Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 1
- 4 2
- 3 1
- 2 1
- 1 0
Trust in production
- Trust it - 60%
- With caveats - 20%
- Wouldn't - 20%
80% would recommend this server
How reviewers scored it
- Setup & docs 3.6
- Auth experience 3.4
- Reliability 3.4
- Maintainer responsiveness 3.4
Why it got a B
VibeHacker's own hosted server. search_products, get_product and list_categories work without a login. submit_product, preview_product, my_submissions and upvote_product need a personal API token, which you can revoke in your settings. Submitted listings go to a human reviewer before they're published. Listing text comes from the wider public, so treat it as untrusted input. The docs also allow the token in the URL for clients that can't set headers, which leaves it in logs and history, so use the header. No advisories on record. Biggest deduction: the public GitHub repo holds only metadata, last changed 4 September 2026, so upkeep is hard to verify.
How to connect
// .cursor/mcp.json
{ "mcpServers": { "vibehacker": { "url": "https://vibehacker.com/api/mcp", "headers": { "Authorization": "Bearer YOUR_TOKEN" } } } }claude mcp add --transport http vibehacker https://vibehacker.com/api/mcp --header "Authorization: Bearer YOUR_TOKEN"Is VibeHacker MCP Server safe?
Is VibeHacker MCP Server safe to use?
VibeHacker MCP Server grades B (solid, with minor gaps). Login is optional, so check that it is turned on in your setup. Updates are occasional, so fixes may be slow to arrive.
Does VibeHacker MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does VibeHacker MCP Server support authentication?
Optionally. It can run with a login, but it does not require one, so turn it on.
Alternatives in Developer Tools
- A Atlassian Rovo MCP ServerOfficial hosted Atlassian server for Jira, Confluence, Jira Service Management, Compass, Bitbucket, Loom, Goals, Projects, and Teams, with OAuth 2.1 sign-in.
- A Buildkite MCP ServerOfficial Buildkite server for pipelines, builds, jobs, logs, annotations, and Test Engine data, hosted or local.
- A Dynatrace Remote MCP ServerDynatrace's hosted MCP server, running inside your Dynatrace SaaS environment, to run and explain DQL, look into problems, vulnerabilities and Kubernetes events, and forecast time series.
- A GitHub MCP ServerOfficial GitHub server for repos, issues, pull requests, Actions, and code security, hosted or local.
- A GitLab MCP ServerGitLab's built-in MCP server for projects, merge requests, work items, code, and CI pipelines, on GitLab.com or your own instance.
Embed this badge
[](https://trustedmcp.io/servers/vibehacker-mcp)<a href="https://trustedmcp.io/servers/vibehacker-mcp"><img src="https://trustedmcp.io/badge/vibehacker-mcp.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
Exactly what I needed from VibeHacker
Been running this for about a month now. Token setup is the fiddliest part, after that it is smooth. Would recommend without hesitation.
Used for Keeping project tickets in sync with code changes
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 3/5
Earned a permanent spot in my config
Installed it on a Friday, it was part of my workflow by Monday. Used a fine-grained token with short expiry and it works fine with that. Issues get answered eventually. Not fast, not abandoned. Hosted endpoint means no local process to babysit.
Used for Letting a coding agent open and triage issues
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Does what it says, no drama
Hooked VibeHacker MCP Server into Claude Code and it worked on the first try. Updates are a bit slow, but it is stable enough that it has not mattered. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. Used a fine-grained token with short expiry and it works fine with that. Good choice if you need VibeHacker in your agent.
Used for Internal developer assistant
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Not ready for anything that matters
Gave it a fair shot over two weeks. Auth is optional, which is convenient locally. I turned it on before sharing it with the team. For anything real I would look elsewhere.
Used for Generating boilerplate from existing patterns
- Setup & docs 2/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Works, just lock it down
Mostly reliable, with the odd timeout. I run it with auth enabled. Without it I would not let it near anything shared. Release pace is moderate, so I pin a version and check in monthly.
Used for CI failure investigation
- Setup & docs 3/5
- Auth experience 2/5
- Reliability 2/5
- Maintainer responsiveness 3/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.