{"name":"io.github.infai-tech/vulnfeed","slug":"infai-tech-vulnfeed","title":"VulnFeed","description":"Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.","url":"https://mcp.market/server/infai-tech-vulnfeed","rating":null,"grade":"B","score":80,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":18,"stars":1,"forks":0,"downloads_week":null,"last_push_at":"2026-09-25T20:04:41.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"pypi","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/infai-tech/vulnfeed-mcp","website":null,"version":"0.3.3","remotes":[],"packages":[{"registryType":"pypi","identifier":"vulnfeed-mcp","version":"0.3.3","transport":{"type":"stdio"},"environmentVariables":[{"description":"Polar.sh license key for paid tier (optional — free tier works without it)","format":"string","isSecret":true,"name":"VULNFEED_API_KEY"}]}],"tools":[{"name":"check_alerts","description":"Check for new vulnerabilities since the last scan of a monitored project.","write_action":false,"price_micros":0,"input_schema":null},{"name":"check_package","description":"Check a single package for known vulnerabilities.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_monitored","description":"List all projects registered for vulnerability monitoring.","write_action":false,"price_micros":0,"input_schema":null},{"name":"lookup_cve","description":"Look up detailed information about a specific vulnerability.","write_action":false,"price_micros":0,"input_schema":null},{"name":"monitor_project","description":"Register a project for continuous vulnerability monitoring.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_lockfile","description":"Scan a lockfile for known vulnerabilities.","write_action":false,"price_micros":0,"input_schema":null},{"name":"scan_project","description":"Auto-detect and scan all lockfiles in a project directory.","write_action":false,"price_micros":0,"input_schema":null},{"name":"unmonitor_project","description":"Remove a project from vulnerability monitoring.","write_action":true,"price_micros":0,"input_schema":null},{"name":"update_deps","description":"Update a monitored project's dependency snapshot after upgrading packages.","write_action":true,"price_micros":0,"input_schema":null}],"scan":{"score":80,"grade":"B","scanned_at":"2026-09-27T17:06:04.624Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T17:06:04.719Z","components":{"code":{"score":25,"max":25,"notes":["6 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 2 days ago"]},"identity":{"score":6,"max":10,"notes":["registry namespace matches repository owner"]}},"findings":[],"inputs":{"packages":[{"registryType":"pypi","identifier":"vulnfeed-mcp","version":"0.3.3","found":true,"license":"MIT","dependencyCount":2,"publishedAt":"2026-05-28T00:21:39.697449Z","repositoryUrl":"https://github.com/novadyne-hq/vulnfeed-mcp"}],"repo":{"found":true,"owner":"infai-tech","repo":"vulnfeed-mcp","archived":false,"pushedAt":"2026-09-25T20:04:41Z","stars":1,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/287531731?v=4","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/287531731?v=4&s=128","source":"github"},"presence":{"stars":1,"forks":0,"downloadsWeek":null,"license":"MIT","lastPushAt":"2026-09-25T20:04:41.000Z","score":18}}}},"grade_history":[],"reviews":[]}