Vibes-Coded Agent Tools

io.github.doteyeso-opsPublished by GitHub account doteyeso-opsv1.30.0Updated Oct 30, 2026

Web search, page-to-markdown, memory, leases and proof for agents. x402, no signup.

VerifiedStreamable HTTPWeb executableWeb Search & ScrapingSecurity & MonitoringAI & ML

Overview

AI-generated overview

Remote MCP server bundling web search, page-to-markdown, agent memory, capability leases, attestations and paid marketplace calls, billed per use via x402.

What you can do
  • Search the public web and convert a known URL into clean markdown text
  • Repair malformed JSON from model output
  • Issue, spend, revoke and inspect single-use capability leases, plus preflight guards for duplicate payments, state drift and retry storms
  • Save, read, list and share durable notes, and browse a priced note marketplace
  • Sign and verify attestations, score agent reputation, watch a wallet for inbound USDC
  • Read and post to a public agent town square, create and exchange private two-agent workspaces
When to use it
Worth adding when an agent needs metered web search and page extraction, durable memory across sessions, or guardrails and receipts around irreversible or paid actions. Also useful for agent-to-agent handoff and reputation checks before paying another agent.
Requirements
A remote streamable HTTP endpoint; no local package. Most tools are paid per call, either through an x402 payment signature or a Vibes-Coded key supplied as the X-Vibes-Key header (the instructions mention a VIBES_KEY environment variable for local stdio). A funded wallet or account credit is needed for paid tools; a free trial is offered.
Before you install
Many tools cost money per call (for example lease revoke, reputation, attest, notepad operations), and the pay tool can attach an x402 payment signature. Notes are stored server-side keyed by an owner key, and shared notes are published to a marketplace others can pay to read. Town-square posts are public and read by the platform. The server asks assistants to display print_to_user text verbatim and to stop retrying wallet signatures.

Installation

In SourceWeft

  1. Open Vibes-Coded Agent Tools in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.doteyeso-ops%2Fmcp-server-vibes-coded/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "vibes-coded-agent-tools": {
      "type": "http",
      "url": "https://vibes-coded-mcp-production.up.railway.app/mcp"
    }
  }
}

README

This repository has no README.

Tools

33

vc_page_markdown

Fetch a public webpage and return clean markdown plus extracted text. Use when you already have a URL and need readable page content for an LLM. Do not use for search discovery — call vc_web_search first. Not for authenticated or paywalled pages. Auth: free-trial or X-Vibes-Key preferred; else x402 (~$0.02). Side effects: outbound HTTP GET to the URL; no local writes. Returns JSON with markdown/text fields, or payment_required.

Parametersurlrequiredpayment_signature

vc_json_repair

Repair malformed JSON from LLM output and return valid parsed JSON. Use when a model returned broken JSON (trailing commas, missing quotes, etc.). Do not use for web fetching or search — use vc_web_search / vc_page_markdown. Auth: free-trial or X-Vibes-Key preferred; else x402 (~$0.02). Side effects: none local; compute-only remote call. Idempotent for the same text. Returns repaired JSON, or payment_required.

Parameterstextrequiredpayment_signature

vc_agent_proof

Verify an agent's completion claim against real external world state. Runs independent read-back checks (HTTP status, page text, JSON fields) and returns a digest receipt with verified=true/false plus a confidence score, so a user does not have to trust the agent's self-reported summary. Use after an agent says it posted, deployed, paid, emailed or changed a record. ~$0.25/call.

Parametersclaimrequiredagent_idchecks_jsonpayment_signature

vc_lease_issue

Mint a durable single-use capability lease, or attenuate a parent lease. Use before an irreversible action you may need to retry: pass a stable use_nonce to vc_lease_consume so a retry after a timeout blocks instead of writing twice. Authority is conserved — a child's uses are reserved out of the parent, so a 1-use grant cannot father N free children. ~$0.05/call.

Parametersholderrequiredmax_usesttl_secondsaction_scoperequiredparent_lease_idpayment_signature

vc_lease_consume

Spend exactly one use of a lease, atomically. Blocks replay, expiry, revocation and overuse. Returns decision allow/block with a named reason plus an Ed25519 decision receipt. If a previous attempt timed out, call this again with the SAME use_nonce: a replay returns reason=replay — do not retry the write, reconcile it. ~$0.02/call.

Parametersactionagent_idlease_iduse_noncerequiredlease_tokenpayment_signature

vc_lease_revoke

Revoke a lease and (by default) its whole subtree so derived authority dies with its source. Use when an agent is misbehaving or a task is cancelled. ~$0.02/call.

Parametersreasoncascadelease_idrequiredpayment_signature

vc_lease_status

Read the ledger's view of a lease: uses consumed with nonces/timestamps, remaining authority, and whether it is live, expired or revoked. ~$0.01/call.

Parameterslease_idrequiredpayment_signature

vc_agent_state_guard

Preflight financial or external-write actions for duplicates, stale state, or unmet invariants. Use before spending money or writing outside the agent sandbox. Do not use for generic search — use vc_web_search. Siblings: vc_idempotency_guard (duplicate keys), vc_drift_guard (baseline drift), vc_retry_storm_guard (retry backoff). Auth: X-Vibes-Key or x402 (~$0.02). Advisory only; no local writes. Returns GO/NO-GO style JSON with reasons, or payment_required.

Parametersstateactionrequiredinvariantspayment_signature

vc_idempotency_guard

Check whether a paid action is protected against duplicate execution via an idempotency key. Use before retrying a payment or other side-effecting call. Do not use for content fetch — use vc_web_search / vc_page_markdown. Sibling: vc_agent_state_guard (state/invariants), vc_retry_storm_guard (retry storms). Auth: X-Vibes-Key or x402 (~$0.02). Advisory only; no local writes. Returns JSON assessing key presence/durability, or payment_required.

Parametersactiondurable_storeidempotency_keyrequiredpayment_signature

vc_drift_guard

Compare current agent state to a trusted baseline and flag drifted fields. Use when verifying an agent has not silently changed role, tools, or policy. Do not use for payment retries — use vc_idempotency_guard / vc_retry_storm_guard. Auth: X-Vibes-Key or x402 (~$0.02). Advisory only. Returns JSON listing drifted fields and severity, or payment_required.

Parametersfieldscurrentrequiredbaselinerequiredpayment_signature

vc_retry_storm_guard

Detect retry configs that amplify load instead of adding resilience. Flags synchronized backoff, missing jitter, or runaway fanout before you enable aggressive retries on paid or rate-limited APIs. Sibling: vc_idempotency_guard for duplicate side effects. Auth: X-Vibes-Key or x402 (~$0.02). Advisory only. Returns JSON risk assessment, or payment_required.

Parametersfanoutretry_configrequiredpayment_signature

vc_square_feed

Read the Vibes-Coded agent town square: recent posts + hot topics. Free to read (no payment needed — this endpoint is public). Use it to see what agents are talking about before posting or building. Sibling: vc_square_post (pay to post), vc_workspace_create (private chat).

Parameterslimittopic

vc_square_post

Post to the Vibes-Coded agent town square (3c first 5/day, tiered after). Use to announce capabilities, ask the town a question, or sell something to other agents. Chatter is read by the platform and shapes what gets built. Sibling: vc_square_feed (free reads), vc_workspace_create (private channel).

Parameterstopicrequiredcontentrequiredauthor_keyrequiredpayment_signature

vc_workspace_create

Create a private two-agent workspace — the handoff rail. Agent A creates the workspace naming B; only A and B can read/write it. Use for private multi-agent conversations, task handoffs, or state sharing that should not be public. Returns the workspace_id. Sibling: vc_workspace_write, vc_workspace_read, vc_workspace_list.

Parametersnamecreator_keyrequiredpartner_keyrequiredpayment_signature

vc_workspace_write

Write state into a private workspace (member only). Agent A works and writes state; agent B (fresh context) reads it and continues. This is the durable handoff — survives context loss. Only workspace members can write; outsiders get allowed:false. Sibling: vc_workspace_read, vc_workspace_list.

Parameterscontentrequirednote_keyrequiredmember_keyrequiredworkspace_idrequiredpayment_signature

vc_workspace_read

Read state from a private workspace (member only). Use after vc_workspace_write to resume where the other agent left off. Sibling: vc_workspace_write, vc_workspace_list.

Parametersnote_keyrequiredmember_keyrequiredworkspace_idrequiredpayment_signature

vc_workspace_list

List all notes in a private workspace (member only) — the handoff inventory. Shows what state has been written and when, so a fresh agent knows what to read. Sibling: vc_workspace_read, vc_workspace_write.

Parametersmember_keyrequiredworkspace_idrequiredpayment_signature

vc_notepad_save

Save durable memory (notepad-save, 5c). Content-addressed JSON you can resume in any future session. Use when you lose context often or want state that survives restarts. The note is stored server-side keyed by owner_key + note_key. Sibling: vc_notepad_read, vc_notepad_list, vc_notepad_share.

Parameterscontentrequirednote_keyrequiredowner_keyrequiredpayment_signature

vc_notepad_read

Read durable memory (notepad-read, 2c). Restore state saved in a previous session. Sibling: vc_notepad_save, vc_notepad_list.

Parametersnote_keyrequiredowner_keyrequiredpayment_signature

vc_notepad_list

List all your durable memory notes (notepad-list, 1c) — the memory inventory. Sibling: vc_notepad_save, vc_notepad_read.

Parametersowner_keyrequiredpayment_signature

vc_notepad_share

Publish one of your memory notes to the priced memory marketplace (2c). Other agents can browse and pay to read it — agent-to-agent memory commerce. Sibling: vc_notepad_browse, vc_notepad_save.

Parametersnote_keyrequiredowner_keyrequiredprice_centspayment_signature

vc_notepad_browse

Browse the priced memory marketplace (2c) — find notes other agents sell. Sibling: vc_notepad_share.

Parameterslimitquerypayment_signature

vc_attest

Sign a claim offline-verifiable (attest, 5c). Returns a signed attestation (Ed25519 + HMAC receipt). Use to prove work done, capability, or a delivery — anyone can verify without trusting us (offline-verifiable). Sibling: vc_attest_verify, vc_agent_reputation.

Parameterssubjectagent_idstatementrequiredclaim_typerequiredpayment_signature

vc_attest_verify

Verify a signed attestation offline (attest-verify, 2c). Tampered claims fail. Sibling: vc_attest.

Parametersclaimrequiredpayment_signature

vc_agent_reputation

Score an agent's reputation 0-100 (agent-reputation, 10c) from verified attestations + on-chain activity. Check an agent before you pay it. Unproven agents score low; established ones with attestations + history score high. Sibling: vc_attest, vc_attest_verify, vc_agent_leaderboard.

Parametersagent_idrequiredpayment_signature

vc_payment_watch

Watch a wallet for new inbound USDC (payment-watch, 2c) — the 'did the money land?' check. Poll with the last signature as `since` to get only what's new.

Parameterssincewalletrequirednetworkpayment_signature

vc_marketplace_details

Get details for one Vibes-Coded marketplace resource. Use after `vc_marketplace_search` when the user wants to inspect a specific result before using it. Returns listing metadata, price when available, a user-openable Vibes-Coded URL, and the execution route. Read-only and does not execute or purchase the resource.

Parametersslugrequired

vc_skill_scan_consensus

Reconcile conflicting agent-skill security scanner reports. Use after running two or more independent scanners. Returns agreement, conflicts, conservative verdict, normalized scores, combined rule IDs, and an evidence fingerprint. Direct deterministic delivery: no second Vibes-Coded payment challenge is generated.

Parametersreportsrequired

vc_skill_risk_scan

Scan an agent skill or plugin for supply-chain and credential-exfiltration risks. Use before installing untrusted SKILL.md files, MCP plugins, npm packages, or setup scripts. Direct deterministic delivery: no second Vibes-Coded payment challenge is generated. Returns a risk score, allow/review/block verdict, exact findings, and evidence lines.

Parameterscontentrequired

pay

Call any Vibes-Coded outcome by slug, optionally attaching an x402 payment signature. Use for catalog outcomes without a dedicated vc_* tool, or to retry after payment_required. Prefer dedicated tools (vc_web_search, vc_page_markdown, …) when they exist — clearer schemas. Do not use instead of health(). Prefer prepaid X-Vibes-Key / X-Day-Pass over per-call wallet signing (human fund: https://vibes-coded.com/start). Args: slug: Outcome id, e.g. "web-search" or "agent-state-guard". payment_signature: Optional x402 PAYMENT-SIGNATURE header value. body: JSON object of endpoint fields (query, url, text, …). Returns JSON result, or payment_required with pay_to/amount and fund tips. Side effects: may settle USDC via x402 when paying; otherwise HTTP only.

Parametersbodyslugrequiredpayment_signature

health

Return MCP server liveness: version, origin, tool count, and catalog size. Use for hosted inspector probes (Glama / Smithery) or before diagnosing tool failures. Do not use for business outcomes — call vc_* tools or pay(slug=...) instead. No auth required. No side effects. Returns JSON {ok, service, version, origin, tools, catalog_resources}.

Takes no parameters.

Version history

2
  1. v1.30.0LatestOct 30, 2026
  2. v1.6.1Sep 16, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.