Back to MCP Servers
🧩

vulnicheck MCP Server

API key required

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

To add vulnicheck to Claude, run the install command below. Restart Claude Code after adding it and its tools show up in your next conversation. It needs 7 environment variables, listed below.

DevTools

Install

docker run -i --rm docker.io/andrasfe/vulnicheck:main

Environment variables

NVD_API_KEYSet in your MCP config
GITHUB_TOKENSet in your MCP config
OPENAI_API_KEYSet in your MCP config
ANTHROPIC_API_KEYSet in your MCP config
MCP_PORTSet in your MCP config
CACHE_TTLSet in your MCP config
VULNICHECK_HTTP_ONLYSet in your MCP config

What this does

vulnicheck exposes a set of tools to Claude over the Model Context Protocol. After you add it to claude_desktop_config.json (snippet above) and restart Claude Desktop, those tools become callable inside any conversation.

Requirements

This server needs the following environment variables to be set before it can run:

NVD_API_KEY
GITHUB_TOKEN
OPENAI_API_KEY
ANTHROPIC_API_KEY
MCP_PORT
CACHE_TTL
VULNICHECK_HTTP_ONLY

Set these via the env object in your MCP config (see claude_desktop_config.json snippet above).

Frequently asked questions

How do I install vulnicheck?

The install section on this page carries the maker's install command for vulnicheck, as submitted. Restart your client afterwards and the tools appear in your next conversation.

Which clients work with vulnicheck?

This page carries setup and config for Claude Code. Any other MCP client that accepts a standard server config can connect to vulnicheck as well.

Does vulnicheck need an API key?

Yes. Before it can run, set these environment variables: NVD_API_KEY, GITHUB_TOKEN, OPENAI_API_KEY, ANTHROPIC_API_KEY, MCP_PORT, CACHE_TTL, VULNICHECK_HTTP_ONLY. They go in the env block of your MCP config.

Imported from the Official MCP Registry. The details above come from the registry entry; the maker can claim this listing to correct them, add docs, and see its traffic.

Is this your MCP server?

Claim this listing to see its traffic, fix details yourself, and skip the review queue on future updates.

Listed on clauderules.net

Add this badge to your README

Show visitors this server is listed in the ClaudeRules directory. The badge links straight to this listing.

Markdown
[![Listed on clauderules.net](https://clauderules.net/api/badge/io-github-andrasfe-vulnicheck)](https://clauderules.net/mcp/io-github-andrasfe-vulnicheck)
HTML
<a href="https://clauderules.net/mcp/io-github-andrasfe-vulnicheck" target="_blank" rel="noopener noreferrer"><img src="https://clauderules.net/api/badge/io-github-andrasfe-vulnicheck" alt="Listed on clauderules.net" /></a>