# Vibe Coded Detector

Detect whether any public website was built with an AI "vibe coding" tool.

## Usage

Navigate to https://isthatvibecoded.com, enter the URL you want to inspect, and receive:
- A 0–100 confidence score
- Identified AI builder (Lovable, v0, Bolt, Cursor, Replit, etc.) with evidence
- Full tech-stack breakdown (frameworks, CDN, DNS hints)

## Supported builders

Lovable, v0 by Vercel, Bolt.new, Cursor, Replit Agent, Base44, Same.new,
Framer AI, Webflow AI, Wix Studio AI, Durable, Wegic, Windsurf,
Claude Artifacts, Firebase Studio — plus 10+ traditional builders
(WordPress, Shopify, Squarespace, Webflow, …).

## How detection works

Fetches public HTML, robots.txt, sitemap, and DNS records, then scans for
builder fingerprints: generator meta tags, script paths, CDN URLs, DNS TXT
verification strings, known CNAMEs, shadcn/ui component signatures, and
visual design patterns. Falls back to real-browser rendering (Playwright) or
a Wayback Machine snapshot when the origin blocks crawlers.

## MCP server (for agents that call tools directly)

Agents that support Model Context Protocol don't need to navigate a browser
at all — call the tool directly:

- Endpoint: https://isthatvibecoded.com/mcp (Streamable HTTP transport)
- Tool: `check_site(url)` — scans a public URL and returns structured JSON:
  confidence score, detected builder(s) with evidence, full tech stack, and
  domain metadata.
- OAuth protected-resource metadata: https://isthatvibecoded.com/.well-known/oauth-protected-resource

This is the same detector as the web form and this skill — same evidence,
same scoring — just returned as structured JSON instead of a rendered page.