The VulnCheck MCP Server

The VulnCheck MCP Server connects AI assistants to VulnCheck vulnerability intelligence. Ask your AI tools about CVEs, exploits, advisories, and vulnerable packages — directly in your editor or terminal, using natural language.

Use Cases

• CVE research: Look up vulnerability details, severity, exploitability, and affected versions while reviewing code or triaging issues
• Dependency analysis: Check packages by CPE or PURL to identify known vulnerabilities before shipping
• Exploit intelligence: Determine whether a CVE has known exploit code, active exploitation, or C2 indicators
• Advisory lookup: Search vendor and ecosystem advisories by package, product, or keyword
• Index queries: Query VulnCheck's breach, botnet, and threat intelligence indices for real-time context

Requirements

• A VulnCheck API token — create one here

Installation

Download the latest release from the Releases page, or use the Docker image (ghcr.io/vulncheck-oss/mcp).

Install in Your AI Client

• Claude Code & Claude Desktop
• Cursor
• VS Code
• Windsurf
• Cline
• Gemini CLI
• Codex CLI

Available Tools

See docs/tools.md for the full list of available tools.

Development

make build      # build for current platform → bin/vulncheck-mcp
make snapshot   # cross-compile all platforms via GoReleaser → dist/
make test       # run tests
make lint       # run golangci-lint