vulnicheck

{
  "server.json": {
    "name": "io.github.andrasfe/vulnicheck",
    "status": "active",
    "$schema": "https://static.modelcontextprotocol.io/schemas/2025-07-09/server.schema.json",
    "version": "0.1.0",
    "packages": [
      {
        "version": "main",
        "transport": {
          "url": "http://localhost:3000/mcp",
          "type": "streamable-http"
        },
        "identifier": "andrasfe/vulnicheck",
        "registry_type": "oci",
        "registry_base_url": "https://docker.io",
        "environment_variables": [
          {
            "name": "NVD_API_KEY",
            "format": "string",
            "is_secret": true,
            "description": "API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds)",
            "is_required": false
          },
          {
            "name": "GITHUB_TOKEN",
            "format": "string",
            "is_secret": true,
            "description": "GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour)",
            "is_required": false
          },
          {
            "name": "OPENAI_API_KEY",
            "format": "string",
            "is_secret": true,
            "description": "OpenAI API key for LLM-based risk assessment in MCP passthrough operations",
            "is_required": false
          },
          {
            "name": "ANTHROPIC_API_KEY",
            "format": "string",
            "is_secret": true,
            "description": "Anthropic API key for LLM-based risk assessment (alternative to OpenAI)",
            "is_required": false
          },
          {
            "name": "MCP_PORT",
            "format": "number",
            "is_secret": false,
            "description": "Port for MCP HTTP server (default: 3000)",
            "is_required": false
          },
          {
            "name": "CACHE_TTL",
            "format": "number",
            "is_secret": false,
            "description": "Cache time-to-live in seconds for vulnerability data (default: 900)",
            "is_required": false
          },
          {
            "name": "VULNICHECK_HTTP_ONLY",
            "format": "string",
            "is_secret": false,
            "description": "Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)",
            "is_required": false
          }
        ]
      }
    ],
    "repository": {
      "url": "https://github.com/andrasfe/vulnicheck",
      "source": "github"
    },
    "description": "HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis."
  }
}