Vibe Check MCP server documentation

Reference for the Grove Tech AI Model Context Protocol server: installation, authentication, tools, daily limits and troubleshooting.

Transport and authentication

The hosted server exposes a /mcp endpoint over Streamable HTTP and authenticates exclusively via the Authorization: Bearer <API key> header. Credentials in the URL are rejected. The published @grovetech/vibe-mcp package is a stdio proxy that forwards requests to the hosted endpoint.

Tools

  • scan_url — runs a full Vibe Code Scan of the given URL.
  • get_findings — returns scan findings, filterable by severity and category.
  • explain_finding — explains a finding (impact + fix) in Czech and English.
  • list_recent_scans — the last N completed scans.
  • compare_scans — diff of two scans: fixed, introduced, persisting, score change.
  • scan_mcp_config — scans the MCP servers in your client config (prompt injection, tool poisoning, tool shadowing, secrets in env, rug pull).

Limits

Daily MCP call volume depends on your plan. Every response carries the remaining quota so your assistant can warn you before you hit the limit.