VulnCheck
VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.
Open source Open in the app JSON README (API)
About
VulnCheck exploit intelligence — CVE research, exploit data, advisories, and threat analysis.
Details
- Kind
- MCP servers
- Topic
- Security & identity
- Publisher
- vulncheck-oss
- Origin
- official
- Category
- ferramentas
- Transport
- local
- Version
- 0.2.1
- Stars
- 8
- Forks
- 1
- Open pull requests
- 4
- Last push
- 2026-09-02T21:14:03Z
- Repository state
- ativo
- Language
- Go
- License
- MIT
- Added
- 2026-08-29 04:01:39
- Updated
- 2026-08-29 04:01:39
- Origin id
io.github.vulncheck-oss/mcp
README
<p align="center">
<img src="https://vulncheck.com/logo.png" align="center" alt="VulnCheck Logo" width="150" />
</p>
# The VulnCheck MCP Server
The VulnCheck MCP Server connects AI assistants to [VulnCheck](https://vulncheck.com) vulnerability intelligence. Ask your AI tools about CVEs, exploits, advisories, and vulnerable packages — directly in your editor or terminal, using natural language.
### Use Cases
- **CVE research**: Look up vulnerability details, severity, exploitability, and affected versions while reviewing code or triaging issues
- **Dependency analysis**: Check packages by CPE or PURL to identify known vulnerabilities before shipping
- **Exploit intelligence**: Determine whether a CVE has known exploit code, active exploitation, or C2 indicators
- **Advisory lookup**: Search vendor and ecosystem advisories by package, product, or keyword
- **Index queries**: Query VulnCheck's breach, botnet, and threat intelligence indices for real-time context
## Requirements
- A VulnCheck API token — create one [here](https://console.vulncheck.com/settings/tokens)
## Installation
Download the latest release from the [Releases page](https://github.com/vulncheck-oss/mcp/releases/latest), or use the Docker image (`ghcr.io/vulncheck-oss/mcp`).
| Platform | Archive |
|----------|---------|
| macOS (Apple Silicon) | `vulncheck-mcp_1.2.3_darwin_arm64.tar.gz` |
| macOS (Intel) | `vulncheck-mcp_1.2.3_darwin_amd64.tar.gz` |
| Linux | `vulncheck-mcp_1.2.3_linux_amd64.tar.gz` |
| Windows | `vulncheck-mcp_1.2.3_windows_amd64.zip` |
### Install in Your AI Client
- **[Claude Code & Claude Desktop](docs/installation-guides/install-claude.md)**
- **[Cursor](docs/installation-guides/install-cursor.md)**
- **[VS Code](docs/installation-guides/install-vscode.md)**
- **[Windsurf](docs/installation-guides/install-windsurf.md)**
- **[Cline](docs/installation-guides/install-cline.md)**
- **[Gemini CLI](docs/installation-guides/install-gemini-cli.md)**
- **[Codex CLI](docs/installation-guides/install-codex.md)**
## Available Tools
See [docs/tools.md](docs/tools.md) for the full list of available tools.
## Development
```bash
make build # build for current platform → bin/vulncheck-mcp
make snapshot # cross-compile all platforms via GoReleaser → dist/
make test # run tests
make lint # run golangci-lint
```