Skip to main content
Glama
Sign In
VulnForge MCP

VulnForge MCP

by mason-keller
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Local

Related Servers

Alternatives to VulnForge MCP

No user-submitted related servers found.

    Related Servers

    • appsecradar

      Othm1ne
      A
      license
      Not graded
      quality
      C
      maintenance
      Enables AI editors such as Cursor, Claude Code, Windsurf and VS Code to scan a project for common AI-introduced security mistakes — leaked keys, open Supabase/Firebase data, missing auth, unverified Stripe webhooks, SQL injection and more — and return findings with exact fix instructions. It also provides a guided prompt that walks an agent through fixing critical issues one by one and verifying each fix by re-scanning, without ever editing files or rotating keys itself.
      2
      MIT

    • Security Scanner MCP

      ongjin
      A
      license
      Not graded
      quality
      D
      maintenance
      Automatically detects security vulnerabilities in AI-generated code, scanning for hardcoded secrets, injection flaws, XSS, weak cryptography, authentication issues, path traversal, and vulnerable dependencies across JavaScript, Python, Java, and Go.
      14 npm
      2
      MIT
    • shipsafe-mcp

      shipsafe-mcpofficial

      EthYusuf
      A
      license
      A
      quality
      C
      maintenance
      Enables AI coding assistants to scan projects for security issues such as leaked API keys, missing Supabase RLS, open Firebase rules, unauthenticated routes, and hallucinated packages, then fix and verify the results.
      8
      1
      MIT

    • VibeCheck MCP Server

      philiphess1
      A
      license
      A
      quality
      D
      maintenance
      An AI-powered security audit tool that analyzes codebases for vulnerabilities using real-time data from MITRE CWE and npm audit. It enables deep analysis of authentication, API security, and dependencies to provide structured findings and remediation steps.
      2
      115 npm
      1
      MIT

    • vetcode

      openyard-cloud
      A
      license
      Not graded
      quality
      B
      maintenance
      Enables AI agents to scan a repository or project for malware, supply-chain attacks, leaked secrets, and web, server, cloud, and CI/CD vulnerabilities, then confirm real findings with concrete attack scenarios and fixes. Exposes scan, guide, and reference tools plus a security-review prompt that runs locally.
      1
      MIT
    Deploy Server
    Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd

    TDQS

    B3.1/5.0

    Scored across 24 tools

    Disambiguation3/5

    Most tools target distinct security domains, but several clusters overlap heavily: audit_sbom, audit_cosign, audit_intoto, audit_model_supply_chain, and audit_p2p_gossip all cover supply-chain/attestation concerns, while audit_ebpf, audit_wasm_ebpf, audit_microsegmentation, and fuzz_wasm_runtime overlap runtime/kernel surfaces. Descriptions do help differentiate them, but an agent could still misselect when asked for a broad layer such as 'supply chain audit'. The presence of full_scan alongside granular audits adds another selection ambiguity.

    Naming Consistency4/5

    Almost all tools use a consistent vulnforge_ prefix with snake_case verb/noun patterns such as audit_*, fuzz_*, inject_patch, and verify_patch. The only minor deviations are full_scan lacking the audit/fuzz verb style and some names combining multiple nouns, but the convention remains predictable overall.

    Tool Count3/5

    Twenty-four tools is heavy for a single server and likely reflects a very broad security audit suite rather than a tightly scoped toolset. Most tools do earn their place by covering distinct security domains, but the count is borderline excessive and increases selection burden.

    Completeness4/5

    The surface covers a wide audit lifecycle: domain-specific audits, fuzzing, patch injection, patch verification, and an end-to-end full scan. Minor gaps exist around reporting/export, triage workflows, and general result management, but agents can work around these for most audit workflows.

    Maintenance

    ActivityMaintained
    ResponsivenessNo recent community issues

    Resources