MCP.Market

Vaast MCP server

by xtrinel.com·com.xtrinel/vaast·v0.1.0
No reviews yet

Read-only access to VAAST vulnerability scan findings, workspaces, and targets for AI agents

A86/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A86/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed Vaast yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Vaast tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.10 · 2026-10-02 · same rubric, same numbers if you re-run it

no findings
  • Code scan4 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identitynamespace and repository owner differ4/10
Overall 86/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Vaast compares

Against every graded Security MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
86/100
higher than 73% of 915 Security servers

Install Vaast in Claude Code, Cursor or VS Code

Runs npx -y @xtrinel/vaast-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add vaast -- npx -y @xtrinel/vaast-mcp
Add to Cursor

Vaast: common questions

Is Vaast MCP server safe?
Yes, by our scan: it is graded A (86/100). Read the Vaast safety report
How do I install Vaast?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Vaast need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Vaast maintained?
The last commit was 34 days ago (2026-10-02). The latest release is v0.1.0.
What can I use instead of Vaast?
Servers from other publishers that do the same job: Sn1per MCP Server: pentest, recon and attack surface scanning, Keyspoor MCP server and PyMemoryEditor MCP server.

Alternatives to Vaast

Same job from other publishers: the closest match first, then the best rated.

  • Sn1per MCP Server: pentest, recon and attack surface scanning
    Run scoped, authorized Sn1per pentest, recon and attack surface scans from AI agents; read findings.
    A
  • Keyspoor
    Offline secret scanning for AI agents. Redacted findings; scans text and files in a chosen root.
    A
  • PyMemoryEditor
    Read, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.
    A
  • Autopilot Jobhunt
    Agentic job hunt: scan careers pages, score against your resume, draft applications. Never applies.
    A
  • Solana Security Standard
    Scan Solana/Anchor code against the Solana Security Standard and serve the ruleset to MCP clients.
    A