A-

npm:vibe-hnindex

https://www.npmjs.com/package/vibe-hnindex
90/100 · MCP Trust Grade · checked 2h ago · MCP 0.11.3

What it offers — 24 tools · Developer Tools

index_codebase

Index an entire codebase directory for later search. Scans all supported source files, chunks them, and stores in the knowledge base with keyword and

index_file

Index or re-index a single file in an existing project. The project must have been indexed with index_codebase first.

search

Search the indexed codebase. Returns matching code chunks with file paths, line numbers, and relevance scores. Modes: keyword (FTS5), semantic (vector

list_projects

List all indexed projects with their metadata including file count, chunk count, and last indexed time.

server_diagnostics

Health check: Ollama, Qdrant, embedding probe, and config summary. Optionally pass project_name to compare SQLite chunk count with Qdrant point count.

agent_rules_stub

Short markdown stub for CLAUDE.md / AGENTS.md: project path, index stats, optional package.json script hints (test/build/lint), rule-based bullets — n

delete_project

Delete a project and all its indexed data from the knowledge base (both SQLite and Qdrant).

get_file_info

Get information about a specific indexed file including its chunks, line ranges, and language.

project_stats

Get detailed statistics about an indexed project: language breakdown, file/chunk counts, total lines, and averages. Useful for understanding codebase

watch_project

Start watching an indexed project for file changes. When a source file is saved, it will be automatically re-indexed. Uses debouncing to avoid excessi

unwatch_project

Stop watching a project for file changes.

codebase_overview

Get a high-level overview of an indexed project: directory structure, language breakdown, entry points, detected frameworks, and key exports. Useful f

project_briefing

Rule-based project briefing from README, CLAUDE.md, package.json, and indexed stats (no LLM). Results are cached in SQLite until the index fingerprint

onboarding_prompt

Single markdown blob for agent onboarding: cached project briefing, stats, and optional recent git activity. Output is truncated to max_chars.

symbol_lookup

Find symbol definitions (classes, functions, interfaces, methods) by name in the indexed symbol table. Faster than full-text search for exact identifi

file_summary

Get a detailed summary of a specific file: purpose, exports, imports, files that depend on it, and complexity. More efficient than reading the full fi

get_dependencies

List all imports/dependencies of a specific file. Shows what this file depends on.

get_dependents

List all files that import/depend on a specific file. Shows what would be affected if this file changes.

+6 more tools

Spec / packaging20%100
Security (OWASP MCP)30%70
Maintenance / popularity20%100
Tool hygiene15%95
Transparency / provenance15%100

Findings

INFO Static analysis of npm package vibe-hnindex@0.11.3 (stdio server — no remote endpoint). Reliability/behavioral signals require running it; not measured.
Grade another server

We re-grade npm:vibe-hnindex on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.

Share this report card

A 1200×630 card with the grade + audit — drop it in a post, Slack, or your repo.

MCP Trust report card — npm:vibe-hnindex grade A-
Share on X Open card image

Embed this grade

A live badge — it re-verifies itself and shows current stability. Static scorecards can't. Paste it in your README or site to show users you're independently audited.

MCP Trust Grade A- · wmcp.sh
[![MCP Trust Grade A-](https://wmcp.sh/mcp/grade/npm%3Avibe-hnindex/badge.svg)](https://wmcp.sh/mcp/grade/npm%3Avibe-hnindex)
<a href="https://wmcp.sh/mcp/grade/npm%3Avibe-hnindex"><img src="https://wmcp.sh/mcp/grade/npm%3Avibe-hnindex/badge.svg" alt="MCP Trust Grade A- · wmcp.sh"></a>

Agents: check this before connecting

Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:

https://wmcp.sh/mcp/trust
How this grade is computed. An open, independent rubric — Spec conformance (20%), Security mapped to the OWASP MCP Top 10 (30%), Reliability (20%), Tool hygiene (15%), Transparency (15%) — run by connecting to the server and inspecting its real MCP surface. The grade is free and identical whether or not the operator pays. v1 uses static + spec signals from a single connection; continuous uptime, real latency, and annotation-truthing (declared readOnly vs observed behavior) layer on via the wmcp.sh proxy.