Quick answer
Add this address to your AI app, sign in to VibeDoctor with GitHub, Google or an email code, and choose Allow. There is no API key to copy.
https://agent.vibedoctor.io/mcpBefore you start
- A VibeDoctor account. Signing in for the first time creates a free one.
- At least one project, added at app.vibedoctor.io and scanned once, so there are findings to report.
Connect your app
Every app uses the same address and the same sign-in. It takes about a minute.
Claude
claude.ai and Claude Desktop
- Open Settings, then Connectors.
- Find VibeDoctor and choose Connect. Not listed for you yet? Choose Add custom connector and paste the address.
- Sign in on the VibeDoctor page and choose Allow.
ChatGPT
chatgpt.com
- Open chatgpt.com/plugins.
- Find VibeDoctor and connect it. Not listed for you yet? Select +, then Add custom MCP server, and paste the address. Your workspace settings decide whether custom servers are allowed.
- Sign in on the VibeDoctor page and choose Allow.
Claude Code
terminal and IDE
claude mcp add --transport http vibedoctor https://agent.vibedoctor.io/mcp- Run the command above in your terminal.
- In Claude Code, type
/mcp, choose vibedoctor and sign in. - Choose Allow. The tools are ready in the same session.
Codex
CLI and IDE extension
codex mcp add vibedoctor --url https://agent.vibedoctor.io/mcp- Run the command above in your terminal. Codex opens a sign-in page.
- No page? Run
codex mcp login vibedoctor. - Sign in and choose Allow.
How sign-in works
- Add the address. Your app finds VibeDoctor's sign-in page on its own.
- Sign in to VibeDoctor with GitHub, Google or a 6-digit code sent to your email. The first sign-in creates a free account.
- Choose Allow. The page names the app that is asking. That app gets its own access, which you can end at any time.
One sign-in covers every project on your account. If you have more than one, the app asks which one, or you name it: "check acme/shop".
Tools
Your app picks the tool from what you ask. Five tools only read; one saves a note.
| Tool | What it does | Access |
|---|---|---|
vibedoctor_projects |
The projects your account can use, with their GitHub repositories and websites.Try: "Which projects can you see?" | Read-only |
vibedoctor_status |
A project's health: scores, open findings by severity, the files that need attention, and the open findings in one file.Try: "What are the worst issues in acme/shop right now?" | Read-only |
vibedoctor_check |
Checks the files your app sends for security, dependency, quality and performance issues, with line numbers.Try: "Check the files I just changed before I commit." | Read-only |
vibedoctor_graph |
The code map (Vibe X-Ray): modules and their health, what surrounds a function, what a change affects, test coverage and dead code.Try: "What breaks if I change getUser?" | Read-only |
vibedoctor_ask |
Answers questions about your code's structure, regressions and health from the latest scan.Try: "Which module has the most open findings?" | Read-only |
vibedoctor_note |
Records why a finding is a false positive or an accepted risk. The finding stays open; only you can dismiss it.Try: "That SQL finding is a false positive. Note why." | Saves a note |
Example prompts
Before you commit
- "Check the files I changed for security problems before I commit."
- "Does anything in this change leak a secret or an API key?"
- "Did I import a package that does not exist on npm?"
Find your way around
- "What would break if I change the login handler?"
- "Which parts of the code have no tests?"
- "Show me the riskiest module and why."
Work through findings
- "What are the most serious issues in my project right now?"
- "List the open findings in src/api/auth.ts."
- "This finding is a false positive. Record why."
Your data
What VibeDoctor receives
- The code your app sends for a check
- The questions it asks
- The notes it records on findings
What it never sees
- Your conversation with the app
- Files your app does not send
- Your Claude, ChatGPT or OpenAI login
How access works
- Each app gets its own access, stored hashed.
- Code sent for a check is checked in a temporary folder that is deleted when the check ends.
- Disconnecting ends the app's access at once.
The privacy policy has the details.
Limits
- Free accounts get 50 calls per project per day.
vibedoctor_statusandvibedoctor_notedo not count. - The count resets at midnight UTC.
- Paid plans have no daily limit.
- AI-written answers from
vibedoctor_askhave a daily allowance of their own.
Troubleshooting
The app says there are no projects
Add a GitHub repository or a website at app.vibedoctor.io. VibeDoctor scans it, and the tools then report on it.
A project has no scan yet
The tools say so instead of guessing. Start a scan at app.vibedoctor.io; vibedoctor_check works in the meantime.
You signed in with the wrong account
On the Allow page, choose "Use a different account". Or disconnect the app in Settings and connect it again.
The app says the daily limit is reached
See the Limits section. The count resets at midnight UTC, and vibedoctor_status and vibedoctor_note keep working.
Codex did not open a sign-in page
Run codex mcp login vibedoctor.
Claude Code lists vibedoctor as not signed in
Type /mcp, choose vibedoctor and sign in again.
Disconnect
Remove VibeDoctor in the AI app, or open Settings and disconnect it under Connected apps. The app loses access at once.
FAQ
Is it free to connect VibeDoctor to my AI app?
Yes. Signing in for the first time creates a free account, and every app connects the same way. Free accounts can make 50 calls per project per day; paid plans have no call limit.
Which AI apps can I use?
Claude (claude.ai and Claude Desktop), ChatGPT, Codex and Claude Code. They all use the same address, https://agent.vibedoctor.io/mcp, and the same sign-in.
Can VibeDoctor see my chats?
No. It only receives what your app sends to its tools: code to check, questions and notes.
Can my AI app change my code or dismiss findings through VibeDoctor?
No. VibeDoctor never changes your code. vibedoctor_note records a reason on a finding, but the finding stays open, and only you can dismiss it in the dashboard.
Does my AI app need access to my GitHub repository?
No. You add projects at app.vibedoctor.io and VibeDoctor scans them there. Your app reads the results through the tools.
I already connected with the one-line command. Do I need this?
Both work. The one-line command (connect to vibedoctor using https://vibedoctor.io/mcp/start) connects one repository with its own key. https://agent.vibedoctor.io/mcp signs you in instead and works with every project on your account.
How do I disconnect?
Remove VibeDoctor in the app, or open Settings at app.vibedoctor.io and disconnect it under Connected apps. The app loses access at once.
Still need help?
Write to 911@vibedoctor.io. For a security issue, put "Security" in the subject.