Back to the catalog

VulX Watch

Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.

Open source Repository Open in the app JSON README (API)

About

Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.

Details

Kind
MCP servers
Topic
Version control
Publisher
ai.vulx
Origin
official
Category
ferramentas
Transport
http
Version
1.0.0
Last push
2026-09-01T02:30:45Z
Repository state
ativo
License
MIT
Added
2026-09-01 03:00:07
Updated
2026-09-01 03:00:07
Origin id
ai.vulx/watch

README

# VulX Watch for Cursor

Adds the [VulX Watch](https://vulx.ai/connect) connector to Cursor: independent
security review for AI-built apps. The agent can watch a GitHub repo and ask
what the last reading found.

VulX does not write a patch or open a PR.

## What you get

- MCP server at `https://mcp.vulx.ai/mcp`
- A skill so the agent knows when to call Watch
- Commands: **watch-repo**, **security-status**

You still need a VulX account. Sign-in happens when Cursor talks to the
connector. Free while we build it.

## Install

1. Install **VulX Watch** from the Cursor Marketplace, or clone this repo
   into `~/.cursor/plugins/local` and restart Cursor.
2. Complete the VulX sign-in prompt.
3. Ask: `Watch my repo owner/name with VulX.` Then: `What did VulX find?`

If OAuth does not finish inside Cursor, add the same URL as a custom
connector: `https://mcp.vulx.ai/mcp`. Human page: https://vulx.ai/connect

## What it will not do

- Patch your app or open a merge-ready PR
- Log in to your running site or database
- Give a 0–100 score or a “safe to ship”
- Treat a quiet week as an all-clear

It reads committed source. It writes only its own brief (`AGENTS.md` and
`CLAUDE.md`) when brief delivery is on.

## License

MIT

More