vulnicheck

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

HTTP v0.1.0

Connection Configuration

Add this to your AI agent's MCP config file to connect.

Run in your terminal:

claude mcp add io.github.andrasfe--vulnicheck -- docker

Transport

HTTP

Authentication

None

Version

v0.1.0

Server Name

io.github.andrasfe/vulnicheck

Last Updated

Sep 19, 2025

How to install and connect this MCP server.

Environment variables you must provide when running this server.

Variable	Description	Required
`NVD_API_KEY` secret	API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds)	Optional
`GITHUB_TOKEN` secret	GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour)	Optional
`OPENAI_API_KEY` secret	OpenAI API key for LLM-based risk assessment in MCP passthrough operations	Optional
`ANTHROPIC_API_KEY` secret	Anthropic API key for LLM-based risk assessment (alternative to OpenAI)	Optional
`MCP_PORT`	Port for MCP HTTP server (default: 3000)	Optional
`CACHE_TTL`	Cache time-to-live in seconds for vulnerability data (default: 900)	Optional
`VULNICHECK_HTTP_ONLY`	Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)	Optional