NestDaddy

VibeScale

io.github.Ranqint/vibescale · v1.0.0

Pre-launch checks for AI-built apps: leaked keys, Supabase RLS gaps, browser-exposed env vars.

Connect Remote server

Terminal
claude mcp add --transport http vibescale https://vibe.elya-studio.com/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "vibescale": {
      "url": "https://vibe.elya-studio.com/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "vibescale": {
      "type": "http",
      "url": "https://vibe.elya-studio.com/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://vibe.elya-studio.com/mcp

Tools 3 found in our last check

  • scan_app_launch_readiness

    Reads one public web app the way a browser does (its HTML, the same-site scripts it loads and any source maps they point to) and reports what any visitor can already see: server secret keys shipped to the browser (Supabase service_role, OpenAI, Anthropic, Stripe, AWS, GitHub, Se…

  • lint_supabase_rls

    Reads Supabase SQL (migrations or a schema dump) as text and lists tables in exposed schemas without row level security, RLS with no policy, policies that allow everything or read user_metadata, policies without a role, write grants to anon, SECURITY DEFINER functions and views,…

  • check_env_exposure

    Takes environment variable NAMES (never values) and says, for each one, whether the build tool ships it to every visitor (VITE_, NEXT_PUBLIC_, EXPO_PUBLIC_, REACT_APP_, PUBLIC_, GATSBY_, NUXT_PUBLIC_) and whether its name looks like a server secret that must not be there. Use wh…

Details

Endpointhttps://vibe.elya-studio.com/mcp (Streamable HTTP)
First published12 Nov 2026
Last updated12 Nov 2026
Registry nameio.github.Ranqint/vibescale

More databases servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.