English Français العربية

VulnFeed

Official registry Security

Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.

Source code

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

PYPI package vulnfeed-mcp
Claude Code 
claude mcp add vulnfeed -e 'VULNFEED_API_KEY=<your vulnfeed_api_key>' -- uvx vulnfeed-mcp==0.3.3
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "vulnfeed": {
            "command": "uvx",
            "args": [
                "vulnfeed-mcp==0.3.3"
            ],
            "env": {
                "VULNFEED_API_KEY": "<your vulnfeed_api_key>"
            }
        }
    }
}

Environment variables

  • VULNFEED_API_KEY secret Polar.sh license key for paid tier (optional — free tier works without it)

Frequently asked questions

What is VulnFeed?

Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.

How do I install VulnFeed?

It runs on your machine. In Claude Code: claude mcp add vulnfeed -e 'VULNFEED_API_KEY=<your vulnfeed_api_key>' -- uvx vulnfeed-mcp==0.3.3. For other clients, paste the JSON configuration from this page into their MCP settings.

Does VulnFeed need an API key?

Yes. It expects VULNFEED_API_KEY, which you set in its configuration.

Is VulnFeed open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains VulnFeed?

It is published by infai-tech. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.