GhostFree MCP Server

io.github.shane-js/ghostfree

Repository Registry

What is the GhostFree MCP server?

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

How to install GhostFree

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

GHOSTFREE_DIR
Override the directory where GhostFree stores its data files (accepted-risks.yml, config.yml). Defaults to .ghostfree/ in the scanned repository root.
GHOSTFREE_MIN_SEVERITY
Minimum CVE severity level to surface. One of: CRITICAL, HIGH, MEDIUM (default), LOW.
NVD_API_KEY
secret
Optional NVD API key for higher rate limits when enriching CVE details. Free to request at https://nvd.nist.gov/developers/request-an-api-key.

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ghostfree": {
      "command": "npx",
      "args": [
        "-y",
        "ghostfree",
        "-y",
        "--repo-path"
      ],
      "env": {
        "GHOSTFREE_DIR": "<YOUR_GHOSTFREE_DIR>",
        "GHOSTFREE_MIN_SEVERITY": "<YOUR_GHOSTFREE_MIN_SEVERITY>",
        "NVD_API_KEY": "<YOUR_NVD_API_KEY>"
      }
    }
  }
}

Related MCP servers

Commune

Maintained

Email and SMS MCP server for AI agents — 41 tools for inboxes, sending, search, and SMS.

Python

Apache-2.0

View repository →

Xiaohongshu (Little Red Book) MCP Server

Maintained

Publish, search, and manage Xiaohongshu (Little Red Book) content via MCP tools.

Python

MIT

View repository →

io.github.shaozhengkun123/yarrow

Maintained

I-Ching (周易) oracle: cast a hexagram, read classical commentary, get a reflection. Bilingual.

TypeScript

View repository →

io.github.shaqmughal/seekstone

Active

Filesystem-direct Obsidian MCP server — search and edit your vault in milliseconds with minimal context overhead.

TypeScript

MIT

View repository →

io.github.sharafutdinovdi/revit-model-mcp

Active

Revit tools over MCP stdio. Actions are enabled by default; REVIT_MCP_READ_ONLY=1 disables them.

MIT

View repository →

UseTested — Receipts-Verified Service Reviews

Receipts-verified reviews of x402 services and paid APIs, before you spend.