Installing VibeSec on a Single Device Using OAuth

This guide explains how to install and connect VibeSec to AI-powered coding environments using hooks and OAuth authentication.

Once the connection is established, VibeSec activates automatically in your development environment and applies security controls during coding, without interrupting your workflow.

After the installation, your admin can view developer usage and risk-prevention metrics in the VibeSec Usage Report in the OX dashboard.

You can uninstall VibeSec at any time.

Note: When using Copilot, the following models are not supported with the VS Code Copilot Extension: Gemini 2.5 Pro and GPT-4o. You can disable them before you start working with OX VibeSec. For instructions on how to disable Copilot models, refer to Disabling Unsupported Copilot Models.

Prerequisites

Prerequisite	Details
Network access	If your organization restricts outbound network traffic (for example, using a proxy or firewall), add the following domains to your allowlist: api.cloud.ox.security* ox-vibesec.s3.eu-west-1.amazonaws.com*
Auto-provisioning for new OX users	If you authenticate using OAuth and your developers do not already have OX user accounts, ensure that auto-provisioning is enabled in your OX settings. This allows OX to automatically create a user for each developer upon first login. To enable auto-provisioning, see Sign in to OX for instructions.

Install VibeSec on Cursor, Claude Code, VS Code IDE Extension, and VS Code Copilot Extension

1. From any terminal, run:

Mac

curl -fsSL https://ox-vibesec.s3.eu-west-1.amazonaws.com/vibesec-installation/install.sh | bash -s -- --ox-flag

Linux

wget -qO- https://ox-vibesec.s3.eu-west-1.amazonaws.com/vibesec-installation/install.sh | bash -s -- --ox-flag

Windows (PowerShell)

& ([scriptblock]::Create((irm https://ox-vibesec.s3.eu-west-1.amazonaws.com/vibesec-installation/install.ps1))) -OxFlag

The authentication process starts.

1. Log in to OX.

Note If your organization requires SSO, sign in using your enterprise email address.

1. Select your organization.

Authorization completion message appears.

Authentication completion message appears.

Final completion of the installation process appears.

1. Restart your AI coding tool.

Note It is recommended to test VibeSec with a prompt such as:

Create a web form that accepts user input and stores it in the database,

or

Create a web form that allows the user to upload a file and store it in the database.