Skip to content

Add vibewatch plugin - #530

Open
brandonjamesmarshall wants to merge 2 commits into
xai-org:mainfrom
brandonjamesmarshall:add-vibewatch-plugin
Open

Add vibewatch plugin#530
brandonjamesmarshall wants to merge 2 commits into
xai-org:mainfrom
brandonjamesmarshall:add-vibewatch-plugin

Conversation

@brandonjamesmarshall

Copy link
Copy Markdown

What this PR does

Adds the Vibewatch plugin (new plugin, remote source).

Ownership

  • I own this plugin or have the right to distribute it.
  • The source repo is published under our official org (Vibewatch-io).

Checklist

  • Added/updated exactly one entry in .grok-plugin/marketplace.json (valid JSON, kebab-case name).
  • Remote source pins a full 40-char lowercase commit sha, and that commit is public + reachable.
  • Regenerated .grok-plugin/plugin-index.json (python3 scripts/generate-plugin-index.py).
  • python3 scripts/validate-catalog.py passes locally.
  • python3 scripts/generate-plugin-index.py --check passes locally.
  • homepage + clear description set; local plugins include README.md + .grok-plugin/plugin.json.
  • License is stated (Apache-2.0).

Security

  • No curl | bash, remote-code download/exec, or postinstall RCE.
  • No reading/exfiltration of secrets, tokens, .env, or env vars.
  • Hooks and MCP scope are least-privilege.
  • Network endpoints this plugin calls (and why): https://api.vibewatch.io/mcp/ only — the hosted Vibewatch MCP server the plugin exists to connect. Eight read-only tools (all annotated readOnlyHint), no write surface. Also declared in the repo README.
  • Credentials/permissions it requires (and why): standard MCP OAuth sign-in against the server (browser consent, org-scoped, read-only). The plugin ships no credentials, no hooks, and no scripts — manifests, one skill, and a logo.

Notes for reviewers

Vibewatch (vibewatch.io) is a community-sentiment product for web3 teams; this plugin is our official packaging, sourced from our org. The connection path was verified against Grok Bot before this submission: custom-connector add of the same server URL completed OAuth dynamic client registration, browser consent, token exchange, tool discovery, and live tool calls. The plugin repo layout follows railwayapp/railway-skills.

Official Vibewatch plugin: hosted MCP server (read-only community
sentiment tools, MCP OAuth) plus the use-vibewatch skill, sourced from
Vibewatch-io/vibewatch-mcp at a pinned commit.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@brandonjamesmarshall
brandonjamesmarshall requested a review from a team September 2, 2026 21:57
The first commit's JSON re-serialization reformatted every existing
entry's inline arrays; this restores upstream formatting so the PR
adds exactly the vibewatch entry.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant