English Français العربية

CodeVulnerability

Official registry Security

OWASP threat scanner auditing codebases for safety leaks.

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (sse)
Claude Code 
claude mcp add --transport sse codevulnerability 'https://codevulnerability-mcp.vercel.app/api/mcp' --header 'payment-signature: <Base64-encoded EIP-3009 TransferWithAuthorization signature. Required for premium settlement.>'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "codevulnerability": {
            "type": "sse",
            "url": "https://codevulnerability-mcp.vercel.app/api/mcp",
            "headers": {
                "payment-signature": "<Base64-encoded EIP-3009 TransferWithAuthorization signature. Required for premium settlement.>"
            }
        }
    }
}

Frequently asked questions

What is CodeVulnerability?

OWASP threat scanner auditing codebases for safety leaks.

How do I install CodeVulnerability?

It runs as a remote server. In Claude Code: claude mcp add --transport sse codevulnerability 'https://codevulnerability-mcp.vercel.app/api/mcp' --header 'payment-signature: <Base64-encoded EIP-3009 TransferWithAuthorization signature. Required for premium settlement.>'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does CodeVulnerability need an API key?

Yes. It expects payment-signature, which you set in its configuration.

Who maintains CodeVulnerability?

It is published by Evozim. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.