io.github.andrasfe/vulnicheck

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

What does this entry provide?

io.github.andrasfe/vulnicheck is an MCP server entry in ChatHome Skills, sourced from Official MCP Registry and scored 63/100. As a Model Context Protocol server, it exposes tools that MCP-compatible LLM clients such as Claude, Cursor, and Copilot can call directly, extending an agent's reach beyond its built-in capabilities. ChatHome Skills discovered this entry through its daily ingest of official registries and GitHub discovery queries, and re-verifies repository facts, freshness signals, and install metadata on every run. The quality score weighs official-registry presence, a working install command, license clarity, GitHub star trajectory, and repository freshness — the full formula is on the Sources page. The install command above is ready to copy. Review the last-pushed date and repository status before adding io.github.andrasfe/vulnicheck to a production agent workflow; the snapshot facts below are point-in-time values from the most recent ingest.

Snapshot facts

Source: Official MCP Registry
Quality: 63/100
Install method: oci
Repo: andrasfe/vulnicheck
Repo updated: Sep 19, 2025

Install command

docker run -i --rm docker.io/andrasfe/vulnicheck:main

Install method: oci

Review the upstream source before running this command.

GitHub project

Quality

Repo stars

Repo updated

Sep 19, 2025

How is this score calculated?

Weighted across six dimensions, scored 0-100.
Provenance (25): listed in an official or curated registry.
Installability (25): a runnable install command beats a declared transport, which beats a source checkout.
Maintenance (20): recency of the last push; archived entries score zero here.
Adoption (20): repository stars on a log curve.

MCP manifest

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2025-09-19T18:01:49.485418Z",
      "publishedAt": "2025-09-19T18:01:49.485418Z",
      "statusChangedAt": "2025-09-19T18:01:49.485418Z"
    }
  },
  "server": {
    "name": "io.github.andrasfe/vulnicheck",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
    "version": "0.1.0",
    "packages": [
      {
        "transport": {
          "url": "http://localhost:3000/mcp",
          "type": "streamable-http"
        },
        "identifier": "docker.io/andrasfe/vulnicheck:main",
        "registryType": "oci",
        "environmentVariables": [
          {
            "name": "NVD_API_KEY",
            "format": "string",
            "isSecret": true,
            "description": "API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds)"
          },
          {
            "name": "GITHUB_TOKEN",
            "format": "string",
            "isSecret": true,
            "description": "GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour)"
          },
          {
            "name": "OPENAI_API_KEY",
            "format": "string",
            "isSecret": true,
            "description": "OpenAI API key for LLM-based risk assessment in MCP passthrough operations"
          },
          {
            "name": "ANTHROPIC_API_KEY",
            "format": "string",
            "isSecret": true,
            "description": "Anthropic API key for LLM-based risk assessment (alternative to OpenAI)"
          },
          {
            "name": "MCP_PORT",
            "format": "number",
            "description": "Port for MCP HTTP server (default: 3000)"
          },
          {
            "name": "CACHE_TTL",
            "format": "number",
            "description": "Cache time-to-live in seconds for vulnerability data (default: 900)"
          },
          {
            "name": "VULNICHECK_HTTP_ONLY",
            "format": "string",
            "description": "Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)"
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/andrasfe/vulnicheck",
      "source": "github"
    },
    "description": "HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis."
  }
}

Report an issue with this listing