100% LOCAL — YOUR CODE NEVER LEAVES YOUR MACHINE

Your code. Your machine.
Full audit.

FORGE scans your codebase for security vulnerabilities, code quality issues, and architectural problems — then your AI assistant fixes them.

Get StartedGet API Key
1

Install

pip3 install vibe2prod

One command. Installs the FORGE engine and MCP server.

2

Scan

forge_scan(path=".")

Discovers security, quality, and architecture issues in your codebase.

3

Fix

/forge

Claude reads the report and fixes findings using your own Edit tools. Locally.

~/my-project
100%
Private

Code never leaves your machine. Only anonymous telemetry metrics — no file paths, no code content.

5-20 min
Scan Time

Full security, quality, and architecture audit. Depends on codebase size.

$0.50-2
Per Scan

Your own OpenRouter API key. No subscription. Pay only for what you use.

Quick Start

You need an OpenRouter API key (free signup, pay per token).

1. Install FORGE
pip3 install vibe2prod
2. Add MCP server with your API key
claude mcp add forge \
  -e OPENROUTER_API_KEY=sk-or-v1-your-key \
  -- forge-mcp
Optional: sync scans to your dashboard
# Add these flags before the -- separator:
  -e VIBE2PROD_API_KEY=v2p_your-key \
3. Install the /forge skill (enables auto-fixing)
mkdir -p ~/.claude/skills/forge && curl -sL https://vibe2prod.net/forge-skill.md -o ~/.claude/skills/forge/SKILL.md
4. Use it
In Claude Code: "Scan my codebase with forge"Then: /forge to fix all findings automatically

No API key? The scan will show a clear error message asking you to set one up.

Usage tracking: Anonymous scan metrics only (finding counts, not code). Opt-in data sharing available for improving FORGE.

Optional: Connect to Dashboard

FORGE works fully offline. Add an API key to sync scan results to your dashboard.

Dashboard Sync

3 steps:

  1. Create an account at vibe2prod.net
  2. Go to Settings and click Generate API Key
  3. Add the key to your MCP setup (see below)
claude mcp add forge \
  -e OPENROUTER_API_KEY=sk-or-... \
  -e VIBE2PROD_API_KEY=v2p_... \
  -- forge-mcp

CLI scans appear in your dashboard alongside cloud scans, grouped by repo with readiness trends over time.

Data Sharing (Opt-in)

Add VIBE2PROD_DATA_SHARING=true to your MCP setup

Shares anonymized finding patterns (types, severities, fix rates)

NEVER shares code, file paths, or repo identity

Helps improve FORGE's detection accuracy for everyone

Works with any MCP-compatible tool

Claude CodeCursorWindsurfClineContinue