Skip to content

VibeKit

by VibeKit-Bot · remote · no sign-in to list tools · v0.8.0 · published by GitHub user VibeKit-Bot

Build, deploy, and operate hosted web apps on VibeKit (vibekit.bot) from any MCP client.

Deletes · 3Final · 1Changes · 13
CompareRegistry entry

36 tools: 3 can delete or cancel things, 1 do something that can't be undone, 13 change things and 19 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http vibekit https://mcp.vibekit.bot/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn
  • Warnvibekit_db_query

    The server marks "vibekit_db_query" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"idempotentHint":true}; The name "vibekit_db_query" says "query": a word for reading.

    What this check looks for
  • Warnvibekit_cancel_task

    The server marks "vibekit_cancel_task" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true}; The name "vibekit_cancel_task" says "cancel": a word for removing or ending something.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

36 tools

Deletes or cancels 3Claude Code: deny
  • vibekit_cancel_taskCancel a running task by taskId.1 finding

    Why it is in this group

    • The name "vibekit_cancel_task" says "cancel": a word for removing or ending something.
    • The server marks it not destructive (destructiveHint: false), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "vibekit_cancel_task" not destructive (destructiveHint: false), and its own name, description or input give the class "destructive".

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true}; The name "vibekit_cancel_task" says "cancel": a word for removing or ending something.

      What this check looks for
    Description, as the server wrote it
    Cancel a running task by taskId. No-op if it has already finished.

    Annotations the server declares

    • title: VibeKit Cancel Task
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
  • vibekit_delete_appPermanently delete a hosted app — stops the container and removes its workspace, database, env vars, and subdomain.No findings

    Why it is in this group

    • The name "vibekit_delete_app" says "delete": a word for removing or ending something.
    • The description says "Permanently delete".
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Permanently delete a hosted app — stops the container and removes its workspace, database, env vars, and subdomain. Irreversible (the GitHub repo is NOT touched). Confirm with the user before calling.

    Annotations the server declares

    • title: VibeKit Delete App
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
  • vibekit_delete_scheduleDelete a scheduled recurring task by scheduleId.No findings

    Why it is in this group

    • The name "vibekit_delete_schedule" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Delete a scheduled recurring task by scheduleId. Confirm with the user first.

    Annotations the server declares

    • title: VibeKit Delete Schedule
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: true
Can't be undone 1Claude Code: ask
  • vibekit_chatSend a message to an app's built-in AI coding agent, which reads, writes, and modifies the app's code and redeploys it.No findings

    Why it is in this group

    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send a message to an app's built-in AI coding agent, which reads, writes, and modifies the app's code and redeploys it. Use for 'build/make a change to my app' requests. If the agent finishes quickly you get its reply directly. Otherwise you get status:'working' — do NOT resend; instead give the user LIVE progress: poll vibekit_agent_status every few seconds and relay the current step from activity.status ('editing the homepage…', 'deploying…') until activity.done, then read vibekit_agent_history for the final reply.

    Annotations the server declares

    • title: VibeKit Chat with Agent
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
Changes things 13Claude Code: ask
  • vibekit_create_appCreate a new hosted app from a starter template and deploy it live at <subdomain>.vibekit.bot.No findings

    Why it is in this group

    • The name "vibekit_create_app" says "create": a word for a change.
    Description, as the server wrote it
    Create a new hosted app from a starter template and deploy it live at <subdomain>.vibekit.bot. Call vibekit_list_templates first to pick a valid template. To deploy existing code from a GitHub repo instead, use vibekit_deploy.

    Annotations the server declares

    • title: VibeKit Create App
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • vibekit_create_scheduleCreate a recurring coding task that the AI runs automatically on a cron schedule (e.g.No findings

    Why it is in this group

    • The name "vibekit_create_schedule" says "create": a word for a change.
    Description, as the server wrote it
    Create a recurring coding task that the AI runs automatically on a cron schedule (e.g. a weekly SEO pass). Use for 'every Monday, do X to my repo' requests.

    Annotations the server declares

    • title: VibeKit Create Schedule
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • vibekit_db_queryRun a read-only SQL query against an app's Postgres database and return up to 200 result rows.1 finding

    Why it is in this group

    • The name "vibekit_db_query" says "query": a word for reading.
    • The description's first verb is "run": a word for a change.
    • The input takes a statement or command to run (input.sql), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "vibekit_db_query" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"idempotentHint":true}; The name "vibekit_db_query" says "query": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Run a read-only SQL query against an app's Postgres database and return up to 200 result rows. SELECT only — writes and DDL (INSERT/UPDATE/DELETE/ALTER/DROP/…) are rejected server-side; use vibekit_chat or vibekit_submit_task to have the agent make data or schema changes. Call vibekit_db_schema first to learn the tables. SQL string, max 5000 chars.

    Annotations the server declares

    • title: VibeKit Run SQL Query
    • readOnlyHint: true
    • idempotentHint: true
  • vibekit_deployDeploy a GitHub repo to VibeKit hosting, live at <subdomain>.vibekit.bot (Fargate container behind nginx, SSL automatic).No findings

    Why it is in this group

    • The name "vibekit_deploy" says "deploy": a word for a change.
    Description, as the server wrote it
    Deploy a GitHub repo to VibeKit hosting, live at <subdomain>.vibekit.bot (Fargate container behind nginx, SSL automatic). Use when the code already lives in a GitHub repo; for a starter template instead use vibekit_create_app.

    Annotations the server declares

    • title: VibeKit Deploy
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • vibekit_enable_databaseProvision a Postgres database for an app (idempotent — safe if already enabled).No findings

    Why it is in this group

    • The name "vibekit_enable_database" says "enable": a word for a change.
    Description, as the server wrote it
    Provision a Postgres database for an app (idempotent — safe if already enabled). Required before the vibekit_db_* tools work. Note: free-tier apps need the $3/mo Database add-on.

    Annotations the server declares

    • title: VibeKit Enable Database
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
  • vibekit_redeployRedeploy an existing app to pull and ship the latest code.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Redeploy an existing app to pull and ship the latest code. Use after pushing changes to the app's GitHub repo.

    Annotations the server declares

    • title: VibeKit Redeploy
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
  • vibekit_restart_appRestart a hosted app's container.No findings

    Why it is in this group

    • The name "vibekit_restart_app" says "restart": a word for a change.
    Description, as the server wrote it
    Restart a hosted app's container. Use when an app is wedged, or to apply changed environment variables.

    Annotations the server declares

    • title: VibeKit Restart App
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
  • vibekit_rollback_deployRoll an app back to a previous deploy (get the deployId from vibekit_list_deploys).No findings

    Why it is in this group

    • The name "vibekit_rollback_deploy" says "deploy": a word for a change.
    Description, as the server wrote it
    Roll an app back to a previous deploy (get the deployId from vibekit_list_deploys). The container restarts on the rolled-back build; reversible by rolling forward again.

    Annotations the server declares

    • title: VibeKit Rollback Deploy
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
  • vibekit_run_qaKick off an automated QA run (headless-browser checks) against a hosted app.No findings

    Why it is in this group

    • The name "vibekit_run_qa" says "run": a word for a change.
    Description, as the server wrote it
    Kick off an automated QA run (headless-browser checks) against a hosted app. Poll vibekit_qa_status for results.

    Annotations the server declares

    • title: VibeKit Run QA
    • readOnlyHint: false
    • destructiveHint: false
  • vibekit_set_envSet or update environment variables for an app (merges with existing).No findings

    Why it is in this group

    • The name "vibekit_set_env" says "set": a word for a change.
    Description, as the server wrote it
    Set or update environment variables for an app (merges with existing). The app must be restarted or redeployed for changes to take effect.

    Annotations the server declares

    • title: VibeKit Set Env Vars
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
  • vibekit_start_appStart a stopped hosted app's container.No findings

    Why it is in this group

    • The name "vibekit_start_app" says "start": a word for a change.
    Description, as the server wrote it
    Start a stopped hosted app's container. Use to bring an app stopped via vibekit_stop_app back online.

    Annotations the server declares

    • title: VibeKit Start App
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
  • vibekit_stop_appStop a hosted app's container.No findings

    Why it is in this group

    • The name "vibekit_stop_app" says "stop": a word for a change.
    Description, as the server wrote it
    Stop a hosted app's container. The app stays in your account and can be brought back with vibekit_start_app. Use to take an app offline without deleting it.

    Annotations the server declares

    • title: VibeKit Stop App
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
  • vibekit_submit_taskSubmit an autonomous coding task.No findings

    Why it is in this group

    • The name "vibekit_submit_task" says "submit": a word for a change.
    Description, as the server wrote it
    Submit an autonomous coding task. The AI writes the code, commits to GitHub, and (by default) deploys to <subdomain>.vibekit.bot. Returns a taskId — poll vibekit_get_task or block with vibekit_wait_for_task. Use for 'build X' or 'change X' work against a repo.

    Annotations the server declares

    • title: VibeKit Submit Task
    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
Only reads 19Claude Code: allow
  • vibekit_accountGet VibeKit account info: plan, credit balance, and usage.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get VibeKit account info: plan, credit balance, and usage.

    Annotations the server declares

    • title: VibeKit Account Info
    • readOnlyHint: true
    • idempotentHint: true
  • vibekit_agent_historyGet the recent chat history between the user and an app's AI agent.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the recent chat history between the user and an app's AI agent.

    Annotations the server declares

    • title: VibeKit Agent History
    • readOnlyHint: true
  • vibekit_agent_statusCheck whether an app's AI agent is idle or working, and get its LIVE progress.No findings

    Why it is in this group

    • The name "vibekit_agent_status" says "status": a word for reading.
    Description, as the server wrote it
    Check whether an app's AI agent is idle or working, and get its LIVE progress. Returns activity.status = the current human-readable build step (e.g. 'editing index.html', 'deploying'), activity.steps = the steps so far, and activity.done = whether the turn finished. Poll this every few seconds while a build is running and relay activity.status to the user so they see progress. Once activity.done is true the response also includes liveCheck = a server-side fetch of the deployed page ({ url, ok, httpStatus, title }); use it to confirm the app is live and renders — do NOT curl/fetch the URL yourself, your sandbox may block it.

    Annotations the server declares

    • title: VibeKit Agent Status
    • readOnlyHint: true
  • vibekit_app_envGet the environment variables configured for an app (names and values).No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get the environment variables configured for an app (names and values). Read-only — use vibekit_set_env to change them.

    Annotations the server declares

    • title: VibeKit Get Env Vars
    • readOnlyHint: true
    • idempotentHint: true
  • vibekit_app_logsFetch recent container/application logs for an app.No findings

    Why it is in this group

    • The name "vibekit_app_logs" says "log": a word for reading.
    Description, as the server wrote it
    Fetch recent container/application logs for an app. Use this to debug crashes, errors, or a deploy that isn't serving.

    Annotations the server declares

    • title: VibeKit App Logs
    • readOnlyHint: true
  • vibekit_database_statusGet an app's database status and connection info (whether it's provisioned, frozen, etc.).No findings

    Why it is in this group

    • The name "vibekit_database_status" says "status": a word for reading.
    Description, as the server wrote it
    Get an app's database status and connection info (whether it's provisioned, frozen, etc.).

    Annotations the server declares

    • title: VibeKit Database Status
    • readOnlyHint: true
    • idempotentHint: true
  • vibekit_db_schemaGet an app's database schema — every table and its columns.No findings

    Why it is in this group

    • The description's first verb is "get": a word for reading.
    Description, as the server wrote it
    Get an app's database schema — every table and its columns. Always call this before writing a query with vibekit_db_query.

    Annotations the server declares

    • title: VibeKit Database Schema
    • readOnlyHint: true
    • idempotentHint: true
  • vibekit_db_tableBrowse rows of one table with pagination and optional sorting — a quick read-only alternative to hand-writing a SELECT.No findings

    Why it is in this group

    • The description's first verb is "browse": a word for reading.
    Description, as the server wrote it
    Browse rows of one table with pagination and optional sorting — a quick read-only alternative to hand-writing a SELECT.

    Annotations the server declares

    • title: VibeKit Browse Table
    • readOnlyHint: true
    • idempotentHint: true
  • vibekit_get_appGet full details for one hosted app — status, subdomain/URL, repo, runtime, and database/domain config.No findings

    Why it is in this group

    • The name "vibekit_get_app" says "get": a word for reading.
    Description, as the server wrote it
    Get full details for one hosted app — status, subdomain/URL, repo, runtime, and database/domain config. Use the appId from vibekit_list_apps.

    Annotations the server declares

    • title: VibeKit Get App
    • readOnlyHint: true
    • idempotentHint: true
  • vibekit_get_skillFetch the full content of a specific skill — implementation patterns, code examples, and best practices for a domain.No findings

    Why it is in this group

    • The name "vibekit_get_skill" says "get": a word for reading.
    Description, as the server wrote it
    Fetch the full content of a specific skill — implementation patterns, code examples, and best practices for a domain. Fetch on-demand when you need guidance on a specific topic.

    Annotations the server declares

    • title: VibeKit Get Skill
    • readOnlyHint: true
    • openWorldHint: true
  • vibekit_get_taskGet the status and result of a task submitted via vibekit_submit_task.No findings

    Why it is in this group

    • The name "vibekit_get_task" says "get": a word for reading.
    Description, as the server wrote it
    Get the status and result of a task submitted via vibekit_submit_task.

    Annotations the server declares

    • title: VibeKit Get Task
    • readOnlyHint: true
  • vibekit_list_appsList all hosted apps in your VibeKit account, each with its id, subdomain, status, and live URL.No findings

    Why it is in this group

    • The name "vibekit_list_apps" says "list": a word for reading.
    Description, as the server wrote it
    List all hosted apps in your VibeKit account, each with its id, subdomain, status, and live URL. Start here to get an appId for the other app tools.

    Annotations the server declares

    • title: VibeKit List Apps
    • readOnlyHint: true
    • idempotentHint: true
  • vibekit_list_deploysList an app's recent deploys, newest first, with status and commit info.No findings

    Why it is in this group

    • The name "vibekit_list_deploys" says "list": a word for reading.
    Description, as the server wrote it
    List an app's recent deploys, newest first, with status and commit info. Find a deployId here to pass to vibekit_rollback_deploy.

    Annotations the server declares

    • title: VibeKit List Deploys
    • readOnlyHint: true
    • idempotentHint: true
  • vibekit_list_schedulesList all of the account's scheduled recurring tasks.No findings

    Why it is in this group

    • The name "vibekit_list_schedules" says "list": a word for reading.
    Description, as the server wrote it
    List all of the account's scheduled recurring tasks.

    Annotations the server declares

    • title: VibeKit List Schedules
    • readOnlyHint: true
    • idempotentHint: true
  • vibekit_list_skillsList available implementation skills (IDs, names, descriptions, tags) from the VibeKit skills registry.No findings

    Why it is in this group

    • The name "vibekit_list_skills" says "list": a word for reading.
    Description, as the server wrote it
    List available implementation skills (IDs, names, descriptions, tags) from the VibeKit skills registry. Discover skills here before fetching one with vibekit_get_skill.

    Annotations the server declares

    • title: VibeKit List Skills
    • readOnlyHint: true
    • openWorldHint: true
  • vibekit_list_tasksList recent coding tasks, optionally filtered by status.No findings

    Why it is in this group

    • The name "vibekit_list_tasks" says "list": a word for reading.
    Description, as the server wrote it
    List recent coding tasks, optionally filtered by status.

    Annotations the server declares

    • title: VibeKit List Tasks
    • readOnlyHint: true
    • idempotentHint: true
  • vibekit_list_templatesList the starter templates available to vibekit_create_app (e.g.No findings

    Why it is in this group

    • The name "vibekit_list_templates" says "list": a word for reading.
    Description, as the server wrote it
    List the starter templates available to vibekit_create_app (e.g. landing, dashboard, blog, saas, crud-api). Call this before vibekit_create_app to choose a valid template.

    Annotations the server declares

    • title: VibeKit List Templates
    • readOnlyHint: true
    • idempotentHint: true
  • vibekit_qa_statusGet the latest automated QA results and status for an app.No findings

    Why it is in this group

    • The name "vibekit_qa_status" says "status": a word for reading.
    Description, as the server wrote it
    Get the latest automated QA results and status for an app.

    Annotations the server declares

    • title: VibeKit QA Status
    • readOnlyHint: true
  • vibekit_wait_for_taskBlock until a submitted task finishes (or the timeout), polling every 5 seconds, then return its result.No findings

    Why it is in this group

    • The name "vibekit_wait_for_task" says "wait": a word for reading.
    Description, as the server wrote it
    Block until a submitted task finishes (or the timeout), polling every 5 seconds, then return its result. Use right after vibekit_submit_task when you want the final result inline.

    Annotations the server declares

    • title: VibeKit Wait for Task
    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.8.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http vibekit https://mcp.vibekit.bot/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__vibekit__vibekit_list_apps",
      "mcp__vibekit__vibekit_get_app",
      "mcp__vibekit__vibekit_list_templates",
      "mcp__vibekit__vibekit_app_logs",
      "mcp__vibekit__vibekit_app_env",
      "mcp__vibekit__vibekit_agent_status",
      "mcp__vibekit__vibekit_agent_history",
      "mcp__vibekit__vibekit_database_status",
      "mcp__vibekit__vibekit_db_schema",
      "mcp__vibekit__vibekit_db_table",
      "mcp__vibekit__vibekit_list_deploys",
      "mcp__vibekit__vibekit_qa_status",
      "mcp__vibekit__vibekit_get_task",
      "mcp__vibekit__vibekit_list_tasks",
      "mcp__vibekit__vibekit_wait_for_task",
      "mcp__vibekit__vibekit_list_schedules",
      "mcp__vibekit__vibekit_account",
      "mcp__vibekit__vibekit_list_skills",
      "mcp__vibekit__vibekit_get_skill"
    ],
    "ask": [
      "mcp__vibekit__vibekit_create_app",
      "mcp__vibekit__vibekit_deploy",
      "mcp__vibekit__vibekit_redeploy",
      "mcp__vibekit__vibekit_restart_app",
      "mcp__vibekit__vibekit_stop_app",
      "mcp__vibekit__vibekit_start_app",
      "mcp__vibekit__vibekit_set_env",
      "mcp__vibekit__vibekit_chat",
      "mcp__vibekit__vibekit_enable_database",
      "mcp__vibekit__vibekit_db_query",
      "mcp__vibekit__vibekit_rollback_deploy",
      "mcp__vibekit__vibekit_run_qa",
      "mcp__vibekit__vibekit_submit_task",
      "mcp__vibekit__vibekit_create_schedule"
    ],
    "deny": [
      "mcp__vibekit__vibekit_delete_app",
      "mcp__vibekit__vibekit_cancel_task",
      "mcp__vibekit__vibekit_delete_schedule"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as vibekit. Review it before you use it.