Loading
GhostFree
io.github.shane-jsClaim this server
Power your agent
Add this server
The publisher's own command. Not a PlugMCP endpoint.
Host a copy with our keys and logs.
Local command
npx -y [email protected]Credentials from the publisher
- GHOSTFREE_DIR — Override the directory where GhostFree stores its data files (accepted-risks.yml, config.yml). Defaults to .ghostfree/ in the scanned repository root.
- GHOSTFREE_MIN_SEVERITY — Minimum CVE severity level to surface. One of: CRITICAL, HIGH, MEDIUM (default), LOW.
- NVD_API_KEY — Optional NVD API key for higher rate limits when enriching CVE details. Free to request at https://nvd.nist.gov/developers/request-an-api-key.
Claude Code has no install link for a local command. Copy the command below and run it in a terminal.
shClaude Code
GHOSTFREE_DIR=<value> GHOSTFREE_MIN_SEVERITY=<value> NVD_API_KEY=<secret> claude mcp add io.github.shane-js-ghostfree -- npx -y ghostfree@0.2.0Run in a terminal.
jsonClaude Desktop
{ "mcpServers": { "io.github.shane-js-ghostfree": { "command": "npx", "args": [ "-y", "[email protected]" ], "env": { "GHOSTFREE_DIR": "<value>", "GHOSTFREE_MIN_SEVERITY": "<value>", "NVD_API_KEY": "<secret>" } } }}claude_desktop_config.json
Local · npmPublisher installStep-by-step: add this in Claude
Remote URL or a command on your machine? How the two installs differ
Run on PlugMCP
Host a copy with our keys and logs.
A new server you create. It is not this listing's official endpoint. Use the publisher install when you want their URL and their credentials.
LaunchServer facts
Local- Transport
- stdio
- Version
Tools
Tools
No tool list yet. Remote servers get one after the first health check.
FAQ