io.github.andrasfe/vulnicheck MCP Server

Name: io.github.andrasfe/vulnicheck MCP Server
Author: io.github.andrasfe

io.github.andrasfe/vulnicheck

Repository Registry

What is the io.github.andrasfe/vulnicheck MCP server?

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

How to install io.github.andrasfe/vulnicheck

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

NVD_API_KEY
secret
API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds)
GITHUB_TOKEN
secret
GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour)
OPENAI_API_KEY
secret
OpenAI API key for LLM-based risk assessment in MCP passthrough operations
ANTHROPIC_API_KEY
secret
Anthropic API key for LLM-based risk assessment (alternative to OpenAI)
MCP_PORT
Port for MCP HTTP server (default: 3000)
CACHE_TTL
Cache time-to-live in seconds for vulnerability data (default: 900)
VULNICHECK_HTTP_ONLY
Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "vulnicheck": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "docker.io/andrasfe/vulnicheck:main"
      ],
      "env": {
        "NVD_API_KEY": "<YOUR_NVD_API_KEY>",
        "GITHUB_TOKEN": "<YOUR_GITHUB_TOKEN>",
        "OPENAI_API_KEY": "<YOUR_OPENAI_API_KEY>",
        "ANTHROPIC_API_KEY": "<YOUR_ANTHROPIC_API_KEY>",
        "MCP_PORT": "<YOUR_MCP_PORT>",
        "CACHE_TTL": "<YOUR_CACHE_TTL>",
        "VULNICHECK_HTTP_ONLY": "<YOUR_VULNICHECK_HTTP_ONLY>"
      }
    }
  }
}

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "vulnicheck": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "docker.io/andrasfe/vulnicheck:main"
      ],
      "env": {
        "NVD_API_KEY": "<YOUR_NVD_API_KEY>",
        "GITHUB_TOKEN": "<YOUR_GITHUB_TOKEN>",
        "OPENAI_API_KEY": "<YOUR_OPENAI_API_KEY>",
        "ANTHROPIC_API_KEY": "<YOUR_ANTHROPIC_API_KEY>",
        "MCP_PORT": "<YOUR_MCP_PORT>",
        "CACHE_TTL": "<YOUR_CACHE_TTL>",
        "VULNICHECK_HTTP_ONLY": "<YOUR_VULNICHECK_HTTP_ONLY>"
      }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "vulnicheck": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "docker.io/andrasfe/vulnicheck:main"
      ],
      "env": {
        "NVD_API_KEY": "<YOUR_NVD_API_KEY>",
        "GITHUB_TOKEN": "<YOUR_GITHUB_TOKEN>",
        "OPENAI_API_KEY": "<YOUR_OPENAI_API_KEY>",
        "ANTHROPIC_API_KEY": "<YOUR_ANTHROPIC_API_KEY>",
        "MCP_PORT": "<YOUR_MCP_PORT>",
        "CACHE_TTL": "<YOUR_CACHE_TTL>",
        "VULNICHECK_HTTP_ONLY": "<YOUR_VULNICHECK_HTTP_ONLY>"
      }
    }
  }
}

VS Code

.vscode/mcp.json

{
  "servers": {
    "vulnicheck": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "docker.io/andrasfe/vulnicheck:main"
      ],
      "env": {
        "NVD_API_KEY": "<YOUR_NVD_API_KEY>",
        "GITHUB_TOKEN": "<YOUR_GITHUB_TOKEN>",
        "OPENAI_API_KEY": "<YOUR_OPENAI_API_KEY>",
        "ANTHROPIC_API_KEY": "<YOUR_ANTHROPIC_API_KEY>",
        "MCP_PORT": "<YOUR_MCP_PORT>",
        "CACHE_TTL": "<YOUR_CACHE_TTL>",
        "VULNICHECK_HTTP_ONLY": "<YOUR_VULNICHECK_HTTP_ONLY>"
      }
    }
  }
}

Claude Code

claude mcp add vulnicheck --env NVD_API_KEY=<YOUR_NVD_API_KEY> --env GITHUB_TOKEN=<YOUR_GITHUB_TOKEN> --env OPENAI_API_KEY=<YOUR_OPENAI_API_KEY> --env ANTHROPIC_API_KEY=<YOUR_ANTHROPIC_API_KEY> --env MCP_PORT=<YOUR_MCP_PORT> --env CACHE_TTL=<YOUR_CACHE_TTL> --env VULNICHECK_HTTP_ONLY=<YOUR_VULNICHECK_HTTP_ONLY> -- docker run -i --rm docker.io/andrasfe/vulnicheck:main