mcpField
V

Vulnfeed

Local
github.com/infai-techSecurity0
Repository

About Vulnfeed

Vulnfeed is an MCP server for development teams scanning and monitoring dependency vulnerabilities across several ecosystems. It uses EPSS exploit probabilities to prioritize findings and provides fix-version recommendations and ongoing alerts.

Key features

  1. 01Scan lockfiles across multiple ecosystems
  2. 02Check individual packages or CVEs
  3. 03Filter and rank vulnerabilities by EPSS
  4. 04Recommend vulnerability fix versions
  5. 05Monitor projects and send webhook alerts

Use cases

  1. 01Scan project dependencies before upgrades
  2. 02Prioritize vulnerabilities more likely to be exploited
  3. 03Track new findings against a baseline scan
  4. 04Deliver ongoing monitoring alerts to a webhook

MCP support

Exposes dependency scanning, vulnerability lookup, project monitoring, and alert-management tools to MCP clients.

#security#devops

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "vulnfeed": {
      "command": "uvx",
      "args": [
        "vulnfeed-mcp"
      ],
      "env": {
        "VULNFEED_API_KEY": "<VULNFEED_API_KEY>"
      }
    }
  }
}
Run commanduvx vulnfeed-mcp
Environment variables to set
VULNFEED_API_KEYSecretPolar.sh license key for paid tier (optional — free tier works without it)

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
pypivulnfeed-mcp0.3.3

Tools

No tool list yet

Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.

Details

The maintainer has not added details yet. Check the README in the repository.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.