HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.
HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.
VulniCheck provides comprehensive security analysis for Python projects and GitHub repositories using AI-powered vulnerability detection. It runs as a Docker-based HTTP MCP server with standard HTTP streaming (no SSE required), providing secure containerized deployment with comprehensive vulnerability scanning capabilities.
Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| check_package_vulnerabilities | Check a specific Python package for vulnerabilities |
| scan_dependencies | Scan dependency files (requirements.txt, pyproject.toml, etc.) |
| scan_installed_packages | Scan currently installed Python packages |
| get_cve_details | Get detailed information about a specific CVE |
| scan_for_secrets | Detect exposed secrets and credentials in code |
| scan_dockerfile | Analyze Dockerfiles for vulnerable Python dependencies |
| scan_github_repo | Comprehensive security scan of GitHub repositories |
| assess_operation_safety | AI-powered risk assessment for operations |
| validate_mcp_security | Validate MCP server security configurations |
| comprehensive_security_check | Interactive AI-powered security assessment |
| Variable | Description | Required |
|---|---|---|
| FASTMCP_SERVER_AUTH_GOOGLE_CLIENT_ID | Configuration value read at startup. | Optional |
| FASTMCP_SERVER_AUTH_GOOGLE_CLIENT_SECRET | Credential the server authenticates with. | Yes |
| FASTMCP_SERVER_BASE_URL | Endpoint or connection string the server talks to. | Yes |
| OPENAI_API_KEY | Credential the server authenticates with. | Yes |
| ANTHROPIC_API_KEY | Credential the server authenticates with. | Yes |
| GITHUB_TOKEN | Credential the server authenticates with. | Yes |
| NVD_API_KEY | Credential the server authenticates with. | Yes |
| GOOGLE_CLIENT_ID | Configuration value read at startup. | Optional |
Read, search and edit files inside allowed directories with the Model Context Protocol reference Filesystem server.
Retrieve version-aware library documentation and code examples with Context7 MCP, using resolve-library-id and query-docs.
Use Microsoft’s Playwright MCP server to navigate pages, inspect accessibility snapshots, fill forms and capture browser screenshots.
Connect GitHub MCP to repositories, issues and pull requests with GitHub’s hosted service or a locally run server.
Use the Supabase MCP server to inspect database schemas, query project data and retrieve docs through a project-scoped connection.
Search Linear issues and projects, inspect work context and manage updates through Linear’s hosted MCP server with OAuth.