MCP.Market

VulX Watch MCP server

online · 100% uptime
by vulx.ai·ai.vulx/watch·v1.0.0
No reviews yet

Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.

A92/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed VulX Watch yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

VulX Watch tools

Tool list not cached yet. `describe` through the gateway fetches it live.

Public scan report

scanner v0.1.10 · 2026-10-29 · same rubric, same numbers if you re-run it

no findings
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 273ms (auth required)20/20
  • –Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
  • Auth qualityOAuth resource metadata advertised on 40115/15
  • Maintenancelast push 59 days ago12/15
  • Maintainer identityendpoint served from the registry-verified namespace domain8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How VulX Watch compares

Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 90% of 1,119 Developer tools servers
Uptime
100%
of our recent checks; the typical remote Developer tools server answers 100%
Response time
344 ms
faster than 47% of 443 Developer tools servers

Install VulX Watch in Claude Code, Cursor or VS Code

claude mcp add --transport http watch https://mcp.vulx.ai/mcp
Add to Cursor

What the publisher says

From the VulX Watch repository's README, as published. We do not edit it. Read it on GitHub

VulX Watch for Cursor

Adds the VulX Watch connector to Cursor: independent security review for AI-built apps. The agent can watch a GitHub repo and ask what the last reading found.

VulX does not write a patch or open a PR.

What you get

  • MCP server at https://mcp.vulx.ai/mcp
  • A skill so the agent knows when to call Watch
  • Commands: watch-repo, security-status

You still need a VulX account. Sign-in happens when Cursor talks to the connector. Free while we build it.

Install

into ~/.cursor/plugins/local and restart Cursor.

  1. Install VulX Watch from the Cursor Marketplace, or clone this repo
  1. Complete the VulX sign-in prompt.
  2. Ask: Watch my repo owner/name with VulX. Then: What did VulX find?

If OAuth does not finish inside Cursor, add the same URL as a custom connector: https://mcp.vulx.ai/mcp. Human page: https://vulx.ai/connect

What it will not do

  • Patch your app or open a merge-ready PR
  • Log in to your running site or database
  • Give a 0–100 score or a “safe to ship”
  • Treat a quiet week as an all-clear

It reads committed source. It writes only its own brief (AGENTS.md and CLAUDE.md) when brief delivery is on.

License

MIT

Nothing above is checked by us. What we check is on the safety report.

VulX Watch: common questions

Is VulX Watch MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the VulX Watch safety report
How do I install VulX Watch?
It runs remotely at mcp.vulx.ai. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does VulX Watch need an API key?
No key to paste: it signs you in with OAuth when your client connects.
Is VulX Watch maintained?
The last commit was 66 days ago (2026-09-01). The latest release is v1.0.0.
Is VulX Watch up?
100% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of VulX Watch?
Servers from other publishers that do the same job: GitHub MCP server, Gk CLI MCP server and Grasp — Code Architecture & Dependency Analysis MCP server.
How does VulX Watch compare with other Developer tools MCP servers?
safety score 92/100 (higher than 90% of 1,119 Developer tools servers); uptime 100% (of our recent checks; the typical remote Developer tools server answers 100%); response time 344 ms (faster than 47% of 443 Developer tools servers). Full comparison.

Alternatives to VulX Watch

Same job from other publishers: the closest match first, then the best rated.

  • GitHub
    Connect AI assistants to GitHub - manage repos, issues, PRs, and workflows through natural language.
    A
  • Gk CLI
    The GitKraken MCP Server for managing repos, PRs, issues across GitHub, GitLab, Bitbucket and more.
    B
  • Grasp — Code Architecture & Dependency Analysis
    Codebase analysis: dependency graphs, security scanning, and refactor plans for GitHub and GitLab.
    C
  • OctoCounts MCP Server
    Analyze and compare public GitHub repo line counts (SLOC) via OctoCounts, from any MCP client.
    A
  • GitDiagram
    Architecture diagrams, explanations and Mermaid source for public GitHub repositories.
    A