VibeSec Settings
VibeSec settings control which VibeSec capabilities are available across your organization. You can enable or disable individual modules based on your organization's requirements.
To configure VibeSec settings:
Go to Settings > VibeSec, and enable or disable the required settings.
Modules
Agent Guidelines
Enables Agent Guidelines across the organization.
When enabled, OX analyzes prompts sent to AI coding agents, predicts potential vulnerabilities that may be introduced, and provides relevant security guidelines to help generate secure code.
Disabling this setting stops developers from receiving Agent Guidelines.
Default: Enabled.
Inline Code Annotations
Adds an inline comment in generated code whenever a VibeSec guideline is applied.
This setting is available only when Agent Guidelines are enabled.
Default: Disabled.
AI Governance
Enables AI Governance capabilities.
AI Governance provides visibility into AI usage across your organization and allows you to govern approved and restricted AI tools, services, and models.
Default: Enabled.
MCP Servers
Tracks MCP servers used by AI agents, controls blocking, and includes them in the AI inventory and governance views.
Default: Enabled.
Stdio MCP Servers
Blocks the use of stdio-based MCP servers. These servers run locally and may introduce additional security risks.
OX Security found multiple CVEs where user input was directly passed to MCP Stdio, allowing direct command execution on the machine.
Disable this setting to allow developers to use stdio-based MCP servers.
Default: Enabled.
External SaaS
Tracks external SaaS services accessed by AI agents and includes them in the AI inventory and governance views.
Default: Enabled.
AI Models
Tracks the AI models used by agents for reasoning and code generation and includes them in the AI inventory and governance views.
Default: Enabled.
General
'Secured by OX' Badge
Displays a Secured by OX indicator in supported AI coding assistants when VibeSec is active. The badge provides visual confirmation that OX protection is running. Disable this setting to hide the indicator. Default: Enabled.
Last updated