Loading
Vulnicheck
io.github.andrasfeClaim this server
Power your agent
Add this server
The publisher's own command. Not a PlugMCP endpoint.
Host a copy with our keys and logs.
Local command
docker run -i --rm docker.io/andrasfe/vulnicheck:mainCredentials from the publisher
- NVD_API_KEY — API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds)
- GITHUB_TOKEN — GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour)
- OPENAI_API_KEY — OpenAI API key for LLM-based risk assessment in MCP passthrough operations
- ANTHROPIC_API_KEY — Anthropic API key for LLM-based risk assessment (alternative to OpenAI)
- MCP_PORT — Port for MCP HTTP server (default: 3000)
- CACHE_TTL — Cache time-to-live in seconds for vulnerability data (default: 900)
- VULNICHECK_HTTP_ONLY — Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)
Claude Code has no install link for a local command. Copy the command below and run it in a terminal.
shClaude Code
NVD_API_KEY=<secret> GITHUB_TOKEN=<secret> OPENAI_API_KEY=<secret> ANTHROPIC_API_KEY=<secret> MCP_PORT=<value> CACHE_TTL=<value> VULNICHECK_HTTP_ONLY=<value> claude mcp add io.github.andrasfe-vulnicheck -- docker run -i --rm docker.io/andrasfe/vulnicheck:mainRun in a terminal.
jsonClaude Desktop
{ "mcpServers": { "io.github.andrasfe-vulnicheck": { "command": "docker", "args": [ "run", "-i", "--rm", "docker.io/andrasfe/vulnicheck:main" ], "env": { "NVD_API_KEY": "<secret>", "GITHUB_TOKEN": "<secret>", "OPENAI_API_KEY": "<secret>", "ANTHROPIC_API_KEY": "<secret>", "MCP_PORT": "<value>", "CACHE_TTL": "<value>", "VULNICHECK_HTTP_ONLY": "<value>" } } }}claude_desktop_config.json
Local · ociPublisher installStep-by-step: add this in Claude
Remote URL or a command on your machine? How the two installs differ
Run on PlugMCP
Host a copy with our keys and logs.
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
LaunchServer facts
Local- Transport
- stdio
- Version
Tools
Tools
No tool list yet. Remote servers get one after the first health check.
FAQ