Getting started

Introduction

What Vibefilo is, how a check works, and what leaves your machine.

Vibefilo runs security and GDPR checks for vibe-coded apps inside your coding agent. It is an MCP server: it gives your agent the rules and fix guidance, your agent does the work on your machine, and every result lands on your dashboard at vibefilo.dev.

How it works

  1. Install the MCP server with one command. It connects Claude Code, Cursor, Codex, Windsurf and VS Code.
  2. Sign in once with a device code in your browser.
  3. Ask your agent to check the app. It estimates the cost, starts a run and scans locally.
  4. The agent submits findings with masked evidence. You see them on the dashboard, and the agent fixes what is safe and re-checks.

What leaves your machine

Vibefilo never scans your code or your site itself. Your agent sends only findings: a rule, a severity, a file path, a line number and a short snippet with secret values masked.

Next steps