MCP server

VulnCheck

io.github.vulncheck-oss/mcp

Checked 26 Oct 2026, 08:31 UTC · Checked against OSV.dev for malware and vulnerabilities; never run by us

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

Runs on your computer

Source

At a glance

Type: MCP server
Publisher: Not verified
Status: Runs on your computer
Sets up in: Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code
Last checked: 26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to Cursor Add to VS Code VS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add vulncheck-oss -- docker run -i --rm ghcr.io/vulncheck-oss/mcp:0.2.3

Claude Desktop

{"mcpServers":{"vulncheck-oss":{"command":"docker","args":["run","-i","--rm","ghcr.io/vulncheck-oss/mcp:0.2.3"]}}}

Codex (config.toml)

[mcp_servers.vulncheck-oss]
command = "docker"
args = ["run","-i","--rm","ghcr.io/vulncheck-oss/mcp:0.2.3"]

Gemini CLI

{"mcpServers":{"vulncheck-oss":{"command":"docker","args":["run","-i","--rm","ghcr.io/vulncheck-oss/mcp:0.2.3"]}}}

Cursor

{"mcpServers":{"vulncheck-oss":{"command":"docker","args":["run","-i","--rm","ghcr.io/vulncheck-oss/mcp:0.2.3"]}}}

VS Code

{"servers":{"vulncheck-oss":{"type":"stdio","command":"docker","args":["run","-i","--rm","ghcr.io/vulncheck-oss/mcp:0.2.3"]}}}

Runs on your computer with your permissions: check the package and its source before installing.

Browse

Related MCP servers

Cve Intelligence
CVE intelligence: exploitation (KEV/EPSS), detection coverage, fixed versions, CPE configurations.
Magpie
Read-only access to Magpie, a daily brief on what became newly possible in AI.
Sectora
Threat intel + your scans/findings/Shield posture. CVE, EPSS, KEV, package vuln lookup, DAST.
Theaslangroupllc Pulsenetwork
914 paid market-data & token-safety endpoints — keyless x402 USDC: Base, Solana, XRPL, +8 chains
Outage.Me
Live cloud/SaaS outages, provider reliability and exploited CVEs from official status pages and CISA
PG1 Sovereign Threat Intelligence
Preflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.
Klarix Intelligence Engine
Cited competitive intelligence: prospect scoring, battlecards, SWOT, and tech-stack teardowns.
data-breach-detector
Read-only breach intel, full history 2007-today: reports THAT an org was breached, never the data.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.vulncheck-oss/mcp.svg)](https://aptlynx.net/servers/io.github.vulncheck-oss/mcp)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents