Docs

What is VibeTesting Agent?

Hosted orchestration around the open-source anal-probe scanner: dashboard, billing, deploy webhooks, GitHub checks, MCP for agents, badges, and history. The OSS CLI stays free forever.

Ownership security

Full scans only run against apps you prove you control. Two paths:

1. Domain email + inbox click — Sign in with an email on the same domain as the app (e.g. you@acme.com for app.acme.com). We email a one-click link; open it to prove you control that inbox. Free/public mail (Gmail, etc.) cannot prove app ownership this way.
2. DNS TXT — In your DNS control panel, add vibetesting-verify=<token> on the hostname or _vta.<hostname>, then click Check DNS.

Hosted workflow

1. Sign in (prefer an email on your product domain when possible).
2. Create a project with your production URL.
3. Prove ownership via domain email (inbox click) or DNS TXT.
4. Upgrade for cadence (weekly / daily / every commit).
5. POST the deploy webhook after every successful release.
6. Review score, baseline diffs, and agent fix packs.

API

curl -X POST $APP/api/v1/scans \
  -H "Authorization: Bearer sk_live_…" \
  -H "content-type: application/json" \
  -d '{"url":"https://example.com","authorized":true,"mode":"fast"}'

MCP

See Dashboard → MCP after login. Tools: list_projects, start_scan, get_scan, list_findings, get_fix_prompt, compare_baseline, get_badge_markdown.

GitHub App

Point the App webhook to /api/webhooks/github. On deployment_status success, VibeTesting Agent scans and posts a Check Run. Link projects with githubRepo: owner/name. GitHub linking is for hooks — not a substitute for ownership proof.