mcpbeat Sign in

vu1nz MCP Server

by profullstack Your server? Claim it
answering

vu1nz is answering right now. Last checked 6 min ago. It exposes 12 tools.

Vulnerability intel (vu1nz.com)

Uptime history 4 hours of history · worst hour 75%
4 hours agonow
92.3%
Uptime 24h
12 of 13 checks
12
Tools
read from the server
367 ms
Response time
average over 24h
open, no key
Access
streamable-http

vu1nz does not always answer

Over the last week it answered 92.3% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.

Three servers free · no card

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 6 min ago.

run in your terminal
claude mcp add vu1nz --transport http https://vu1nz.com/api/mcp
Settings → Connectors → Add custom connector, then paste this address
https://vu1nz.com/api/mcp
~/.codex/config.toml
[mcp_servers.vu1nz]
url = "https://vu1nz.com/api/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "vu1nz": {
      "url": "https://vu1nz.com/api/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "vu1nz": {
      "type": "http",
      "url": "https://vu1nz.com/api/mcp"
    }
  }
}

Available tools 12

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

webhook
create_webhook
Add a webhook endpoint (public https URL). Returns the endpoint and its signing secret (shown once). Needs an API key.
delete_webhook
Remove one of your webhook endpoints by id. Needs an API key.
webhook_deliveries
Recent webhook deliveries (status, attempts, last HTTP status), optionally for one endpoint. Needs an API key.
blog
get_blog_post
Full content of a vu1nz blog post by slug.
list_blog_posts
All vu1nz blog posts: supply-chain analysis, release notes, security research. Returns slug, title, date, tags, summary, and URL.
advisories
list_advisories
vu1nz-published security advisories with date, severity, and summary.
checks
list_checks
The catalog of CI/CD security checks vu1nz runs, each mapped to a CWE. Use to explain to a user what vu1nz would catch on their PRs.
license
check_license
Look up the vu1nz subscription status for a GitHub org. Bootstraps a 14-day free trial on first call. Returns ok, status (trialing/active/past_due/cancelled/exempt), days remaining, license_key, and upgrade URL.
scan
scan_repo
Run vu1nz's 6 deterministic CI/CD security checks against any public GitHub repository's workflow files. Returns findings with severity, file, line, CWE, and recommendation.
test
test_webhook
Send a webhook.test event to one of your endpoints now and report the result. Needs an API key.
threat
threat_feed
Recent malicious packages caught in the wild across npm, pip, cargo, rubygems. Sourced from OSV.dev with a curated fallback list (Shai-Hulud, Polyfill.io, ctx, ua-parser-js, etc.).
webhooks
list_webhooks
List your vu1nz webhook endpoints and the event types vu1nz emits (scan.completed, scan.failed). Needs an API key.

Endpoints

URLTransportStateLatencyChecked
https://vu1nz.com/api/mcp streamable-http answering 349 ms 6 min ago

Alternatives to vu1nz

same job, measured the same way
Circl Vulnerability Lookup
by pipeworx-io

CIRCL Vulnerability-Lookup — aggregated vulnerability records

164 installs/wk 47 tools answering
PkgSeek Linux Intelligence
by yeagoo

Linux package, file, command, vulnerability, lifecycle, migration, and repository intelligence.

23 tools answering
Osv
by pipeworx-io

OSV.dev (Open Source Vulnerabilities) MCP.

343 installs/wk 48 tools answering
C
CDC Social Vulnerability Index
by olyport

SVI scores and theme breakdowns by county and tract

4 tools answering
Execute codevulnerability-mcp
by evozim

Premium agentic endpoint for codevulnerability-mcp.

1 tools answering
Reachvuln
by cloudcorprecords

Rank vulnerabilities by whether the vulnerable code path is reachable in your code.

110 installs/wk local only
Bug Detector
by madhavi-opsera

Analyzes code for bugs, security vulnerabilities, and code smells

local only
NotCVE — CVE & Vulnerability Intelligence
by notcve

CVE & vulnerability search: 365k+ CVEs/NotCVEs, CVSS, EPSS, CISA KEV, exploits, patches, versions.

answering

vu1nz — questions

Answers built from our own checks of this server.

What can vu1nz do?
It exposes 12 tools, read directly from the server on our last check. Among them: check_license, create_webhook, delete_webhook, get_blog_post, list_advisories, list_blog_posts and 6 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
What is vu1nz mostly used for?
Its tools cluster around webhook and blog. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.
Is vu1nz working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 12 of 13 checks got a reply (92.3%), average response time 367 ms. The bar chart above shows every period we have measured.
How do I connect vu1nz?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does vu1nz need an API key?
No. vu1nz completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 12 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is vu1nz?
It answers our handshake in 367 ms on average, which is faster than 37% of all working MCP servers we measure. The comparison comes from our own checks across the whole registry, every 15 minutes.