Maintenance-mode MCP server that adds metacognitive oversight tools for challenging an agent's plan, recording recurring mistakes, and applying session rules before complex or high-risk work continues.
Vibe Check MCP is in final maintenance mode according to the project README, so check the repository and package state before adopting it broadly., The server is an advisory oversight layer; it can challenge assumptions but cannot guarantee safe, correct, or complete decisions., The `vibe_check` tool sends the goal, plan, optional user prompt, progress, uncertainties, and task context to a configured LLM provider for critique., The `vibe_learn` tool can record mistakes, preferences, successes, categories, and solutions for later reflection., Constitution tools can help apply session rules, but they do not enforce external system permissions or prevent client-side actions by themselves.
Privacy notes
Agent plans, prompts, progress, uncertainties, session identifiers, mistakes, and learned preferences can reveal confidential project details., Provider API keys are loaded from environment variables and should be scoped, stored, and rotated according to local policy., Depending on provider selection, request metadata and prompt content may be processed by Gemini, OpenAI, OpenRouter, Anthropic, or compatible endpoints., Avoid sending secrets, private code, customer data, or regulated information in `vibe_check` or `vibe_learn` inputs unless approved for the selected provider.
Author
PV Bhat
Submitted by
oktofeesh1
Claim status
unclaimed
Last verified
2026-06-06
Decision playbook
Review trust signals before you adopt
Signals are present but mixed. Use the checklist below to confirm the source and operational safety for your environment.
Compare context
Selected
0
Current score
63
Baseline
—
Delta
No baseline selected
No major trust-signal divergence detected in the current selection.
Source and provenance checks
Needs review
Confirm ownership and provenance before trusting install instructions.
Source link availableRequired
Open the canonical repository and verify ownership.
Done
Source provenance statusRequired
Marked as source-backed.
Done
Metadata reviewed
No reviewed flag detected in metadata.
Pending
Safety and privacy checks
Complete
Validate risk disclosures before installation or API wiring.
Safety notes presentRequired
Review the listed safety guidance before running commands.
Done
Privacy notes presentRequired
Review data handling notes before connecting accounts or secrets.
Done
Trust level risk gateRequired
Trust level does not block evaluation.
Done
Package and install checks
Needs review
Check package metadata and artifact integrity signals.
Install payload available
Install or copy payload is available for review.
Done
Package verification flag
No package verification flag provided.
Pending
Checksum metadata
No checksum provided for downloaded artifact.
Pending
Compare-driven decision checks
Needs review
Use compare context to validate trade-offs before adoption.
Compare tray has multiple entries
Add at least one more entry to compare trust differences.
5 safety and 4 privacy notes across 4 risk areas. Review closely: credentials & tokens, network access, third-party handling.
4 areas
SafetyGeneralVibe Check MCP is in final maintenance mode according to the project README, so check the repository and package state before adopting it broadly.
SafetyGeneralThe server is an advisory oversight layer; it can challenge assumptions but cannot guarantee safe, correct, or complete decisions.
SafetyThird-party handlingThe `vibe_check` tool sends the goal, plan, optional user prompt, progress, uncertainties, and task context to a configured LLM provider for critique.
SafetyGeneralThe `vibe_learn` tool can record mistakes, preferences, successes, categories, and solutions for later reflection.
SafetyCredentials & tokensConstitution tools can help apply session rules, but they do not enforce external system permissions or prevent client-side actions by themselves.
PrivacyCredentials & tokensAgent plans, prompts, progress, uncertainties, session identifiers, mistakes, and learned preferences can reveal confidential project details.
PrivacyCredentials & tokensProvider API keys are loaded from environment variables and should be scoped, stored, and rotated according to local policy.
PrivacyNetwork accessDepending on provider selection, request metadata and prompt content may be processed by Gemini, OpenAI, OpenRouter, Anthropic, or compatible endpoints.
PrivacyCredentials & tokensAvoid sending secrets, private code, customer data, or regulated information in `vibe_check` or `vibe_learn` inputs unless approved for the selected provider.
Safety notes
Vibe Check MCP is in final maintenance mode according to the project README, so check the repository and package state before adopting it broadly.
The server is an advisory oversight layer; it can challenge assumptions but cannot guarantee safe, correct, or complete decisions.
The `vibe_check` tool sends the goal, plan, optional user prompt, progress, uncertainties, and task context to a configured LLM provider for critique.
The `vibe_learn` tool can record mistakes, preferences, successes, categories, and solutions for later reflection.
Constitution tools can help apply session rules, but they do not enforce external system permissions or prevent client-side actions by themselves.
Privacy notes
Agent plans, prompts, progress, uncertainties, session identifiers, mistakes, and learned preferences can reveal confidential project details.
Provider API keys are loaded from environment variables and should be scoped, stored, and rotated according to local policy.
Depending on provider selection, request metadata and prompt content may be processed by Gemini, OpenAI, OpenRouter, Anthropic, or compatible endpoints.
Avoid sending secrets, private code, customer data, or regulated information in `vibe_check` or `vibe_learn` inputs unless approved for the selected provider.
Prerequisites
Node.js 20 or newer and npx available to the MCP client runtime.
At least one supported LLM provider credential, such as Gemini, OpenAI, OpenRouter, or Anthropic.
Review of the project's maintenance notice before relying on it for long-lived workflows.
Clear policy for what agent plans, prompts, progress notes, and session context may be sent to a second model provider.
Vibe Check MCP is a maintenance-mode Model Context Protocol server for adding
mentor-style plan review to agent workflows. It gives Claude tools for asking a
second model to critique a goal and plan, recording recurring lessons, and
checking session-specific rules before continuing complex work.
The server is designed for moments where an agent may be over-engineering,
following an unsupported assumption, or preparing to take an irreversible step.
It does not replace human review, tests, access control, or policy enforcement.
These sources were reviewed on 2026-06-06. Prefer the live repository,
README, npm registry metadata, package metadata, MCP registry manifest, source
implementation, and license file for current install commands, maintenance
status, supported providers, tool schemas, transport options, and licensing.
Features
npm package @pv-bhat/vibe-check-mcp.
Stdio MCP server launched with npx -y @pv-bhat/vibe-check-mcp start --stdio.
Optional HTTP transport documented upstream for clients that support it.
vibe_check tool for goal and plan critique with optional prompt, progress,
uncertainty, task context, session ID, and provider override fields.
vibe_learn tool for recording mistakes, preferences, successes, categories,
and solutions.
update_constitution, reset_constitution, and check_constitution tools
for session rules.
Gemini, OpenAI, OpenRouter, Anthropic, and Anthropic-compatible endpoint
support in the source implementation.
After restarting the MCP client, ask Claude to call vibe_check before a
high-risk, ambiguous, or irreversible plan, then use the critique to revise the
next step.
Use Cases
Challenge a coding agent's plan before a large refactor.
Ask for an independent critique before running destructive commands.
Record recurring mistakes and fixes with vibe_learn.
Attach temporary session rules to a long agent workflow.
Add a lightweight reflection step before ambiguous product or architecture work.
Compare a proposed plan against uncertainties and task context.
Safety and Privacy
Vibe Check MCP should be treated as advisory. A second model can provide useful
critique, but it can also misunderstand context, miss risks, or produce
overconfident guidance. Continue to rely on tests, review, access controls, and
human judgment for important changes.
Inputs to vibe_check and vibe_learn may include private plans, prompts,
progress notes, code context, lessons learned, and session identifiers. Those
values can be sent to the configured model provider, so keep secrets, customer
data, regulated information, and unreleased project details out of requests
unless that provider and environment are approved.
Duplicate Check
Existing MCP content includes planning, coding, browser, and automation servers,
but no dedicated entry for PV-Bhat/vibe-check-mcp-server or the
@pv-bhat/vibe-check-mcp package was found in content/mcp. This entry is
distinct because it covers metacognitive agent oversight tools rather than a
general coding, browser, or task-management MCP server.
Maintenance-mode MCP server that adds metacognitive oversight tools for challenging an agent's plan, recording recurring mistakes, and applying session rules before complex or high-risk work continues.
MCP server and CLI for AI image and video generation with gallery search, prompt enhancement, model listing, local preferences, ComfyUI workflows, MeiGen Cloud, and OpenAI-compatible provider support.
MCP server that turns an AI coding agent's plan into a local interactive flowchart, approval workflow, execution tracker, branch selector, and plan history before code changes proceed.
✓Vibe Check MCP is in final maintenance mode according to the project README, so check the repository and package state before adopting it broadly.
The server is an advisory oversight layer; it can challenge assumptions but cannot guarantee safe, correct, or complete decisions.
The `vibe_check` tool sends the goal, plan, optional user prompt, progress, uncertainties, and task context to a configured LLM provider for critique.
The `vibe_learn` tool can record mistakes, preferences, successes, categories, and solutions for later reflection.
Constitution tools can help apply session rules, but they do not enforce external system permissions or prevent client-side actions by themselves.
✓MeiGen can submit image and video generation jobs to external providers or a local ComfyUI backend.
Image and video generation may spend credits, use paid APIs, or consume local GPU resources depending on the configured provider.
Local reference images can be compressed and uploaded through the configured upload gateway before being sent to API providers.
Video generation can take minutes, may time out at the MCP client, and should not be retried blindly because jobs or credits may already be in progress.
ComfyUI workflow import and modification can run local workflows; review workflow JSON and custom nodes before use.
✓Overture is an approval and visualization layer; it does not replace code review, tests, access controls, or human judgment.
The server starts a local web UI and WebSocket service for plan review and execution tracking.
Plan approval, pause, rerun, branch selection, and node-status tools affect what the agent is instructed to do next, but they do not sandbox the agent's other tools.
File attachments and node metadata can influence later agent steps, so review attached context and secret fields before approval.
If local UI ports are exposed beyond trusted local clients, plan data and attachments could be visible to unintended users.
✓Shrimp Task Manager persists task plans, project rules, research notes, task status, dependencies, and execution history in `DATA_DIR`.
Tools such as `execute_task`, `complete_task`, `delete_task`, `clear_all_tasks`, and `update_task` can change workflow state and should be reviewed before treating status as authoritative.
Agent-assignment and planning features can make generated work look more complete than it is; require human review before accepting implementation progress.
The optional GUI starts a web interface when enabled; keep it local or protect it with appropriate network controls.
Avoid launching development agents with broad permission-bypass flags solely because an example command suggests it.
Privacy notes
✓Agent plans, prompts, progress, uncertainties, session identifiers, mistakes, and learned preferences can reveal confidential project details.
Provider API keys are loaded from environment variables and should be scoped, stored, and rotated according to local policy.
Depending on provider selection, request metadata and prompt content may be processed by Gemini, OpenAI, OpenRouter, Anthropic, or compatible endpoints.
Avoid sending secrets, private code, customer data, or regulated information in `vibe_check` or `vibe_learn` inputs unless approved for the selected provider.
✓API tokens, OpenAI-compatible credentials, provider base URLs, upload gateway URLs, ComfyUI URLs, preferences, recent generations, prompts, model IDs, and output paths can reveal private creative workflows.
Uploaded reference images may become public URLs through the configured upload gateway before generation.
Prompts, reference images, generated image URLs, generated video URLs, saved outputs, and favorite prompts can contain client work, brand plans, product images, personal likenesses, or unreleased campaigns.
Keep secrets in MCP client environment configuration, review generated media before sharing, and remove local outputs when retention is no longer needed.
✓Plans can include workspace paths, task descriptions, risks, expected outputs, user inputs, selected branches, node outputs, and agent execution status.
Overture stores project history in a project `.overture.json` file when possible and falls back to local user-level storage.
Uploaded attachments are saved under local Overture attachment storage and can include code, documents, images, or secrets if the user provides them.
The UI includes file-reading and attachment endpoints for local plan review, so use it only with trusted local clients and approved workspaces.
The marketplace panel can fetch remote MCP marketplace data, so network policy should account for that optional UI feature.
✓Task descriptions, project rules, research notes, dependency graphs, agent assignments, prompts, and execution history may include private implementation details.
Persisted task data and backups can reveal roadmap items, security work, customer requests, or internal architecture decisions.
Tool arguments and task records may be visible to the MCP client and model provider during planning and execution.
Review `DATA_DIR` before committing, sharing, archiving, or uploading generated task state.
Prerequisites
Node.js 20 or newer and npx available to the MCP client runtime.
At least one supported LLM provider credential, such as Gemini, OpenAI, OpenRouter, or Anthropic.
Review of the project's maintenance notice before relying on it for long-lived workflows.
Clear policy for what agent plans, prompts, progress notes, and session context may be sent to a second model provider.
Node.js 18 or newer.
MCP client that can launch a local Node stdio server.
Optional MeiGen API token, OpenAI-compatible API key, or local ComfyUI workflow configuration for generation tools.
Provider pricing, credits, model limits, and content policy reviewed before image or video generation.
Node.js 18 or newer and npx available to the MCP client runtime.
A coding-agent workflow that will call Overture planning tools before making changes.
Review of local browser, file attachment, and plan-history storage behavior before using it with private workspaces.
Node.js 18 or newer and npm available to the MCP client runtime.
A cloned, installed, and built checkout of `mcp-shrimp-task-manager`, or an installed package that exposes the built server.
A writable `DATA_DIR` for persistent task data and backups.
Agreement on how generated plans, task status, agent assignments, and research notes should be reviewed.
Install
npx -y @pv-bhat/vibe-check-mcp start --stdio
Run `npx -y meigen` from an MCP client, or use the upstream plugin/init commands after reviewing provider credentials and generated-media costs.