Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.
Connect Runs on your machine
claude mcp add vulnfeed -e VULNFEED_API_KEY=<VULNFEED_API_KEY> -- uvx vulnfeed-mcp==0.3.3
{
"mcpServers": {
"vulnfeed": {
"command": "uvx",
"args": [
"vulnfeed-mcp==0.3.3"
],
"env": {
"VULNFEED_API_KEY": "<VULNFEED_API_KEY>"
}
}
}
}
{
"mcpServers": {
"vulnfeed": {
"command": "uvx",
"args": [
"vulnfeed-mcp==0.3.3"
],
"env": {
"VULNFEED_API_KEY": "<VULNFEED_API_KEY>"
}
}
}
}
{
"servers": {
"vulnfeed": {
"type": "stdio",
"command": "uvx",
"args": [
"vulnfeed-mcp==0.3.3"
],
"env": {
"VULNFEED_API_KEY": "<VULNFEED_API_KEY>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
VULNFEED_API_KEYOptional, secret | Polar.sh license key for paid tier (optional — free tier works without it) |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 28 May 2026 |
| Last updated | 28 May 2026 |
| Registry name | io.github.infai-tech/vulnfeed |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
