Schema | GhostFree

GhostFree

Describes the environment variables required to run the server.

Name	Required	Description	Default
No arguments

Features and capabilities supported by this server

Capability	Details
`tools`	{ "listChanged": true }
`prompts`	{ "listChanged": true }

Functions exposed to the LLM to take actions

Name	Description
discover_dependenciesA	Scan the repository for manifest files (requirements.txt, package.json, go.mod, Cargo.toml, pom.xml, *.csproj, Dockerfiles, etc.) and return all pinned dependencies grouped by ecosystem.
check_cves	Check a list of packages against OSV.dev for known vulnerabilities. Returns CVEs above the severity threshold as a numbered list, suppressed/accepted risks, expired acceptances, and a count of below-threshold findings.
enrich_cve	Fetch enrichment data for a specific CVE ID: CVSS vectors and score from NVD, CWE weakness classification, references, and whether it appears in the CISA Known Exploited Vulnerabilities (KEV) catalog. Gracefully degrades if NVD or KEV are unavailable.
list_accepted_risks	List all accepted CVE risks, including whether each acceptance has expired.
accept_risk	Record an accepted risk for a CVE, with a reason and mandatory expiry date. Expiry beyond 1 year requires confirm_extended_expiry=true.
remove_accepted_risk	Remove a previously accepted risk by its UUID acceptance ID.

Interactive templates invoked by user choice

Name	Description
`scan`	Run a full dependency vulnerability scan: discover packages, check OSV.dev for CVEs, triage with NVD/KEV enrichment, and get remediation guidance.

Contextual data attached and managed by the client

Name	Description
No resources

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/shane-js/ghostfree'

If you have feedback or need assistance with the MCP directory API, please join our Discord server