NestDaddy

vu1nz

com.profullstack/vu1nz · v1.0.0

Vulnerability intel (vu1nz.com)

Connect Remote server

Terminal
claude mcp add --transport http vu1nz https://vu1nz.com/api/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "vu1nz": {
      "url": "https://vu1nz.com/api/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "vu1nz": {
      "type": "http",
      "url": "https://vu1nz.com/api/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://vu1nz.com/api/mcp

Tools 12 found in our last check

  • scan_repo

    Run vu1nz's 6 deterministic CI/CD security checks against any public GitHub repository's workflow files. Returns findings with severity, file, line, CWE, and recommendation.

  • threat_feed

    Recent malicious packages caught in the wild across npm, pip, cargo, rubygems. Sourced from OSV.dev with a curated fallback list (Shai-Hulud, Polyfill.io, ctx, ua-parser-js, etc.).

  • list_checks

    The catalog of CI/CD security checks vu1nz runs, each mapped to a CWE. Use to explain to a user what vu1nz would catch on their PRs.

  • list_advisories

    vu1nz-published security advisories with date, severity, and summary.

  • list_blog_posts

    All vu1nz blog posts: supply-chain analysis, release notes, security research. Returns slug, title, date, tags, summary, and URL.

  • get_blog_post

    Full content of a vu1nz blog post by slug.

  • check_license

    Look up the vu1nz subscription status for a GitHub org. Bootstraps a 14-day free trial on first call. Returns ok, status (trialing/active/past_due/cancelled/exempt), days remaining, license_key, and upgrade URL.

  • list_webhooks

    List your vu1nz webhook endpoints and the event types vu1nz emits (scan.completed, scan.failed). Needs an API key.

  • create_webhook

    Add a webhook endpoint (public https URL). Returns the endpoint and its signing secret (shown once). Needs an API key.

  • delete_webhook

    Remove one of your webhook endpoints by id. Needs an API key.

  • test_webhook

    Send a webhook.test event to one of your endpoints now and report the result. Needs an API key.

  • webhook_deliveries

    Recent webhook deliveries (status, attempts, last HTTP status), optionally for one endpoint. Needs an API key.

Details

Endpointhttps://vu1nz.com/api/mcp (Streamable HTTP)
First published11 Nov 2026
Last updated11 Nov 2026
Registry namecom.profullstack/vu1nz

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.