NestDaddy
All servers NestDaddy MCP Blog Sign inTry it free
Security

Vulnicheck

io.github.andrasfe/vulnicheck ยท v0.1.0

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

Source code Set it up

Connect Runs on your machine

Terminal
claude mcp add vulnicheck -e NVD_API_KEY=<NVD_API_KEY> -e GITHUB_TOKEN=<GITHUB_TOKEN> -e OPENAI_API_KEY=<OPENAI_API_KEY> -e ANTHROPIC_API_KEY=<ANTHROPIC_API_KEY> -e MCP_PORT=<MCP_PORT> -e CACHE_TTL=<CACHE_TTL> -e VULNICHECK_HTTP_ONLY=<VULNICHECK_HTTP_ONLY> -- docker run -i --rm docker.io/andrasfe/vulnicheck:main
claude_desktop_config.json
{
  "mcpServers": {
    "vulnicheck": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "docker.io/andrasfe/vulnicheck:main"
      ],
      "env": {
        "NVD_API_KEY": "<NVD_API_KEY>",
        "GITHUB_TOKEN": "<GITHUB_TOKEN>",
        "OPENAI_API_KEY": "<OPENAI_API_KEY>",
        "ANTHROPIC_API_KEY": "<ANTHROPIC_API_KEY>",
        "MCP_PORT": "<MCP_PORT>",
        "CACHE_TTL": "<CACHE_TTL>",
        "VULNICHECK_HTTP_ONLY": "<VULNICHECK_HTTP_ONLY>"
      }
    }
  }
}
~/.cursor/mcp.json
{
  "mcpServers": {
    "vulnicheck": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "docker.io/andrasfe/vulnicheck:main"
      ],
      "env": {
        "NVD_API_KEY": "<NVD_API_KEY>",
        "GITHUB_TOKEN": "<GITHUB_TOKEN>",
        "OPENAI_API_KEY": "<OPENAI_API_KEY>",
        "ANTHROPIC_API_KEY": "<ANTHROPIC_API_KEY>",
        "MCP_PORT": "<MCP_PORT>",
        "CACHE_TTL": "<CACHE_TTL>",
        "VULNICHECK_HTTP_ONLY": "<VULNICHECK_HTTP_ONLY>"
      }
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "vulnicheck": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "docker.io/andrasfe/vulnicheck:main"
      ],
      "env": {
        "NVD_API_KEY": "<NVD_API_KEY>",
        "GITHUB_TOKEN": "<GITHUB_TOKEN>",
        "OPENAI_API_KEY": "<OPENAI_API_KEY>",
        "ANTHROPIC_API_KEY": "<ANTHROPIC_API_KEY>",
        "MCP_PORT": "<MCP_PORT>",
        "CACHE_TTL": "<CACHE_TTL>",
        "VULNICHECK_HTTP_ONLY": "<VULNICHECK_HTTP_ONLY>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

NameDescription
NVD_API_KEY
Optional, secret		API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds)
GITHUB_TOKEN
Optional, secret		GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour)
OPENAI_API_KEY
Optional, secret		OpenAI API key for LLM-based risk assessment in MCP passthrough operations
ANTHROPIC_API_KEY
Optional, secret		Anthropic API key for LLM-based risk assessment (alternative to OpenAI)
MCP_PORT
Optional		Port for MCP HTTP server (default: 3000)
CACHE_TTL
Optional		Cache time-to-live in seconds for vulnerability data (default: 900)
VULNICHECK_HTTP_ONLY
Optional		Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)

Details

Packagedocker.io/andrasfe/vulnicheck:main (OCI, streamable-http)
First published19 Sep 2025
Last updated19 Sep 2025
Registry nameio.github.andrasfe/vulnicheck

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.