← Back to Plugins
MCP Server MCP

io.github.andrasfe/vulnicheck

github By github 👁 1 views ▲ 0 votes

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

Homepage Verified source GitHub

Install

oci:docker.io/andrasfe/vulnicheck:main

Configuration Example

{
  "remotes": [],
  "packages": [
    {
      "registryType": "oci",
      "identifier": "docker.io/andrasfe/vulnicheck:main",
      "transport": {
        "type": "streamable-http",
        "url": "http://localhost:3000/mcp"
      },
      "environmentVariables": [
        {
          "description": "API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds)",
          "format": "string",
          "isSecret": true,
          "name": "NVD_API_KEY"
        },
        {
          "description": "GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour)",
          "format": "string",
          "isSecret": true,
          "name": "GITHUB_TOKEN"
        },
        {
          "description": "OpenAI API key for LLM-based risk assessment in MCP passthrough operations",
          "format": "string",
          "isSecret": true,
          "name": "OPENAI_API_KEY"
        },
        {
          "description": "Anthropic API key for LLM-based risk assessment (alternative to OpenAI)",
          "format": "string",
          "isSecret": true,
          "name": "ANTHROPIC_API_KEY"
        },
        {
          "description": "Port for MCP HTTP server (default: 3000)",
          "format": "number",
          "name": "MCP_PORT"
        },
        {
          "description": "Cache time-to-live in seconds for vulnerability data (default: 900)",
          "format": "number",
          "name": "CACHE_TTL"
        },
        {
          "description": "Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)",
          "format": "string",
          "name": "VULNICHECK_HTTP_ONLY"
        }
      ]
    }
  ]
}
mcp model-context-protocol oci

Comments

Sign in to leave a comment

Loading comments...