广告合作
MCP.so
登录
V

Vulnfeed MCP Server

@infai-tech

代码仓库

基本信息

分类

其他

传输方式

stdio

作者

infai-tech

提交者

Nat Burke

关于 Vulnfeed MCP Server

An MCP server that scans your lockfiles (npm, PyPI, Go, Rust, Ruby, PHP) for known vulnerabilities, enriches with EPSS exploit probability scores, and recommends fix versions. $14/mo — not per-seat.

#security#devops

Vulnfeed MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "vulnfeed": {
      "command": "uvx",
      "args": [
        "vulnfeed-mcp"
      ]
    }
  }
}

Vulnfeed MCP Server 工具

工具列表暂未提供

当前收录暂时没有可展示的工具列表，不代表服务没有工具。请查阅项目文档了解支持的能力。

点击上方按钮,在临时沙箱中运行此服务器并实时获取工具列表。

概览

What is Vulnfeed?

Vulnfeed is an MCP server that monitors your project’s dependencies for security vulnerabilities, native to Claude Code. It reads lockfiles, queries the NVD and GitHub Advisory Database for known CVEs, enriches results with EPSS (Exploit Prediction Scoring System) scores, and recommends exact fix versions from package registries. It is intended for developers using Claude Code who want continuous dependency vulnerability tracking.

How to use Vulnfeed?

Vulnfeed is an MCP server that can be run locally (stdio transport) or remotely (SSE transport). After installation, it provides 9 tools for scanning lockfiles, checking individual packages, looking up CVEs, and managing continuous monitoring. The free tier requires no signup and allows 10 scans per day and 1 monitored project; paid subscriptions are available.

Key features of Vulnfeed

  • Reads 9 lockfile formats (package-lock.json, requirements.txt, go.sum, Cargo.lock, etc.)
  • Queries NVD and GitHub Advisory Database for known CVEs
  • Enriches findings with Exploit Prediction Scoring System (EPSS) scores
  • Recommends exact fix versions from package registries
  • Supports continuous monitoring with alerts for new CVEs
  • 9 tools for scanning, checking, and managing projects
  • Free tier available with 10 scans/day and 1 monitored project

Use cases of Vulnfeed

  • Scan all lockfiles in a project directory to find known vulnerabilities
  • Monitor a specific project continuously and receive alerts when new CVEs are published
  • Look up detailed information about a specific CVE, including EPSS score and recommended fix version
  • Check a single package for known vulnerabilities before adding it as a dependency

常见问题

1

What data sources does Vulnfeed use?

Vulnfeed queries the NVD (National Vulnerability Database) and GitHub Advisory Database for CVEs, and enriches results with EPSS scores from the Exploit Prediction Scoring System.

2

How is Vulnfeed different from other vulnerability scanners?

Vulnfeed uses EPSS scores to prioritize and filter noise, recommends exact fix versions from package registries, and offers continuous monitoring with no-signup free tier.

3

What transports does Vulnfeed support?

Vulnfeed supports stdio (for local installation) and SSE (for remote access).

4

Is authentication required to use Vulnfeed?

No signup is required for the free tier (10 scans/day, 1 monitored project). A paid subscription is available for unlimited scans and projects.

5

What are the limits on the free tier?

The free tier allows 10 scans per day and 1 monitored project.

评论

其他 分类下的更多 MCP 服务器

MCP Toolbox for Databases

googleapis

MCP Toolbox for Databases is an open source MCP server for databases.

15.9K
P

PickFu MCP

PickFu MCP is a Model Context Protocol (MCP) server that connects AI assistants, developers, marketers, product managers, and AI agents to PickFu's consumer research platform. It enables users to create surveys, conduct

DeepMark

DeepMark helps teachers deliver rapid, consistent marking with meaningful feedback for every student — in a fraction of the time. What once took a week, now takes one free period.

Senso MCP for Joomla

sensomedia

Senso MCP turns a Joomla 5 or 6 site into a remote MCP server. It runs inside Joomla itself (no extra server, no Node.js bridge) and is secured with OAuth 2.1 and Joomla's own ACL. The free pack lets an AI assistant crea

Handl

Handl speaks the Model Context Protocol. Your whole billing operation — projects, invoices, clients, reports, approvals — as tools any AI assistant can call, inside your autonomy rules.

广告合作