GhostFree MCP Server

GhostFree is an MCP integration. MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

Packages and local setup

The published npm package is ghostfree, version 0.2.0. Its declared MCP transport is stdio.

The package declares GHOSTFREE_DIR: Override the directory where GhostFree stores its data files (accepted-risks.yml, config.yml). Defaults to .ghostfree/ in the scanned repository root.; GHOSTFREE_MIN_SEVERITY: Minimum CVE severity level to surface. One of: CRITICAL, HIGH, MEDIUM (default), LOW.; NVD_API_KEY: Optional NVD API key for higher rate limits when enriching CVE details. Free to request at https://nvd.nist.gov/developers/request-an-api-key..

This package has launch arguments in its registry record. Use the maintainer’s configuration for those arguments rather than launching it with only the package name.

Before connecting

Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.

Project and source

View the publisher’s registry entry · Project repository · Project website. This profile uses version 0.2.0 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.

Browse related other integrations MCP servers for tools that cover the same kind of work.