VulnFeed

Overview

VulnFeed is a Model Context Protocol server that scans your dependencies for vulnerabilities and scores them using EPSS. It provides nine MCP tools that integrate directly into AI assistants, letting Claude, Cursor, VS Code, and other clients invoke vulnerability checks on your behalf.

The server runs locally on your machine. Install it with uvx vulnfeed-mcp, which will run the Python package and communicate over stdio. You'll need an API key to authenticate. The latest release is v0.3.3, distributed under the MIT license with source code at infai-tech/vulnfeed-mcp on GitHub. VulnFeed offers a free tier plus paid options via x402.

VulnFeed belongs in the Security category on mcp.site and works with MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. If you maintain this project for infai-tech, claim this listing to verify ownership and keep it up to date.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "vulnfeed": {
      "command": "uvx",
      "args": [
        "vulnfeed-mcp"
      ]
    }
  }
}