Mistral Vibe MCP

The Aikido MCP Server connects Aikido’s security engine to AI coding tools that support MCP. It automatically scans AI generated code for vulnerabilities and hardcoded secrets as soon as it is created.

AI assistants can review their own output, but that review is not perfect. Aikido adds a reliable and consistent security layer that checks every generated snippet with proven scanning rules.

Why connect Aikido via MCP

• Deterministic, independent security checks on every AI generated snippet before it is committed

• Immediate detection and remediation of vulnerabilities and hardcoded secrets in AI assisted workflows

• Real time feedback inside your IDE or agent environment, making AI driven development safer by default

Available Tools

• aikido_full_scan: Runs a combined SAST + Secrets scan on provided files.

• aikido_sast_scan: Runs a local SAST (static application security testing) scan on provided files

• aikido_secrets_scan: Runs a secrets-only scan on provided files

Installation

1

Create a personal access token

In Aikido, go to Settings → Integrations → IDE → MCP

Create a Personal Access Token.

2

Add Aikido MCP server to your Mistral config

Open or create ~/.vibe/config.toml and add the following at the bottom of the file.

Remove the mcp_servers = [] line from the default configuration before continuing.

[[mcp_servers]]
name = "aikido"
transport = "stdio"
command = "sh"
args = ["-c", "AIKIDO_API_KEY='YOUR_TOKEN' npx -y @aikidosec/mcp"]

Replace YOUR_TOKEN with the token from the previous step.

3

Add the Aikido rule to Global AGENTS file

Create the vibe prompts directory if it doesn't exist yet.

mkdir -p ~/.vibe/prompts/

Download the Aikido rule and add it to ~/.vibe/prompts/aikido-rule.txt.

curl -fsSL "https://gist.githubusercontent.com/kidk/aa48cad6db80ba4a38493016aae67712/raw/3644397b7df43423e3da06434491b40bbb79dd47/aikido-rule.txt" \
  -o ~/.vibe/prompts/aikido-rule.txt

4

Finished

Aikido MCP is now available in Mistral Vibe.

Restart Mistral Vibe if it was open.