Vuln Triage MCP Server

by kimmawla Your server? Claim it

local only

Vuln Triage MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 119 installs a week from pypi. Last commit 22 Oct 2026.

Tells your AI agent which vulnerabilities to fix first, using OSV.dev, FIRST EPSS, and CISA KEV.

Installs per day peak 221 · avg 16 · -69% w/w

a month agotoday

119

Installs / week

pypi · vuln-triage-mcp

Stars

0 open issues

22 Oct 2026

Last commit

from GitHub

MIT

License

Python

Nothing serious here today

Today is the operative word: we check Vuln Triage MCP every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add vuln-triage-mcp -- uvx vuln-triage-mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "vuln-triage-mcp": {
      "command": "uvx",
      "args": [
        "vuln-triage-mcp"
      ]
    }
  }
}

~/.codex/config.toml

[mcp_servers.vuln-triage-mcp]
command = "uvx"
args = ["vuln-triage-mcp"]

.cursor/mcp.json

{
  "mcpServers": {
    "vuln-triage-mcp": {
      "command": "uvx",
      "args": [
        "vuln-triage-mcp"
      ]
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "vuln-triage-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "vuln-triage-mcp"
      ]
    }
  }
}

Alternatives to Vuln Triage MCP

same job, measured the same way

overflo.ws

by overflo

Look up CVEs, CISA KEV, EPSS and open-source package vulnerabilities, including malicious packages.

7 tools answering

Vulnerability Exposure

by mrfrazer25

Confirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CISA KEV, EPSS)

1 342 installs/wk local only

Osv

by pipeworx-io

OSV.dev (Open Source Vulnerabilities) MCP.

48 tools answering

AgentGuard — security checks for AI agents

by shuaicongxiaomai

Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).

local only

Vaast

by xtrinel

Read-only access to VAAST vulnerability scan findings, workspaces, and targets for AI agents

52 installs/wk local only

ScriptDocs MCP

by timwal78

Real, live npm/PyPI docs and OSV.dev vulnerability data for AI coding agents. No fake data.

59 installs/wk local only

Sekura

by sekura

Scan a GitHub repository for vulnerabilities, with proof for every finding, from your coding agent.

answering

Ostorlab

by ostorlab

Query and act on your Ostorlab scans, vulnerabilities, tickets and assets.

answering

Vuln Triage MCP — questions

Answers built from our own checks of this server.

Why is there no uptime for Vuln Triage MCP?

Vuln Triage MCP runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the pypi package vuln-triage-mcp was installed 119 times last week.

How do I connect Vuln Triage MCP?

Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It runs locally, so the command pulls vuln-triage-mcp straight from pypi; nothing to host, nothing to sign up for.

How many people use Vuln Triage MCP?

The pypi package vuln-triage-mcp was installed 119 times in the last week. Week over week that is -69%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.

Is Vuln Triage MCP open source?

Yes — it is published under the MIT licence, written in Python and 0 stars on GitHub. The source link is on this page, so you can read exactly what it does with your data before you connect it.