English Français العربية

VulnCheck

السجل الرسمي البحث والويب

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

الشيفرة المصدرية التوثيق

ماذا يمكنك أن تفعل مع VulnCheck؟

  • CVE research: Look up vulnerability details, severity, exploitability, and affected versions while reviewing code or triaging issues
  • Dependency analysis: Check packages by CPE or PURL to identify known vulnerabilities before shipping
  • Exploit intelligence: Determine whether a CVE has known exploit code, active exploitation, or C2 indicators
  • Advisory lookup: Search vendor and ecosystem advisories by package, product, or keyword
  • Index queries: Query VulnCheck's breach, botnet, and threat intelligence indices for real-time context

التثبيت

أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: ‏.cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).

OCI package ghcr.io/vulncheck-oss/mcp:0.2.3
Claude Code 
claude mcp add vulncheck -- docker run -i --rm ghcr.io/vulncheck-oss/mcp:0.2.3
إعداد JSON (Claude Desktop وCursor وVS Code) 
{
    "mcpServers": {
        "vulncheck": {
            "command": "docker",
            "args": [
                "run",
                "-i",
                "--rm",
                "ghcr.io/vulncheck-oss/mcp:0.2.3"
            ]
        }
    }
}

التوثيق

مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.

المحتويات
  1. The VulnCheck MCP Server
  2. Requirements
  3. Installation
  4. Available Tools
  5. Development

The VulnCheck MCP Server

The VulnCheck MCP Server connects AI assistants to VulnCheck vulnerability intelligence. Ask your AI tools about CVEs, exploits, advisories, and vulnerable packages — directly in your editor or terminal, using natural language.

Use Cases
  • CVE research: Look up vulnerability details, severity, exploitability, and affected versions while reviewing code or triaging issues
  • Dependency analysis: Check packages by CPE or PURL to identify known vulnerabilities before shipping
  • Exploit intelligence: Determine whether a CVE has known exploit code, active exploitation, or C2 indicators
  • Advisory lookup: Search vendor and ecosystem advisories by package, product, or keyword
  • Index queries: Query VulnCheck's breach, botnet, and threat intelligence indices for real-time context

Requirements

  • A VulnCheck API token — create one here

Installation

Download the latest release from the Releases page, or use the Docker image (ghcr.io/vulncheck-oss/mcp).

PlatformArchive
macOS (Apple Silicon)vulncheck-mcp_1.2.3_darwin_arm64.tar.gz
macOS (Intel)vulncheck-mcp_1.2.3_darwin_amd64.tar.gz
Linuxvulncheck-mcp_1.2.3_linux_amd64.tar.gz
Windowsvulncheck-mcp_1.2.3_windows_amd64.zip
Install in Your AI Client

Available Tools

See docs/tools.md for the full list of available tools.

Development

make build      # build for current platform → bin/vulncheck-mcp
make snapshot   # cross-compile all platforms via GoReleaser → dist/
make test       # run tests
make lint       # run golangci-lint

الأسئلة الشائعة

ما هو VulnCheck؟

VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.

كيف أثبّت VulnCheck؟

يعمل على جهازك. في Claude Code: claude mcp add vulncheck -- docker run -i --rm ghcr.io/vulncheck-oss/mcp:0.2.3. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.

هل يحتاج VulnCheck إلى مفتاح API؟

لا يذكر إدراجه في السجل أي مفتاح أو سر إلزامي. قد تتطلب بعض الميزات حسابًا لدى الخدمة التي يتصل بها.

هل VulnCheck مفتوح المصدر؟

نعم. شيفرته متاحة على GitHub بترخيص MIT.

من يصون VulnCheck؟

ينشره vulncheck-oss. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.

من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.