cosmic-mcp

All servers

vulnicheck

io.github.andrasfe/vulnicheck · version 0.1.0

Community listing. Not installed or verified by cosmic-mcp. Read the source and its permissions before you run it.

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

https://github.com/andrasfe/vulnicheck

Quick facts

  • Listing: Community
  • Published Sep 19, 18:01 UTC
  • Transport: streamable-http
  • Package: oci docker.io/andrasfe/vulnicheck:main
  • Listed by cosmic-mcp: Nov 9, 04:25 UTC

Security APIs and integrations

Setup snippets

Generated from the registry entry. cosmic-mcp has not run or reviewed this server; values in angle brackets are yours to fill in.

Run it locally (oci)

docker run -i --rm -e 'ANTHROPIC_API_KEY' -e 'CACHE_TTL' -e 'GITHUB_TOKEN' -e 'MCP_PORT' -e 'NVD_API_KEY' -e 'OPENAI_API_KEY' -e 'VULNICHECK_HTTP_ONLY' 'docker.io/andrasfe/vulnicheck:main'

Claude Desktop (claude_desktop_config.json)

{
  "mcpServers": {
    "vulnicheck": {
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "ANTHROPIC_API_KEY",
        "-e",
        "CACHE_TTL",
        "-e",
        "GITHUB_TOKEN",
        "-e",
        "MCP_PORT",
        "-e",
        "NVD_API_KEY",
        "-e",
        "OPENAI_API_KEY",
        "-e",
        "VULNICHECK_HTTP_ONLY",
        "docker.io/andrasfe/vulnicheck:main"
      ],
      "command": "docker",
      "env": {
        "ANTHROPIC_API_KEY": "<your anthropic api key>",
        "CACHE_TTL": "<your cache ttl>",
        "GITHUB_TOKEN": "<your github token>",
        "MCP_PORT": "<your mcp port>",
        "NVD_API_KEY": "<your nvd api key>",
        "OPENAI_API_KEY": "<your openai api key>",
        "VULNICHECK_HTTP_ONLY": "<your vulnicheck http only>"
      }
    }
  }
}

Claude Code

claude mcp add 'vulnicheck' -- docker run -i --rm -e 'ANTHROPIC_API_KEY' -e 'CACHE_TTL' -e 'GITHUB_TOKEN' -e 'MCP_PORT' -e 'NVD_API_KEY' -e 'OPENAI_API_KEY' -e 'VULNICHECK_HTTP_ONLY' 'docker.io/andrasfe/vulnicheck:main'

Cursor (.cursor/mcp.json)

{
  "mcpServers": {
    "vulnicheck": {
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "ANTHROPIC_API_KEY",
        "-e",
        "CACHE_TTL",
        "-e",
        "GITHUB_TOKEN",
        "-e",
        "MCP_PORT",
        "-e",
        "NVD_API_KEY",
        "-e",
        "OPENAI_API_KEY",
        "-e",
        "VULNICHECK_HTTP_ONLY",
        "docker.io/andrasfe/vulnicheck:main"
      ],
      "command": "docker",
      "env": {
        "ANTHROPIC_API_KEY": "<your anthropic api key>",
        "CACHE_TTL": "<your cache ttl>",
        "GITHUB_TOKEN": "<your github token>",
        "MCP_PORT": "<your mcp port>",
        "NVD_API_KEY": "<your nvd api key>",
        "OPENAI_API_KEY": "<your openai api key>",
        "VULNICHECK_HTTP_ONLY": "<your vulnicheck http only>"
      }
    }
  }
}

VS Code (.vscode/mcp.json)

{
  "servers": {
    "vulnicheck": {
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "ANTHROPIC_API_KEY",
        "-e",
        "CACHE_TTL",
        "-e",
        "GITHUB_TOKEN",
        "-e",
        "MCP_PORT",
        "-e",
        "NVD_API_KEY",
        "-e",
        "OPENAI_API_KEY",
        "-e",
        "VULNICHECK_HTTP_ONLY",
        "docker.io/andrasfe/vulnicheck:main"
      ],
      "command": "docker",
      "env": {
        "ANTHROPIC_API_KEY": "<your anthropic api key>",
        "CACHE_TTL": "<your cache ttl>",
        "GITHUB_TOKEN": "<your github token>",
        "MCP_PORT": "<your mcp port>",
        "NVD_API_KEY": "<your nvd api key>",
        "OPENAI_API_KEY": "<your openai api key>",
        "VULNICHECK_HTTP_ONLY": "<your vulnicheck http only>"
      },
      "type": "stdio"
    }
  }
}

Related servers

  • AgentTrust — Identity & Trust for A2A Agents Verified domain
    Identity, trust, and A2A orchestration for autonomous AI agents. Official A2A partner.
  • Atako Verified domain
    Remote MCP server to run your Atako AI agents: chat, projects, files, integrations and channels.
  • AwrAIter — Telegram channels Verified domain
    Telegram channels you administer: analytics, content plans, scheduled publishing. No userbot
  • 01Mind Verified domain
    A machine-to-machine agent superstore -- paid API services for autonomous agents via x402 on Base.
  • 0xArchive Market Data Verified domain
    Hyperliquid and Lighter market data: order books, trades, candles, funding, OI, and webhooks
  • 10ML Perfume Finder Verified domain
    Free perfume MCP server and fragrance API: 6,000+ perfumes, note pyramids, accords, similar scents.