MCP Server

GhostFree MCP Server

Name: GhostFree MCP Server
Author: io.github.shane-js

io.github.shane-js/ghostfree

Repository Registry

What is the GhostFree MCP server?

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

How to install GhostFree

Copy-paste configuration for popular MCP clients.

transport: stdio

Config generated by PluginBench — verify against the source before use.

Environment / auth

GHOSTFREE_DIR
Override the directory where GhostFree stores its data files (accepted-risks.yml, config.yml). Defaults to .ghostfree/ in the scanned repository root.
GHOSTFREE_MIN_SEVERITY
Minimum CVE severity level to surface. One of: CRITICAL, HIGH, MEDIUM (default), LOW.
NVD_API_KEY
secret
Optional NVD API key for higher rate limits when enriching CVE details. Free to request at https://nvd.nist.gov/developers/request-an-api-key.

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "ghostfree": {
      "command": "npx",
      "args": [
        "-y",
        "ghostfree",
        "-y",
        "--repo-path"
      ],
      "env": {
        "GHOSTFREE_DIR": "<YOUR_GHOSTFREE_DIR>",
        "GHOSTFREE_MIN_SEVERITY": "<YOUR_GHOSTFREE_MIN_SEVERITY>",
        "NVD_API_KEY": "<YOUR_NVD_API_KEY>"
      }
    }
  }
}

Cursor

~/.cursor/mcp.json

{
  "mcpServers": {
    "ghostfree": {
      "command": "npx",
      "args": [
        "-y",
        "ghostfree",
        "-y",
        "--repo-path"
      ],
      "env": {
        "GHOSTFREE_DIR": "<YOUR_GHOSTFREE_DIR>",
        "GHOSTFREE_MIN_SEVERITY": "<YOUR_GHOSTFREE_MIN_SEVERITY>",
        "NVD_API_KEY": "<YOUR_NVD_API_KEY>"
      }
    }
  }
}

Windsurf

~/.codeium/windsurf/mcp_config.json

{
  "mcpServers": {
    "ghostfree": {
      "command": "npx",
      "args": [
        "-y",
        "ghostfree",
        "-y",
        "--repo-path"
      ],
      "env": {
        "GHOSTFREE_DIR": "<YOUR_GHOSTFREE_DIR>",
        "GHOSTFREE_MIN_SEVERITY": "<YOUR_GHOSTFREE_MIN_SEVERITY>",
        "NVD_API_KEY": "<YOUR_NVD_API_KEY>"
      }
    }
  }
}

VS Code

.vscode/mcp.json

{
  "servers": {
    "ghostfree": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "ghostfree",
        "-y",
        "--repo-path"
      ],
      "env": {
        "GHOSTFREE_DIR": "<YOUR_GHOSTFREE_DIR>",
        "GHOSTFREE_MIN_SEVERITY": "<YOUR_GHOSTFREE_MIN_SEVERITY>",
        "NVD_API_KEY": "<YOUR_NVD_API_KEY>"
      }
    }
  }
}

Claude Code

claude mcp add ghostfree --env GHOSTFREE_DIR=<YOUR_GHOSTFREE_DIR> --env GHOSTFREE_MIN_SEVERITY=<YOUR_GHOSTFREE_MIN_SEVERITY> --env NVD_API_KEY=<YOUR_NVD_API_KEY> -- npx -y ghostfree -y --repo-path