MCP serverOfficial registry

Vulnicheck

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

by io.github.andrasfev0.1.0GitHub

Power your agent

Add this server

The publisher's own command. Not a PlugMCP endpoint.

Local command

docker run -i --rm docker.io/andrasfe/vulnicheck:main

Credentials from the publisher

NVD_API_KEY — API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds)
GITHUB_TOKEN — GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour)
OPENAI_API_KEY — OpenAI API key for LLM-based risk assessment in MCP passthrough operations
ANTHROPIC_API_KEY — Anthropic API key for LLM-based risk assessment (alternative to OpenAI)
MCP_PORT — Port for MCP HTTP server (default: 3000)
CACHE_TTL — Cache time-to-live in seconds for vulnerability data (default: 900)
VULNICHECK_HTTP_ONLY — Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)

Provider

Claude Code

NVD_API_KEY=<secret> GITHUB_TOKEN=<secret> OPENAI_API_KEY=<secret> ANTHROPIC_API_KEY=<secret> MCP_PORT=<value> CACHE_TTL=<value> VULNICHECK_HTTP_ONLY=<value> claude mcp add io.github.andrasfe-vulnicheck -- docker run -i --rm docker.io/andrasfe/vulnicheck:main

Run in a terminal.

Claude Desktop

{
  "mcpServers": {
    "io.github.andrasfe-vulnicheck": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "docker.io/andrasfe/vulnicheck:main"
      ],
      "env": {
        "NVD_API_KEY": "<secret>",
        "GITHUB_TOKEN": "<secret>",
        "OPENAI_API_KEY": "<secret>",
        "ANTHROPIC_API_KEY": "<secret>",
        "MCP_PORT": "<value>",
        "CACHE_TTL": "<value>",
        "VULNICHECK_HTTP_ONLY": "<value>"
      }
    }
  }
}

claude_desktop_config.json

Step-by-step: add this in Claude

Remote URL or a command on your machine? How the two installs differ

Run on PlugMCP

Host a copy with our keys and logs.

A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.

Launch

Related MCP

Vulnicheck

Add this server

Host a copy with our keys and logs.

More like this

Firecrawl

Notion

Context7