CodeVulnerability is answering right now. Last checked 10 min ago. It exposes 1 tools.
OWASP threat scanner auditing codebases for safety leaks.
Today is the operative word: we check CodeVulnerability every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 10 min ago.
claude mcp add codevulnerability --transport sse https://codevulnerability-mcp.vercel.app/api/mcp
https://codevulnerability-mcp.vercel.app/api/mcp
[mcp_servers.codevulnerability]
url = "https://codevulnerability-mcp.vercel.app/api/mcp"
{
"mcpServers": {
"codevulnerability": {
"url": "https://codevulnerability-mcp.vercel.app/api/mcp"
}
}
}
{
"servers": {
"codevulnerability": {
"type": "sse",
"url": "https://codevulnerability-mcp.vercel.app/api/mcp"
}
}
}
This endpoint answered with an authorization challenge. The server is running, but it did not say what kind of credentials it expects.
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
audit
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://codevulnerability-mcp.vercel.app/api/mcp | sse | needs auth | 89 ms | 10 min ago |
Premium agentic endpoint for codevulnerability-mcp.
Analyzes code for bugs, security vulnerabilities, and code smells
Scan GitHub-hosted AI skills for vulnerabilities: prompt injection, malware, OWASP LLM Top 10.
Framework-aware technical SEO and AI-discoverability (GEO) audits for your codebase, in your editor.
MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.
Scan codebases for LLM/AI SDK usage, exposed API tokens, and hardcoded secrets.
Security audit for AI agents — scan code/diffs for leaked secrets, check deps via OSV.
Read-only access to your Auditon vulnerability scans: findings, endpoints, reports and changes.
Answers built from our own checks of this server.