MCP server

Ai Vdb Official

kr.ai.vdb/vdb

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.

Website Source

At a glance

Type

MCP server

Publisher

ai.kr (verified by the MCP Registry)

Status

Working at last check

Tools

7

Token cost

About 912 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http vdb https://vdb.ai.kr/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.vdb]
url = "https://vdb.ai.kr/mcp"

Gemini CLI

{"mcpServers":{"vdb":{"httpUrl":"https://vdb.ai.kr/mcp"}}}

Cursor

{"mcpServers":{"vdb":{"url":"https://vdb.ai.kr/mcp"}}}

VS Code

{"servers":{"vdb":{"type":"http","url":"https://vdb.ai.kr/mcp"}}}

Antigravity

agy mcp add vdb https://vdb.ai.kr/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"vdb","server_url":"https://vdb.ai.kr/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"vdb","server_url":"https://vdb.ai.kr/mcp"}

Tools

• vdb_check_mcp_server ~132 tokens
  BEFORE recommending a community/unofficial MCP server, check it here. Scope risk is evaluated independently of advisory risk — an unvetted publisher asking for shell or filesystem access is refused even with a clean record. Follow the returned `agent_action`.
• vdb_check_package ~194 tokens
  BEFORE recommending or installing any package, check it here. The response carries `agent_action`: REFUSE (do not add it — relay the `because` text to the user), CONFIRM (ask the user first), or PROCEED. A failed or rate-limited call also answers REFUSE; never proceed unchecked. Also returns the und
• vdb_check_packages ~165 tokens
  Bulk-check several packages in one call — always prefer this over repeated vdb_check_package. Each result carries its own `agent_action` (REFUSE / CONFIRM / PROCEED) plus a top-level `agent_action` for the batch. Follow them; relay `because` when refusing. Send names EXACTLY as written — do not corr
• vdb_list_slopsquatting ~86 tokens
  List packages currently flagged as slopsquatting candidates in a given ecosystem.
• vdb_lookup ~65 tokens
  Fetch a single vulnerability by ID or alias (e.g. CVE-2024-1234, GHSA-xxxx-yyyy-zzzz, VDB-SLOP-…).
• vdb_scan_lockfile ~206 tokens
  BEFORE merging, scan the resolved lockfile. Checking the packages someone chose misses the transitive ones nobody did — which is usually where the risk is. Pass the file contents (package-lock.json, requirements.txt, uv.lock, go.sum, Cargo.lock, a CycloneDX SBOM, …). Returns `agent_action`: REFUSE m
• vdb_search ~64 tokens
  Free-text search over the VDB vulnerability corpus.

Browse

• Security scanning

Related MCP servers

• Krabbot Devtools
  AI-agent-run devtools: package install risk, stack EOL/CVE checks, scored OSS bounties.
• Stack Facts
  Signed EOL dates, exploited CVEs and LLM prices; pay per call in USDC, no account, no daily cap.
• The Agent Forge
  See which AI models fall for traps in real jobs, and check MCP servers or skills before install.
• APEX Faucet
  Free X1 and Arc faucets plus 160+ agent tools: token exit checks, launches, yield, web pages.
• FactStamp
  Verify a company, figure or citation before you rely on it. Card or crypto; signed receipt.
• Stormap
  Brainstorm scored idea maps, check npm/PyPI packages and vendors, find the right paid API.
• overflo.ws
  Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.
• Jeevesus — DugganUSA threat-intel MCP
  Membrane for AI agents: threat intel you can check, IOC enrichment, pre-install package checks.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/kr.ai.vdb/vdb.svg)](https://aptlynx.net/servers/kr.ai.vdb/vdb)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents