Getting started
Introduction
What Vibefilo is, how a check works, and what leaves your machine.
Vibefilo runs security and GDPR checks for vibe-coded apps inside your coding agent. It is an MCP server: it gives your agent the rules and fix guidance, your agent does the work on your machine, and every result lands on your dashboard at vibefilo.dev.
How it works
- Install the MCP server with one command. It connects Claude Code, Cursor, Codex, Windsurf and VS Code.
- Sign in once with a device code in your browser.
- Ask your agent to check the app. It estimates the cost, starts a run and scans locally.
- The agent submits findings with masked evidence. You see them on the dashboard, and the agent fixes what is safe and re-checks.
What leaves your machine
Vibefilo never scans your code or your site itself. Your agent sends only findings: a rule, a severity, a file path, a line number and a short snippet with secret values masked.