VulKill Security MCP Server

What the code does

We read the source, 1 d ago · tools taken from the live server · rules 995398eba69f

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

    r"|(?:^|/)(?:conftest\.py|test_[a-z0-9_]+\.py|build\.py|generate\.py|jest\.config\.[a-z]+|vitest\.config\.[a-z]+|vite\.config\.[a-z]+|webpack\.mix\.js|gulpfile\.js|Gruntfile\.js|mockServiceWorker\.js|AGENTS\.md|CLAUDE\.md)$",

            with subprocess.Popen(

        data = yaml.load(text, Loader=_SafeLoader)  # yalnız (C)SafeLoader: Python nesnesi kurulmaz

        target = posixpath.normpath(posixpath.join(caller_dir or ".", value))

    def exec(self, s: Any, env: dict[str, V]) -> tuple[dict[str, V], str | None]:

    if next_update <= updated or next_update - updated > _MAX_UPDATE_INTERVAL:
        _reject()
    if now > next_update + timedelta(seconds=grace):

            "      - '/var/run/docker.sock'\n"

    "/../../../../etc/shadow",

    return dict(os.environ if environ is None else environ)

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 7 min ago.

claude mcp add vulkill-security --transport http https://app.vulkill.com/api/mcp

https://app.vulkill.com/api/mcp

[mcp_servers.vulkill-security]
url = "https://app.vulkill.com/api/mcp"

{
  "mcpServers": {
    "vulkill-security": {
      "url": "https://app.vulkill.com/api/mcp"
    }
  }
}

{
  "servers": {
    "vulkill-security": {
      "type": "http",
      "url": "https://app.vulkill.com/api/mcp"
    }
  }
}

Available tools 12

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

Tools removed

Tools this server used to expose. Anything built against them stopped working on the day they went.

Endpoints