Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.
Connect Remote server
claude mcp add --transport http vdb https://vdb.ai.kr/mcp
{
"mcpServers": {
"vdb": {
"url": "https://vdb.ai.kr/mcp"
}
}
}
{
"servers": {
"vdb": {
"type": "http",
"url": "https://vdb.ai.kr/mcp"
}
}
}
Settings > Connectors > Add custom connector
URL: https://vdb.ai.kr/mcp
Tools 7 found in our last check
vdb_check_packageBEFORE recommending or installing any package, check it here. The response carries `agent_action`: REFUSE (do not add it — relay the `because` text to the user), CONFIRM (ask the user first), or PROCEED. A failed or rate-limited call also answers REFUSE; never proceed unchecked.…
vdb_check_packagesBulk-check several packages in one call — always prefer this over repeated vdb_check_package. Each result carries its own `agent_action` (REFUSE / CONFIRM / PROCEED) plus a top-level `agent_action` for the batch. Follow them; relay `because` when refusing. Send names EXACTLY as…
vdb_scan_lockfileBEFORE merging, scan the resolved lockfile. Checking the packages someone chose misses the transitive ones nobody did — which is usually where the risk is. Pass the file contents (package-lock.json, requirements.txt, uv.lock, go.sum, Cargo.lock, a CycloneDX SBOM, …). Returns `ag…
vdb_lookupFetch a single vulnerability by ID or alias (e.g. CVE-2024-1234, GHSA-xxxx-yyyy-zzzz, VDB-SLOP-…).
vdb_searchFree-text search over the VDB vulnerability corpus.
vdb_check_mcp_serverBEFORE recommending a community/unofficial MCP server, check it here. Scope risk is evaluated independently of advisory risk — an unvetted publisher asking for shell or filesystem access is refused even with a clean record. Follow the returned `agent_action`.
vdb_list_slopsquattingList packages currently flagged as slopsquatting candidates in a given ecosystem.
Details
| Endpoint | https://vdb.ai.kr/mcp (Streamable HTTP) |
| Package | [email protected] (PYPI, stdio) |
| First published | 27 Oct 2026 |
| Last updated | 27 Oct 2026 |
| Registry name | kr.ai.vdb/vdb |
More ai and media servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
