The VulnCheck MCP Server

The VulnCheck MCP Server connects AI assistants to VulnCheck vulnerability intelligence. Ask your AI tools about CVEs, exploits, advisories, and vulnerable packages — directly in your editor or terminal, using natural language.

Use Cases

• CVE research: Look up vulnerability details, severity, exploitability, and affected versions while reviewing code or triaging issues

• Dependency analysis: Check packages by CPE or PURL to identify known vulnerabilities before shipping

• Exploit intelligence: Determine whether a CVE has known exploit code, active exploitation, or C2 indicators

• Advisory lookup: Search vendor and ecosystem advisories by package, product, or keyword

• Index queries: Query VulnCheck's breach, botnet, and threat intelligence indices for real-time context

Requirements

• A VulnCheck API token — create one here

Related MCP server: eip-mcp

Installation

Download the latest release from the Releases page, or use the Docker image (ghcr.io/vulncheck-oss/mcp).

Install in Your AI Client

• Claude Code & Claude Desktop

• Cursor

• VS Code

• Windsurf

• Cline

• Gemini CLI

• Codex CLI

Available Tools

See docs/tools.md for the full list of available tools.

Development

make build      # build for current platform → bin/vulncheck-mcp
make snapshot   # cross-compile all platforms via GoReleaser → dist/
make test       # run tests
make lint       # run golangci-lint