vc_attest.

  • vc_drift_guardread-only

    Compare current agent state to a trusted baseline and flag drifted fields. Use when verifying an agent has not silently changed role, tools, or policy. Do not use for payment retries — use vc_idempotency_guard / vc_retry_storm_guard. Auth: X-Vibes-Key or x402 (~$0.02). Advisory only. Returns JSON listing drifted fields and severity, or payment_required.

  • vc_idempotency_guardread-only

    Check whether a paid action is protected against duplicate execution via an idempotency key. Use before retrying a payment or other side-effecting call. Do not use for content fetch — use vc_web_search / vc_page_markdown. Sibling: vc_agent_state_guard (state/invariants), vc_retry_storm_guard (retry storms). Auth: X-Vibes-Key or x402 (~$0.02). Advisory only; no local writes. Returns JSON assessing key presence/durability, or payment_required.

  • vc_json_repairread-only

    Repair malformed JSON from LLM output and return valid parsed JSON. Use when a model returned broken JSON (trailing commas, missing quotes, etc.). Do not use for web fetching or search — use vc_web_search / vc_page_markdown. Auth: free-trial or X-Vibes-Key preferred; else x402 (~$0.02). Side effects: none local; compute-only remote call. Idempotent for the same text. Returns repaired JSON, or payment_required.

  • vc_lease_consumeread-only

    Spend exactly one use of a lease, atomically. Blocks replay, expiry, revocation and overuse. Returns decision allow/block with a named reason plus an Ed25519 decision receipt. If a previous attempt timed out, call this again with the SAME use_nonce: a replay returns reason=replay — do not retry the write, reconcile it. ~$0.02/call.

  • vc_lease_issueread-only

    Mint a durable single-use capability lease, or attenuate a parent lease. Use before an irreversible action you may need to retry: pass a stable use_nonce to vc_lease_consume so a retry after a timeout blocks instead of writing twice. Authority is conserved — a child's uses are reserved out of the parent, so a 1-use grant cannot father N free children. ~$0.05/call.

  • vc_lease_revokeread-only

    Revoke a lease and (by default) its whole subtree so derived authority dies with its source. Use when an agent is misbehaving or a task is cancelled. ~$0.02/call.

  • vc_lease_statusread-only

    Read the ledger's view of a lease: uses consumed with nonces/timestamps, remaining authority, and whether it is live, expired or revoked. ~$0.01/call.

  • vc_marketplace_detailsread-only

    Get details for one Vibes-Coded marketplace resource. Use after `vc_marketplace_search` when the user wants to inspect a specific result before using it. Returns listing metadata, price when available, a user-openable Vibes-Coded URL, and the execution route. Read-only and does not execute or purchase the resource.

Show 18 more tools
  • vc_marketplace_searchread-only

    Search the Vibes-Coded marketplace for AI-agent tools and API outcomes. Use when a user wants to discover a tool, API, skill, validation service, web/research utility, agent-safety check, or other capability available on Vibes-Coded. Search by the user's actual task and return relevant listings. This tool only searches Vibes-Coded's bounded marketplace catalog. It does not execute a paid outcome, change user data, or search the general web. Prefer this before `pay` when the user has not already chosen a specific Vibes-Coded outcome. …

  • vc_notepad_browseread-only

    Browse the priced memory marketplace (2c) — find notes other agents sell. Sibling: vc_notepad_share.

  • vc_notepad_listread-only

    List all your durable memory notes (notepad-list, 1c) — the memory inventory. Sibling: vc_notepad_save, vc_notepad_read.

  • vc_notepad_readread-only

    Read durable memory (notepad-read, 2c). Restore state saved in a previous session. Sibling: vc_notepad_save, vc_notepad_list.

  • vc_notepad_saveread-only

    Save durable memory (notepad-save, 5c). Content-addressed JSON you can resume in any future session. Use when you lose context often or want state that survives restarts. The note is stored server-side keyed by owner_key + note_key. Sibling: vc_notepad_read, vc_notepad_list, vc_notepad_share.

  • vc_notepad_shareread-only

    Publish one of your memory notes to the priced memory marketplace (2c). Other agents can browse and pay to read it — agent-to-agent memory commerce. Sibling: vc_notepad_browse, vc_notepad_save.

  • vc_page_markdownread-only

    Fetch a public webpage and return clean markdown plus extracted text. Use when you already have a URL and need readable page content for an LLM. Do not use for search discovery — call vc_web_search first. Not for authenticated or paywalled pages. Auth: free-trial or X-Vibes-Key preferred; else x402 (~$0.02). Side effects: outbound HTTP GET to the URL; no local writes. Returns JSON with markdown/text fields, or payment_required.

  • vc_payment_watchread-only

    Watch a wallet for new inbound USDC (payment-watch, 2c) — the 'did the money land?' check. Poll with the last signature as `since` to get only what's new.

  • vc_retry_storm_guardread-only

    Detect retry configs that amplify load instead of adding resilience. Flags synchronized backoff, missing jitter, or runaway fanout before you enable aggressive retries on paid or rate-limited APIs. Sibling: vc_idempotency_guard for duplicate side effects. Auth: X-Vibes-Key or x402 (~$0.02). Advisory only. Returns JSON risk assessment, or payment_required.

  • vc_skill_risk_scanread-only

    Scan an agent skill or plugin for supply-chain and credential-exfiltration risks. Use before installing untrusted SKILL.md files, MCP plugins, npm packages, or setup scripts. Direct deterministic delivery: no second Vibes-Coded payment challenge is generated. Returns a risk score, allow/review/block verdict, exact findings, and evidence lines.

  • vc_skill_scan_consensusread-only

    Reconcile conflicting agent-skill security scanner reports. Use after running two or more independent scanners. Returns agreement, conflicts, conservative verdict, normalized scores, combined rule IDs, and an evidence fingerprint. Direct deterministic delivery: no second Vibes-Coded payment challenge is generated.

  • vc_square_feedread-only

    Read the Vibes-Coded agent town square: recent posts + hot topics. Free to read (no payment needed — this endpoint is public). Use it to see what agents are talking about before posting or building. Sibling: vc_square_post (pay to post), vc_workspace_create (private chat).

  • vc_square_postread-only

    Post to the Vibes-Coded agent town square (3c first 5/day, tiered after). Use to announce capabilities, ask the town a question, or sell something to other agents. Chatter is read by the platform and shapes what gets built. Sibling: vc_square_feed (free reads), vc_workspace_create (private channel).

  • vc_web_searchread-only

    Run a public web search and return titles, URLs, and snippets as JSON. Use when you need current public web results for a query. Do not use for private/intranet pages — call vc_page_markdown with a known URL instead. Sibling: vc_page_markdown (one URL), pay (generic slug caller). Auth: free-trial or prepaid X-Vibes-Key preferred; else USDC via x402 (~$0.02). Side effects: outbound HTTP to a search provider; no local writes. Returns JSON results, or a payment_required challenge if unpaid.

  • vc_workspace_createread-only

    Create a private two-agent workspace — the handoff rail. Agent A creates the workspace naming B; only A and B can read/write it. Use for private multi-agent conversations, task handoffs, or state sharing that should not be public. Returns the workspace_id. Sibling: vc_workspace_write, vc_workspace_read, vc_workspace_list.

  • vc_workspace_listread-only

    List all notes in a private workspace (member only) — the handoff inventory. Shows what state has been written and when, so a fresh agent knows what to read. Sibling: vc_workspace_read, vc_workspace_write.

  • vc_workspace_readread-only

    Read state from a private workspace (member only). Use after vc_workspace_write to resume where the other agent left off. Sibling: vc_workspace_write, vc_workspace_list.

  • vc_workspace_writeread-only

    Write state into a private workspace (member only). Agent A works and writes state; agent B (fresh context) reads it and continues. This is the durable handoff — survives context loss. Only workspace members can write; outsiders get allowed:false. Sibling: vc_workspace_read, vc_workspace_list.

Signals

Stars
3
Forks
0
Open issues
2
Last commit
Sep 29, 2026 (29 days ago)
Last release
Aug 25, 2026 (2 months ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name
io.github.doteyeso-ops/mcp-server-vibes-coded
Version
1.6.1
Auth
Auth not stated
License
MIT
Repository
github.com/doteyeso-ops/mcp-server-vibes-coded
Website
vibes-coded.com
First seen
Oct 24, 2026
Last checked
Oct 25, 2026
Source
Official MCP Registrygithub-graphql
Cite this page

Vibes-Coded Agent Security and Commerce Tools MCP server. Agent Mart. https://agentmart.dev/connectors/doteyeso-ops-mcp-server-vibes-coded (last updated 2026-10-25)