Vulnify

{
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "isLatest": true,
      "updatedAt": "2026-10-12T01:23:50.175534Z",
      "publishedAt": "2026-10-12T01:23:50.175534Z",
      "statusChangedAt": "2026-10-12T01:23:50.175534Z"
    }
  },
  "server": {
    "name": "io.vulnify/mcp",
    "icons": [
      {
        "src": "https://raw.githubusercontent.com/vulnify/vulnify-mcp/main/assets/logo.svg",
        "sizes": [
          "any"
        ],
        "theme": "dark",
        "mimeType": "image/svg+xml"
      }
    ],
    "title": "Vulnify",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
    "remotes": [
      {
        "url": "https://mcp.vulnify.io/mcp",
        "type": "streamable-http",
        "headers": [
          {
            "name": "Authorization",
            "value": "Bearer {api_key}",
            "isSecret": true,
            "variables": {
              "api_key": {
                "format": "string",
                "isSecret": true,
                "description": "Optional Vulnify API key (vln_live_... or vln_test_...). Leave empty to sign in with Vulnify."
              }
            },
            "description": "Sign in with Vulnify (OAuth 2.1). Leave this header empty. Set it only to send an API key (vln_live_... or vln_test_...) as a Bearer token. X-Vulnify-Key also works."
          }
        ]
      }
    ],
    "version": "0.1.4",
    "packages": [
      {
        "version": "0.1.4",
        "transport": {
          "type": "stdio"
        },
        "identifier": "@vulnify/mcp",
        "runtimeHint": "npx",
        "registryType": "npm",
        "environmentVariables": [
          {
            "name": "VULNIFY_API_KEY",
            "format": "string",
            "isSecret": true,
            "isRequired": true,
            "description": "Vulnify API key (vln_live_... or vln_test_...) for the local stdio process. The hosted server signs in with Vulnify and does not need this variable."
          },
          {
            "name": "VULNIFY_BASE_URL",
            "format": "string",
            "description": "API base URL. Defaults to https://api.vulnify.io."
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/vulnify/vulnify-mcp",
      "source": "github"
    },
    "websiteUrl": "https://docs.vulnify.io",
    "description": "Ask Vulnify before an AI agent acts. Check, record, and read policy decisions."
  }
}