MCP server

SafeDep Vet MCP

io.github.safedep/vet-mcp

Checked 26 Oct 2026, 08:31 UTC · Checked against OSV.dev for malware and vulnerabilities; never run by us

Protect your AI agents and IDEs from malicious open-source packages.

Website Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Runs on your computer

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code

Last checked

26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add vet-mcp -- docker run -i --rm ghcr.io/safedep/vet:v1.20.0

Claude Desktop

{"mcpServers":{"vet-mcp":{"command":"docker","args":["run","-i","--rm","ghcr.io/safedep/vet:v1.20.0"]}}}

Codex (config.toml)

[mcp_servers.vet-mcp]
command = "docker"
args = ["run","-i","--rm","ghcr.io/safedep/vet:v1.20.0"]

Gemini CLI

{"mcpServers":{"vet-mcp":{"command":"docker","args":["run","-i","--rm","ghcr.io/safedep/vet:v1.20.0"]}}}

Cursor

{"mcpServers":{"vet-mcp":{"command":"docker","args":["run","-i","--rm","ghcr.io/safedep/vet:v1.20.0"]}}}

VS Code

{"servers":{"vet-mcp":{"type":"stdio","command":"docker","args":["run","-i","--rm","ghcr.io/safedep/vet:v1.20.0"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

• GitHub tools
• GitHub and code hosting

Related MCP servers

• overflo.ws
  Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.
• Dependency Vulnerability Tracker — package security advisories ($0.01/query)
  Dependency vulns & malicious-package advisories. Register in-session — free testnet funds.
• Jeevesus — DugganUSA threat-intel MCP
  Membrane for AI agents: threat intel you can check, IOC enrichment, pre-install package checks.
• DepScout
  Scan packages and lockfiles (npm, PyPI, Go, Maven, Cargo, NuGet) for vulnerabilities and malware.
• PG1 Sovereign Threat Intelligence
  Preflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.
• PkgGuard
  Dependency scan for agents: known CVEs and malicious packages via OSV.dev. By Crypto Money Maker
• vrsai
  Machine-native capabilities with explicit contracts and machine-readable commerce.
• TensorFeed
  AI news, model pricing, service status, and machine-payable premium tools. AFTA-certified.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.safedep/vet-mcp.svg)](https://aptlynx.net/servers/io.github.safedep/vet-mcp)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents