Advertise
MCP.so
Sign In
V

Vulnfeed MCP Server

@infai-tech

Repository

Basic information

Category

Other

Transports

stdio

Author

infai-tech

Submitted by

Nat Burke

About Vulnfeed MCP Server

An MCP server that scans your lockfiles (npm, PyPI, Go, Rust, Ruby, PHP) for known vulnerabilities, enriches with EPSS exploit probability scores, and recommends fix versions. $14/mo — not per-seat.

#security#devops

Vulnfeed MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "vulnfeed": {
      "command": "uvx",
      "args": [
        "vulnfeed-mcp"
      ]
    }
  }
}

Vulnfeed MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Vulnfeed?

Vulnfeed is an MCP server that monitors your project’s dependencies for security vulnerabilities, native to Claude Code. It reads lockfiles, queries the NVD and GitHub Advisory Database for known CVEs, enriches results with EPSS (Exploit Prediction Scoring System) scores, and recommends exact fix versions from package registries. It is intended for developers using Claude Code who want continuous dependency vulnerability tracking.

How to use Vulnfeed?

Vulnfeed is an MCP server that can be run locally (stdio transport) or remotely (SSE transport). After installation, it provides 9 tools for scanning lockfiles, checking individual packages, looking up CVEs, and managing continuous monitoring. The free tier requires no signup and allows 10 scans per day and 1 monitored project; paid subscriptions are available.

Key features of Vulnfeed

  • Reads 9 lockfile formats (package-lock.json, requirements.txt, go.sum, Cargo.lock, etc.)
  • Queries NVD and GitHub Advisory Database for known CVEs
  • Enriches findings with Exploit Prediction Scoring System (EPSS) scores
  • Recommends exact fix versions from package registries
  • Supports continuous monitoring with alerts for new CVEs
  • 9 tools for scanning, checking, and managing projects
  • Free tier available with 10 scans/day and 1 monitored project

Use cases of Vulnfeed

  • Scan all lockfiles in a project directory to find known vulnerabilities
  • Monitor a specific project continuously and receive alerts when new CVEs are published
  • Look up detailed information about a specific CVE, including EPSS score and recommended fix version
  • Check a single package for known vulnerabilities before adding it as a dependency

Frequently asked questions

1

What data sources does Vulnfeed use?

Vulnfeed queries the NVD (National Vulnerability Database) and GitHub Advisory Database for CVEs, and enriches results with EPSS scores from the Exploit Prediction Scoring System.

2

How is Vulnfeed different from other vulnerability scanners?

Vulnfeed uses EPSS scores to prioritize and filter noise, recommends exact fix versions from package registries, and offers continuous monitoring with no-signup free tier.

3

What transports does Vulnfeed support?

Vulnfeed supports stdio (for local installation) and SSE (for remote access).

4

Is authentication required to use Vulnfeed?

No signup is required for the free tier (10 scans/day, 1 monitored project). A paid subscription is available for unlimited scans and projects.

5

What are the limits on the free tier?

The free tier allows 10 scans per day and 1 monitored project.

Comments

More Other MCP servers

Lemon.io

lemon-io

Request dedicated senior developers to work on your project, write job descriptions, and prep technical interviews — all without leaving your Claude chat. Just describe what you need, and Lemon.io MCP does the rest. 1–3

Maestro

mobile-dev-inc

Painless E2E Automation for Mobile and Web

14.8K

Reactive Resume

amruthpillai

A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source and free forever. Try it out today!

39.5K

The Living Bread

The Living Bread

A free remote MCP server for The Living Bread. Bible passages read word for word from a stored public domain text with an evidence label, keyword search and cross references, real churches, gatherings and prayer groups w

Handl

Handl speaks the Model Context Protocol. Your whole billing operation — projects, invoices, clients, reports, approvals — as tools any AI assistant can call, inside your autonomy rules.

Advertise