MCP.Market

VulnCheck MCP server

by vulncheck-oss·io.github.vulncheck-oss/mcp·v0.2.3·10 stars
No reviews yet

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

A90/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A90/100

not scanned yet

Adoption
Growing

10 stars

Reviews

Write one

Nobody has reviewed VulnCheck yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

VulnCheck tools

No tool declarations could be read from the package source. They show once the server is installed.

Not scanned yet. New listings are scanned within a day or two of arriving.

How VulnCheck compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
90/100
higher than 88% of 915 Security servers
GitHub stars
10
more than 90% of 587 Security servers

Release history: 2 versions in the registry since 2026-09-15, latest 2026-10-13, typically one every 28 days.

Install VulnCheck in Claude Code, Cursor or VS Code

claude mcp add mcp -- docker run -i --rm ghcr.io/vulncheck-oss/mcp:0.2.3
Add to Cursor

What the publisher says

From the VulnCheck repository's README, as published. We do not edit it. Read it on GitHub

The VulnCheck MCP Server

The VulnCheck MCP Server connects AI assistants to VulnCheck vulnerability intelligence. Ask your AI tools about CVEs, exploits, advisories, and vulnerable packages — directly in your editor or terminal, using natural language.

Use Cases

  • CVE research: Look up vulnerability details, severity, exploitability, and affected versions while reviewing code or triaging issues
  • Dependency analysis: Check packages by CPE or PURL to identify known vulnerabilities before shipping
  • Exploit intelligence: Determine whether a CVE has known exploit code, active exploitation, or C2 indicators
  • Advisory lookup: Search vendor and ecosystem advisories by package, product, or keyword
  • Index queries: Query VulnCheck's breach, botnet, and threat intelligence indices for real-time context

Requirements

  • A VulnCheck API token — create one here

Installation

Download the latest release from the Releases page, or use the Docker image (ghcr.io/vulncheck-oss/mcp).

Install in Your AI Client

  • Claude Code & Claude Desktop
  • Cursor
  • VS Code
  • Windsurf
  • Cline
  • Gemini CLI
  • Codex CLI

Available Tools

See docs/tools.md for the full list of available tools.

Development

make build      # build for current platform → bin/vulncheck-mcp
make snapshot   # cross-compile all platforms via GoReleaser → dist/
make test       # run tests
make lint       # run golangci-lint

Nothing above is checked by us. What we check is on the safety report.

VulnCheck: common questions

Is VulnCheck MCP server safe?
Yes, by our scan: it is graded A (90/100). Read the VulnCheck safety report
How do I install VulnCheck?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does VulnCheck need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is VulnCheck maintained?
The last commit was 34 days ago (2026-10-01). The latest release is v0.2.3.
What can I use instead of VulnCheck?
Servers from other publishers that do the same job: Wireshark MCP server, npm Registry MCP Server and Security MCP server. Compare all VulnCheck alternatives.
How does VulnCheck compare with other Security MCP servers?
safety score 90/100 (higher than 88% of 915 Security servers); github stars 10 (more than 90% of 587 Security servers). Full comparison.

Alternatives to VulnCheck

Same job from other publishers: the closest match first, then the best rated.

All VulnCheck alternatives →
  • Wireshark
    Professional network analysis with tshark. Security audits, deep-dives, and threat detection.
    A
  • npm Registry MCP Server
    npm registry MCP server — package intelligence, security audits, dependency analysis
    B
  • Security MCP
    Zero-key security toolkit: grade sites A+ to F, check CVE exploits, plain-English attack defenses
    A
  • DataNexus MCP
    Public data intelligence for AI agents — CVE, compliance, patents, contracts, domains.
    B
  • 4da
    Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.
    A