mcpField
V
VulnFeed

VulnFeed

Local
github.com/novadyne-hqSecurity

About VulnFeed

VulnFeed is an MCP server for developers who need to check and monitor project dependencies for known vulnerabilities. It adds EPSS exploit scores, filters low-priority findings by default, and reports available fix versions.

Key features

  1. 01Scan project and lockfile dependencies
  2. 02Add EPSS exploit probability scores
  3. 03Find recommended fix versions
  4. 04Track new vulnerabilities over time
  5. 05Send monitoring alerts by webhook

Use cases

  1. 01Checking dependencies before a release
  2. 02Prioritizing vulnerabilities by exploit likelihood
  3. 03Monitoring a project for newly reported issues

MCP support

Exposes dependency scanning, CVE lookup, project monitoring, alert, and webhook tools to MCP clients. It supports a free tier, licensed access, and x402 micropayments for certain operations.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
"mcpServers": {
"novadyne-hq-vulnfeed": {
"command": "uvx",
"args": [
"vulnfeed-mcp"
],
"env": {
"VULNFEED_API_KEY": "<VULNFEED_API_KEY>"
}
}
}
}
Run commanduvx vulnfeed-mcp
Environment variables to set
VULNFEED_API_KEYSecretPolar.sh license key for paid tier (optional — free tier works without it)

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
pypivulnfeed-mcp0.3.10

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

The maintainer has not added details yet. Check the README in the repository.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.