# VulnCheck

Wires your AI assistant into VulnCheck vulnerability data, so you can ask about CVEs, exploits and risky packages without leaving the editor.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 13
- Author: vulncheck-oss
- License: MIT · policy=link-only · description only; the file stays with the author
- Source: https://github.com/vulncheck-oss/mcp
- Updated: 2026-10-14
- HTML: https://affpapa.org/en/nevibecode/mcp/vulncheck

## What it does

The VulnCheck MCP server hands your assistant vulnerability intelligence. Ask about a CVE and you get the details, severity, exploitability signals and which versions are affected. Package checks run by CPE or PURL, right where you're working.

There's also advisory search across vendors and ecosystems, plus queries against VulnCheck indices for breach, botnet and threat context. Handy during triage or code review: a dependency with a known hole shows up before it ships.

You need a VulnCheck API token. Without it the server has nothing to query. It ships as a binary for macOS, Linux and Windows or as the Docker image `ghcr.io/vulncheck-oss/mcp`, and the install commands use the image.

## Requirements
- Needs: Docker

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add vulncheck -- docker run -i --rm ghcr.io/vulncheck-oss/mcp:0.2.3
```

### Codex

**Platform CLI**
```bash
codex mcp add vulncheck -- docker run -i --rm ghcr.io/vulncheck-oss/mcp:0.2.3
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "vulncheck": {
            "command": "docker",
            "args": [
                "run",
                "-i",
                "--rm",
                "ghcr.io/vulncheck-oss/mcp:0.2.3"
            ]
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "vulncheck": {
            "type": "stdio",
            "command": "docker",
            "args": [
                "run",
                "-i",
                "--rm",
                "ghcr.io/vulncheck-oss/mcp:0.2.3"
            ]
        }
    }
}
```

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add vulncheck docker run -i --rm ghcr.io/vulncheck-oss/mcp:0.2.3
```

## When to use it
- pull CVE details and affected versions while triaging a bug
- check a package by CPE or PURL before a release
- find out whether a CVE has exploit code or active exploitation
- look up vendor advisories by package or product name
- query breach and botnet indices for incident context

## Example prompts
- Look up CVE-2024-3094 in VulnCheck and tell me if there's exploit code
- Check `lodash` by PURL for known vulnerabilities
- Search advisories for nginx from the past year

## Similar
- [dependency-check](https://affpapa.org/en/nevibecode/skills/dependency-check.md) — skill · 748 installs
- [crowbar](https://affpapa.org/en/nevibecode/mcp/crowbar.md) — MCP server · ★ 8
- [patch-tuesday](https://affpapa.org/en/nevibecode/mcp/patch-tuesday.md) — MCP server · ★ 5
- [finding-triage](https://affpapa.org/en/nevibecode/skills/finding-triage.md) — skill · 360 installs
- [vuln-research](https://affpapa.org/en/nevibecode/skills/vuln-research.md) — skill · 350 installs
- [EchelonGraph CVE & Exposure](https://affpapa.org/en/nevibecode/mcp/echelongraph-cve-exposure.md) — MCP server · ★ 8

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md