mcpbeat Sign in

VulnFeed MCP Server

by infai-tech Your server? Claim it
local only

VulnFeed runs on your own machine — the client starts it, so there is no endpoint to ping. 7 installs a week from pypi.

Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.

The linked repository no longer exists on GitHub — it was deleted or made private.

Installs per day peak 65 · avg 12 · +17% w/w
a month agotoday
7
Installs / week
pypi · vulnfeed-mcp
—
Stars
on GitHub
—
Last commit
from GitHub
—
License
language unknown

What changed 1

Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 9 August 2026. No other catalogue keeps this.

9 Aug the owner changed

What the code does

We have not read this server's code yet, 20 d ago · rules ccca72095570

Capabilities

What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.

Reads files and sends them to the network vulnfeed_mcp/server.py:598
    for root, dirs, files in os.walk(project):

Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.

This code can reach further than it looks

We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.

Three servers free · no card

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

run in your terminal
claude mcp add vulnfeed -- uvx vulnfeed-mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "vulnfeed": {
      "command": "uvx",
      "args": [
        "vulnfeed-mcp"
      ]
    }
  }
}
~/.codex/config.toml
[mcp_servers.vulnfeed]
command = "uvx"
args = ["vulnfeed-mcp"]
.cursor/mcp.json
{
  "mcpServers": {
    "vulnfeed": {
      "command": "uvx",
      "args": [
        "vulnfeed-mcp"
      ]
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "vulnfeed": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "vulnfeed-mcp"
      ]
    }
  }
}

Optional settings from the registry entry, left out of the block above: VULNFEED_API_KEY (Polar.sh license key for paid tier (optional — free tier works without it)).

Alternatives to VulnFeed

same job, measured the same way
VulnFeed
by novadyne-hq

Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.

local only
OWASP ZAP MCP Server
by pierre3

MCP server for OWASP ZAP vulnerability scanning with Docker management

local only
AgentGuard — security checks for AI agents
by shuaicongxiaomai

Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).

local only
Compliance Tools
by timzinin-api

Pay-per-call compliance lead scanners with free MCP discovery and x402 payments.

3 tools answering
MCPAmpel - MCP Security Scanner
by diemoeve

Scan installed MCP servers for security vulnerabilities with 16 detection engines.

104 installs/wk local only
GhostFree
by shane-js

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

48 installs/wk local only
MCP Security & Vulnerability Auditor
by ansarii

Static AST security scanner detecting command injection, leaked secrets, and SSRF in MCP tools.

1 tools answering
Synapse Audit
by digidenone

AI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.

50 installs/wk local only

VulnFeed — questions

Answers built from our own checks of this server.

Why is there no uptime for VulnFeed?
VulnFeed runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package vulnfeed-mcp was installed 7 times last week.
Is VulnFeed still maintained?
The linked repository no longer exists on GitHub — it was deleted or made private. We show this because it changes what you can expect: an unmaintained server may keep answering for months and then stop without warning.
How do I connect VulnFeed?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls vulnfeed-mcp straight from pypi; nothing to host, nothing to sign up for.
How many people use VulnFeed?
The pypi package vulnfeed-mcp was installed 7 times in the last week. Week over week that is +17%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.