Installing VibeSec on a Single Device Using API Token

This guide explains how to install and connect VibeSec to AI-powered coding environments using token authentication.

Once the connection is established, VibeSec activates automatically in your development environment and applies security controls during coding, without interrupting your workflow.

After the installation, your admin can view developer usage and risk-prevention metrics in the VibeSec Usage Report in the OX dashboard.

You can uninstall VibeSec at any time.

Note: When using Copilot, the following models are not supported with the VS Code Copilot Extension: Gemini 2.5 Pro and GPT-4o. You can disable them before you start working with OX VibeSec. For instructions on how to disable Copilot models, refer to Disabling Unsupported Copilot Models.

Prerequisites

Prerequisite
Details

Node.js

Node.js version 22 or later must be installed on all target developer machines.

Network access

If your organization restricts outbound network traffic (for example, using a proxy or firewall), add the following domains to your allowlist: api.cloud.ox.security* ox-vibesec.s3.eu-west-1.amazonaws.com*

VibeSec token

Create a new VibeSec token before you begin.

Install VibeSec on Cursor, Claude Code, VS Code IDE Extension, and VS Code Copilot Extension

  1. From any terminal, run:

Mac

curl -fsSL https://ox-vibesec.s3.eu-west-1.amazonaws.com/vibesec-installation/claude/install.sh | bash -s -- --ox-flag --token "${OX_TOKEN}"

Linux

wget -qO- https://ox-v--token "${OX_TOKEN}ibesec.s3.eu-west-1.amazonaws.com/vibesec-installation/claude/install.sh | bash -s -- --ox-flag --token "${OX_TOKEN}"

Windows (PowerShell)

Final confirmation of the installation process appears.

  1. Restart your AI coding tool.

Note It is recommended to test VibeSec with a prompt such as:

Create a web form that accepts user input and stores it in the database,

or

Create a web form that allows the user to upload a file and store it in the database.

Last updated