Home › Security › vulnicheck

vulnicheck

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

Python

★ 11 stars Last pushed 2026-02-22 License: MIT

View repository →

Connect

Review any command before running it. Package names and URLs come from the server's own registry entry.

Package: oci docker.io/andrasfe/vulnicheck:main

NVD_API_KEY secret — API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds)
GITHUB_TOKEN secret — GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour)
OPENAI_API_KEY secret — OpenAI API key for LLM-based risk assessment in MCP passthrough operations
ANTHROPIC_API_KEY secret — Anthropic API key for LLM-based risk assessment (alternative to OpenAI)
MCP_PORT — Port for MCP HTTP server (default: 3000)
CACHE_TTL — Cache time-to-live in seconds for vulnerability data (default: 900)
VULNICHECK_HTTP_ONLY — Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)

MCP server for IDA Pro, allowing you to perform binary analysis with AI assistants. This plugin implement decompilation, disassembly and…

A Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling…

JADX-AI-MCP is a plugin and MCP Server for the JADX decompiler that integrates directly with Model Context Protocol (MCP) to provide live…

Beelzebub is a honeypot framework that lets you build honeypot tools using MCP. Its purpose is to detect prompt injection or malicious…

Protect your AI agents and IDEs from malicious open-source packages.

Dead code, security, secrets detection and code quality for Python, TypeScript, Go.

Data from the Official MCP Registry