Vaast MCP Server

by xtrinel Your server? Claim it

local only

Vaast runs on your own machine — the client starts it, so there is no endpoint to ping. 47 installs a week from npm.

Read-only access to VAAST vulnerability scan findings, workspaces, and targets for AI agents

Installs per day peak 285 · avg 14 · -76% w/w

a month agotoday

Installs / week

npm · @xtrinel/vaast-mcp

—

Stars

on GitHub

—

Last commit

2 releases in 90 days

—

License

language unknown

Nothing serious here today

Today is the operative word: we check Vaast every 15 minutes and re-read its code on every release. Watch it and you find out the day that stops being true.

Connect this server

This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.

Claude Code Claude Desktop Codex Cursor VS Code

run in your terminal

claude mcp add vaast -- npx -y @xtrinel/vaast-mcp

~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "vaast": {
      "args": [
        "-y",
        "@xtrinel/vaast-mcp"
      ],
      "command": "npx"
    }
  }
}

~/.codex/config.toml

[mcp_servers.vaast]
command = "npx"
args = ["-y", "@xtrinel/vaast-mcp"]

.cursor/mcp.json

{
  "mcpServers": {
    "vaast": {
      "args": [
        "-y",
        "@xtrinel/vaast-mcp"
      ],
      "command": "npx"
    }
  }
}

.vscode/mcp.json

{
  "mcpServers": {
    "vaast": {
      "args": [
        "-y",
        "@xtrinel/vaast-mcp"
      ],
      "command": "npx"
    }
  }
}

Alternatives to Vaast

same job, measured the same way

Snyk API & Web MCP Server

by snyk

MCP server for Snyk API & Web — DAST scanning, findings management, and vulnerability triage

138 installs/wk local only

Fetter MCP

by fetter-io

Real-time Python package and vulnerability data for AI coding agents.

3 tools answering

ScriptDocs MCP

by timwal78

Real, live npm/PyPI docs and OSV.dev vulnerability data for AI coding agents. No fake data.

37 installs/wk local only

Agent Security Scanner

by mikehzp

Scan AI agents for tool-calling vulnerabilities: prompt leaks, hijacking, injections, and more.

147 installs/wk local only

AgentGuard — security checks for AI agents

by shuaicongxiaomai

Secret, CVE and dependency-vulnerability scanning for AI agents (free, OSV.dev).

local only

MCP Server Security Audit

by joepangallo

Scan websites for security vulnerabilities, headers, TLS, and email security.

31 installs/wk local only

middleBrick

by middlebrick

Scan APIs for OWASP Top 10, LLM, and GraphQL security vulnerabilities.

22 installs/wk local only

Scanpay

by misterio070

Code security scanner for AI agents. 45+ vulnerability patterns, AST analysis, Solana micropayments.

39 installs/wk local only

Vaast — questions

Answers built from our own checks of this server.

Why is there no uptime for Vaast?

Vaast runs on your own machine over stdio — there is no network address to reach, so uptime cannot be measured for it by anyone. What can be measured is adoption: the npm package @xtrinel/vaast-mcp was installed 47 times last week.

How do I connect Vaast?

Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It runs locally, so the command pulls @xtrinel/vaast-mcp straight from npm; nothing to host, nothing to sign up for.

How many people use Vaast?

The npm package @xtrinel/vaast-mcp was installed 47 times in the last week. Week over week that is -76%. We show installs rather than GitHub stars on purpose: a star is a bookmark, an install is someone actually running it.