About VulnFeed
VulnFeed is an MCP server for developers who need to check and monitor project dependencies for known vulnerabilities. It adds EPSS exploit scores, filters low-priority findings by default, and reports available fix versions.
Key features
- 01Scan project and lockfile dependencies
- 02Add EPSS exploit probability scores
- 03Find recommended fix versions
- 04Track new vulnerabilities over time
- 05Send monitoring alerts by webhook
Use cases
- 01Checking dependencies before a release
- 02Prioritizing vulnerabilities by exploit likelihood
- 03Monitoring a project for newly reported issues
MCP support
Exposes dependency scanning, CVE lookup, project monitoring, alert, and webhook tools to MCP clients. It supports a free tier, licensed access, and x402 micropayments for certain operations.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
uvx vulnfeed-mcpVULNFEED_API_KEYSecretPolar.sh license key for paid tier (optional — free tier works without it)Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
The maintainer has not added details yet. Check the README in the repository.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.