Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.
Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402. The vulnfeed mcp server wraps that behind the Model Context Protocol, so an assistant can use it through 2 defined tools rather than through you.
An MCP server that scans your project dependencies for known vulnerabilities, enriches with EPSS exploit probability scores, and recommends fix versions.
The server ships on PyPI as vulnfeed-mcp, so your MCP client can launch it on demand — there is no separate build step. Add the server block to your client's configuration, restart it, and the tools register themselves.
Everything the assistant can do here goes through one of these:
Scanning — The Scanning tool exposed by this serverMonitoring — The Monitoring tool exposed by this serverYou will need one environment variable: VULNFEED_API_KEY. The server will not start without them, which is usually why the tools fail to appear on a first run. Keep credentials in your client's env block or a secrets manager rather than in a file you might commit.
Among the monitoring and observability options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. VulnFeed's toolset — Scanning, Monitoring — is a fair guide to whether it matches your workflow. It is maintained by infai-tech; worth a glance at recent repository activity before you build anything load-bearing on it.
This entry was verified against VulnFeed's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.
| Tool | What it does |
|---|---|
| Scanning | The Scanning tool exposed by this server. |
| Monitoring | The Monitoring tool exposed by this server. |
{
"mcpServers": {
"vulnfeed": {
"command": "uvx",
"args": ["vulnfeed-mcp"],
"env": {
"VULNFEED_API_KEY": "your-value"
}
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
| Variable | Description | Required |
|---|---|---|
| VULNFEED_API_KEY | Credential the server authenticates with. | Yes |
Give your coding agent the full DevTools toolbox: traces, network, console, heap snapshots and Lighthouse.
Dashboards, Prometheus and Loki queries, incidents and alerts — observability by conversation.
Errors with full context — stack traces, issue triage and AI-powered root-cause analysis from Sentry's server.
Enables enhanced web research capabilities for large language models through intelligent search queuing and advanced content extraction.
Automates browser interactions and enables Large Language Models (LLMs) to interact with web pages through Playwright and Chrome DevTools Protocol
Guides tool usage by providing recommendations for MCP tools at each problem-solving stage.