Vulnicheck
Rank #29,288io.github.andrasfe/vulnicheck
MCP server providing vulnicheck capabilities
What you can do with Vulnicheck
Vulnicheck is a Model Context Protocol (MCP) server published by andrasfe. It ranks #29,288 of 168,415 active servers on MCP Toplist, and its repository has 11 GitHub stars. Vulnicheck is listed across 3 registries — Official MCP, PulseMCP and Glama, with 1 tracked version. It was first listed on Jun 21, 2025 and most recently updated on Sep 19, 2025.
Not verifiedMCP Toplist has not yet written a checked profile for this server, so the paragraph above is assembled from registry data only. The repository README is the authority on what it does.
What Vulnicheck can and cannot do
Not verifiedMCP Toplist has not catalogued this server's tools or limitations. The repository README lists them.
What you need before using Vulnicheck
The registry listing declares no required environment variables or authentication. This is declared metadata, not a verified install — the repository README is the authority.
Declared by Glama, last synced Nov 4, 2026. Not independently verified by MCP Toplist.
- NVD_API_KEY · optional
- GITHUB_TOKEN · optional
- OPENAI_API_KEY · optional
- ANTHROPIC_API_KEY · optional
- MCP_PORT · optional
- CACHE_TTL · optional
- VULNICHECK_HTTP_ONLY · optional
Connect Vulnicheck and confirm it works
claude mcp add vulnicheck -e "NVD_API_KEY=<your NVD_API_KEY>" -e "GITHUB_TOKEN=<your GITHUB_TOKEN>" -e "OPENAI_API_KEY=<your OPENAI_API_KEY>" -e "ANTHROPIC_API_KEY=<your ANTHROPIC_API_KEY>" -e "MCP_PORT=<your MCP_PORT>" -e "CACHE_TTL=<your CACHE_TTL>" -e "VULNICHECK_HTTP_ONLY=<your VULNICHECK_HTTP_ONLY>" -- docker run -i --rm docker.io/andrasfe/vulnicheck:mainReplace each placeholder with your own value before saving.
[mcp_servers.vulnicheck]
command = "docker"
args = ["run", "-i", "--rm", "docker.io/andrasfe/vulnicheck:main"]
[mcp_servers.vulnicheck.env]
NVD_API_KEY = "<your NVD_API_KEY>"
GITHUB_TOKEN = "<your GITHUB_TOKEN>"
OPENAI_API_KEY = "<your OPENAI_API_KEY>"
ANTHROPIC_API_KEY = "<your ANTHROPIC_API_KEY>"
MCP_PORT = "<your MCP_PORT>"
CACHE_TTL = "<your CACHE_TTL>"
VULNICHECK_HTTP_ONLY = "<your VULNICHECK_HTTP_ONLY>"Add to ~/.codex/config.toml. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"vulnicheck": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/andrasfe/vulnicheck:main"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>",
"GITHUB_TOKEN": "<your GITHUB_TOKEN>",
"OPENAI_API_KEY": "<your OPENAI_API_KEY>",
"ANTHROPIC_API_KEY": "<your ANTHROPIC_API_KEY>",
"MCP_PORT": "<your MCP_PORT>",
"CACHE_TTL": "<your CACHE_TTL>",
"VULNICHECK_HTTP_ONLY": "<your VULNICHECK_HTTP_ONLY>"
}
}
}
}Add to claude_desktop_config.json (Settings → Developer → Edit Config). Replace each placeholder with your own value before saving.
{
"mcpServers": {
"vulnicheck": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/andrasfe/vulnicheck:main"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>",
"GITHUB_TOKEN": "<your GITHUB_TOKEN>",
"OPENAI_API_KEY": "<your OPENAI_API_KEY>",
"ANTHROPIC_API_KEY": "<your ANTHROPIC_API_KEY>",
"MCP_PORT": "<your MCP_PORT>",
"CACHE_TTL": "<your CACHE_TTL>",
"VULNICHECK_HTTP_ONLY": "<your VULNICHECK_HTTP_ONLY>"
}
}
}
}Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per project). Replace each placeholder with your own value before saving.
{
"servers": {
"vulnicheck": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/andrasfe/vulnicheck:main"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>",
"GITHUB_TOKEN": "<your GITHUB_TOKEN>",
"OPENAI_API_KEY": "<your OPENAI_API_KEY>",
"ANTHROPIC_API_KEY": "<your ANTHROPIC_API_KEY>",
"MCP_PORT": "<your MCP_PORT>",
"CACHE_TTL": "<your CACHE_TTL>",
"VULNICHECK_HTTP_ONLY": "<your VULNICHECK_HTTP_ONLY>"
}
}
}
}Save as .vscode/mcp.json in your workspace. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"vulnicheck": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/andrasfe/vulnicheck:main"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>",
"GITHUB_TOKEN": "<your GITHUB_TOKEN>",
"OPENAI_API_KEY": "<your OPENAI_API_KEY>",
"ANTHROPIC_API_KEY": "<your ANTHROPIC_API_KEY>",
"MCP_PORT": "<your MCP_PORT>",
"CACHE_TTL": "<your CACHE_TTL>",
"VULNICHECK_HTTP_ONLY": "<your VULNICHECK_HTTP_ONLY>"
}
}
}
}Add to ~/.codeium/windsurf/mcp_config.json. Replace each placeholder with your own value before saving.
{
"mcpServers": {
"vulnicheck": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/andrasfe/vulnicheck:main"
],
"env": {
"NVD_API_KEY": "<your NVD_API_KEY>",
"GITHUB_TOKEN": "<your GITHUB_TOKEN>",
"OPENAI_API_KEY": "<your OPENAI_API_KEY>",
"ANTHROPIC_API_KEY": "<your ANTHROPIC_API_KEY>",
"MCP_PORT": "<your MCP_PORT>",
"CACHE_TTL": "<your CACHE_TTL>",
"VULNICHECK_HTTP_ONLY": "<your VULNICHECK_HTTP_ONLY>"
}
}
}
}Replace each placeholder with your own value before saving.
After adding the config, ask your client to list this server's tools. A tool list confirms the connection; an empty list or an error means the server did not start or needs credentials.
When to choose another server
No task-specific alternatives are catalogued for Vulnicheckyet; the list above is its publisher's other servers.
What changed, and when this was checked
- First listed
- Jun 21, 2025
- Latest version published
- Sep 19, 2025
- Version history
- 1 version tracked (below)
- Requirements evidence
- Declared by Glama, last synced Nov 4, 2026. Not independently verified by MCP Toplist.
- Profile checked
- Not yet — purpose, capabilities and requirements above come from registry data only
- Ranking data as of
- Nov 4, 2026
- Official MCP ↗listed since Apr 25, 2026 · still listed
- PulseMCP ↗listed since Jun 4, 2026 · still listed
- Glama ↗listed since Jun 22, 2026 · still listed
Do you maintain Vulnicheck? to correct or enrich this profile.
Available versions (1)
| Version | Published |
|---|---|
| 0.1.0 | Sep 19, 2025 |
Ranks ahead of 139,127 of 168,415 servers on MCP Toplist.
Show your rank
Maintain this server? Add the live rank badge to your README — it updates automatically as the leaderboard changes.
[](https://mcptoplist.com/server/io.github.andrasfe%2Fvulnicheck)<a href="https://mcptoplist.com/server/io.github.andrasfe%2Fvulnicheck"><img src="https://mcptoplist.com/badge/io.github.andrasfe%2Fvulnicheck.svg" alt="MCP Toplist: Top 25% of 168,415" /></a>Variants: append ?metric=score or ?metric=stars to the image URL.
Frequently asked questions
- Who maintains Vulnicheck?
- Vulnicheck is maintained by andrasfe, which publishes 2 MCP servers (1 total version) tracked on MCP Toplist.
- Is Vulnicheck listed on the Official MCP Registry?
- Yes — Vulnicheck is listed on the Official MCP Registry, alongside PulseMCP and Glama.
- How many versions does Vulnicheck have?
- MCP Toplist tracks 1 version of Vulnicheck, most recently published on Sep 19, 2025.
- Where can I find the source code for Vulnicheck?
- The source code for Vulnicheck is hosted at github.com/andrasfe/vulnicheck.
Do you run this server?
Community projects list the MCP servers behind real agents and apps. Publish yours and this page will link to it.