Vulnicheck

Overview

Vulnicheck is an HTTP MCP server that brings comprehensive Python vulnerability scanning and security analysis to MCP-compatible AI assistants. When integrated, models can call Vulnicheck's tools directly to identify and assess security issues in Python codebases.

The server runs locally via Docker using the image docker.io/andrasfe/vulnicheck:main, which communicates over stdio. It requires an API key for authentication. The latest release is v0.1.0, distributed under the MIT license with source code available at andrasfe/vulnicheck on GitHub.

Vulnicheck is categorized as Security on mcp.site and works with all major MCP clients including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, and Zed. If you maintain this project, you can claim this listing to verify ownership and keep the information up to date.

Installation

// claude_desktop_config.json
{
  "mcpServers": {
    "vulnicheck": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "docker.io/andrasfe/vulnicheck:main"
      ]
    }
  }
}