Vulnfeed

Created By

infai-tech20 days ago

An MCP server that scans your lockfiles (npm, PyPI, Go, Rust, Ruby, PHP) for known vulnerabilities, enriches with EPSS exploit probability scores, and recommends fix versions. $14/mo — not per-seat.

# Security

# DevOps

Overview Content Tools Comments

Overview

Introduction

VulnFeed monitors your project's dependencies for security vulnerabilities — native to Claude Code.

What it does:

Reads your lockfile (package-lock.json, requirements.txt, go.sum, Cargo.lock, Gemfile.lock, composer.lock, yarn.lock, Pipfile.lock, pnpm-lock.yaml)
Queries NVD + GitHub Advisory Database for known CVEs
Enriches with EPSS (Exploit Prediction Scoring System) scores to filter noise
Recommends exact fix versions from package registries
Monitors projects continuously — get alerts when new CVEs drop

9 tools:

scan_project — auto-detect and scan all lockfiles in a directory
scan_lockfile — scan a specific lockfile
check_package — check a single package for vulns
lookup_cve — detailed CVE info with EPSS + fix versions
monitor_project — register for continuous monitoring
check_alerts — new vulns since last scan
update_deps — update snapshot after upgrading packages
list_monitored — see all monitored projects
unmonitor_project — remove from monitoring

Free tier: 10 scans/day, 1 monitored project. No signup required. Paid: $14/mo via Polar.sh. Unlimited scans + projects.

Homepage

https://vulnfeed.novadyne.ai

Purchase URL

https://buy.polar.sh/polar_cl_l2u7OfEs3L3NaMKsCQByy271MbERK5JO6ePqR0mRfBj

Transport

stdio (local install), SSE (remote)

Tool count

Supported ecosystems

npm, PyPI, Go, crates.io, RubyGems, Packagist (9 lockfile formats)

Try in Playground

Server Config

{
  "mcpServers": {
    "vulnfeed": {
      "command": "uvx",
      "args": [
        "vulnfeed-mcp"
      ]
    }
  }
}

Project Info

Created At

20 days ago

Updated At

20 days ago

Author Name

infai-tech

Star

Language

License

Recommend Servers

View All

Slack

@modelcontextprotocol

Channel management and messaging capabilities

a year ago

Mnemom

a day ago

Name Brewery Domain Checker

@Name Brewery

Bulk domain checking for AI chats: availability, aftermarket prices, archive.org history, social handle links, and buy links. Your AI brainstorms names; check_domains reports what's real for up to 50 names across 6 TLDs per call. Free to start — 20 credits. Setup: https://namebrewery.com/mcp

12 hours ago

MCP Server with 10 Tools

@Ritika Bhati

A powerful MCP Server with 10 tools - weather, web search, currency converter, news, translator, QR code, image generator, IP info, Hacker News, URL fetcher. All free APIs!

3 hours ago

Blender

@ahujasid

BlenderMCP connects Blender to Claude AI through the Model Context Protocol (MCP), allowing Claude to directly interact with and control Blender. This integration enables prompt assisted 3D modeling, scene creation, and manipulation.

a year ago

Kubova

@Kubova

Kubova packs cargo into shipping containers and onto pallets and returns a verifiable 3D loading plan — exact coordinates, fit, utilization, weight balance. Over MCP, an assistant can request a plan and act on the structured result. Free tier; public REST API too.

10 hours ago

AGHIST

@Archiv-fur-Agrargeschichte

AGHIST is the search portal for agricultural, food and environmental history. It is run by the Archive of Rural History (ARH) in Bern (CH) and provides direct access to online resources (films, photographs and written sources, as well as catalogue data of archive collections, academic texts, video essays, etc.) made publicly available by the ARH and its partner institutions in Switzerland and abroad.

a day ago

Framelink Figma MCP Server

@GLips

MCP server to provide Figma layout information to AI coding agents like Cursor

TypeScript

a year ago

Jina AI MCP Tools

@PsychArch

A Model Context Protocol (MCP) server that integrates with Jina AI Search Foundation APIs.

JavaScript

a year ago

GBOX Android MCP

@babelcloud

GBOX provides environments for AI Agents to operate computer and mobile devices. Mobile Scenario: Your agents can use GBOX to develop/test android apps, or run apps on the Android to complete various tasks(mobile automation). Desktop Scenario: Your agents can use GBOX to operate desktop apps such as browser, terminal, VSCode, etc(desktop automation). MCP: You can also plug GBOX MCP to any Agent you like, such as Cursor, Claude Code. These agents will instantly get the ability to operate computer and mobile devices.

10 months ago

Linkpulse

@Joost Boer

Know what every affiliate link actually earns, and fix what's bleeding revenue. See revenue per article, catch dead links before they cost you, and ask it anything in plain English. Works on any site.

a day ago

Schemabrain

@Arun-kc

A read-only trust + intelligence layer between AI agents and your database — the agent never writes SQL, PII is refused before the query runs, and every call lands in a tamper-evident audit log. Postgres today.

3 hours ago

Cliqo Mcp

Create and manage short links - shorten URLs, list / inspect links, track credits. No subscriptions.

a day ago

Figma Mcp Express

@sunhome243

figma-mcp-express connects AI agents directly to Figma via a local plugin bridge. No Figma token required. No quota. No per-seat billing. Ships 70 discrete tools for reading design context, creating and mutating nodes, importing library components and variables, managing styles and tokens, running batch operations in a single round-trip, and exporting frames. Designed for agent-driven design automation workflows in Claude, Cursor, Codex, and other MCP-compatible clients.

2 days ago

Zhipu Web Search

@BigModel

Zhipu Web Search MCP Server is a search engine specifically designed for large models. It integrates four search engines, allowing users to flexibly compare and switch between them. Building upon the web crawling and ranking capabilities of traditional search engines, it enhances intent recognition capabilities, returning results more suitable for large model processing (such as webpage titles, URLs, summaries, site names, site icons, etc.). This helps AI applications achieve "dynamic knowledge acquisition" and "precise scenario adaptation" capabilities.

a year ago

MiniMax MCP

@MiniMax-AI

Official MiniMax Model Context Protocol (MCP) server that enables interaction with powerful Text to Speech, image generation and video generation APIs.

Python

a year ago

Wundervault MCP

@wundervault

MCP server for Wundervault zero-knowledge secret management. Exposes vault secrets to AI agents via the Model Context Protocol — secrets are decrypted server-side and never returned to the agent in plaintext.

a day ago

Mcp Server Chatsum

@chatmcp

summarize chat message

typescript

a year ago

Trainzilla Mcp

2 hours ago

Pinnacle Child Development Ask

@Pinnacle Blooms Network of Bharath Healthcare P LIMITED

Remote MCP server over 33,000+ clinician-governed, ICD-11/ICF-grounded child-development answers (autism, speech, ADHD, milestones) with intent-aware resolution and AbilityScore escalation.

2 days ago

Measurement Uncertainty (gum / Iso 17025)

@kyb8801

The first Model Context Protocol server for GUM-compliant measurement uncertainty analysis. Built for ISO/IEC 17025 calibration labs, ISO 10012:2026 measurement management systems, and KOLAS / A2LA / UKAS accredited testing. Exposes 10 tools: Type A/B uncertainty, combined standard uncertainty, Welch-Satterthwaite effective DoF, expanded uncertainty with coverage factor k, Monte Carlo propagation (JCGM 101:2008), and pre-built KOLAS-ready uncertainty budget templates (CMM, CD-SEM, DMM, thermocouple, balance, OCD). Standards-referenceable to JCGM 100:2008 (GUM). Works in Claude Desktop, Cursor, Windsurf, Cline. Hosted endpoint, no install required.

9 hours ago

Brave Search

@modelcontextprotocol

Web and local search using Brave's Search API

a year ago

mcp-server-flomo MCP Server

@chatmcp

Write notes to Flomo

JavaScript

a year ago

Neon MCP Server

@neondatabase-labs

MCP server for interacting with Neon Management API and databases

TypeScript

a year ago

Solnk MCP

@solnk

solnk is a social media management platform that lets you schedule and publish content to nine networks — Instagram, TikTok, YouTube, X, LinkedIn, Pinterest, Facebook, Threads, and Bluesky — from one place. Its MCP server lets AI agents draft and publish social posts through a single interface, with a draft-first safety model so nothing goes live without review. Includes a content calendar, team approval workflow, and analytics. Start free at solnk.com.

a day ago

SeedBase — Synthetic Test Data

@Marcel Gläser

Generate realistic, FK-consistent test data for your databases from your AI assistant. List projects, get schema DDL, generate datasets as SQL.

a day ago

Time

@modelcontextprotocol

A Model Context Protocol server that provides time and timezone conversion capabilities. This server enables LLMs to get current time information and perform timezone conversions using IANA timezone names, with automatic system timezone detection.

4 months ago

Bucket Feature Flags MCP Server

@bucketco

Flag features directly from chat in your code editor, including VS Code, Cursor, Windsurf, Claude Code—any IDE with MCP support.

a year ago

Mnemom

@Mnemom

Trust ratings for AI agents and websites. Look up an agent's reputation, scan a site's AI-trust-readiness, and verify signed scorecards in-band — reads are zero-auth. From Mnemom, the trust layer for the agent internet.

19 hours ago

MCP Advisor

@istarwyh

MCP Advisor & Installation - Use the right MCP server for your needs

TypeScript

a year ago