Pre-launch checks for AI-built apps: leaked keys, Supabase RLS gaps, browser-exposed env vars.
Connect Remote server
claude mcp add --transport http vibescale https://vibe.elya-studio.com/mcp
{
"mcpServers": {
"vibescale": {
"url": "https://vibe.elya-studio.com/mcp"
}
}
}
{
"servers": {
"vibescale": {
"type": "http",
"url": "https://vibe.elya-studio.com/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://vibe.elya-studio.com/mcp
Tools 3 found in our last check
scan_app_launch_readinessReads one public web app the way a browser does (its HTML, the same-site scripts it loads and any source maps they point to) and reports what any visitor can already see: server secret keys shipped to the browser (Supabase service_role, OpenAI, Anthropic, Stripe, AWS, GitHub, Se…
lint_supabase_rlsReads Supabase SQL (migrations or a schema dump) as text and lists tables in exposed schemas without row level security, RLS with no policy, policies that allow everything or read user_metadata, policies without a role, write grants to anon, SECURITY DEFINER functions and views,…
check_env_exposureTakes environment variable NAMES (never values) and says, for each one, whether the build tool ships it to every visitor (VITE_, NEXT_PUBLIC_, EXPO_PUBLIC_, REACT_APP_, PUBLIC_, GATSBY_, NUXT_PUBLIC_) and whether its name looks like a server secret that must not be there. Use wh…
Details
| Endpoint | https://vibe.elya-studio.com/mcp (Streamable HTTP) |
| First published | 12 Nov 2026 |
| Last updated | 12 Nov 2026 |
| Registry name | io.github.Ranqint/vibescale |
More databases servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
