Skip to content

Conversation

@andrasfe
Copy link

@andrasfe andrasfe commented Jun 21, 2025

Description

VulniCheck MCP Serveris a handy tool that will assist you real-time during vibe coding about the potential risks of importing a particular module into your application. It queries OSV.dev, NVD, and GitHub Advisory databases for comprehensive vulnerability coverage, provides CVSS scores and CWE mappings, scans requirements.txt/pyproject.toml files, automatically discovers imports from Python source files when no dependency file exists, checks specific package versions or latest releases, detects secrets in code, and inspects currently installed packages in your environment. I am using it on a daily basis in my IDE-s.

Server Details

  • Server: N/A
  • Changes to: N/A

Motivation and Context

This change adds a new community-contributed MCP server to the list, making it discoverable for users.

How Has This Been Tested?

Tested with VSCode, Cursor, Cline, and Claude Code.

Breaking Changes

None.

Types of changes

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to change)
  • Documentation update

Checklist

  • I have read the MCP Protocol Documentation
  • My changes follows MCP security best practices
  • I have updated the server's README accordingly
  • I have tested this with an LLM client
  • My code follows the repository's style guidelines
  • New and existing tests pass locally
  • I have added appropriate error handling
  • I have documented all environment variables and configuration options

@olaservo
Copy link
Member

olaservo commented Jul 3, 2025

Thanks for your contribution to the servers list. This has been merged in this combined PR: #2263

This is a new process we're trying out, so if you see any issues feel free to re-open the PR and tag me.

@olaservo olaservo closed this Jul 3, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants