Vulnicheck

Vulnicheck runs locally from a container image in an OCI registry such as Docker Hub or GitHub Container Registry: docker.io/andrasfe/vulnicheck:main. The package starts a local server that speaks MCP over Streamable HTTP; the client then connects to it by URL. It reads these environment variables: NVD_API_KEY (secret), GITHUB_TOKEN (secret), OPENAI_API_KEY (secret), ANTHROPIC_API_KEY (secret), MCP_PORT, CACHE_TTL and VULNICHECK_HTTP_ONLY; set them in the client's configuration for this server.

Derived from the registry entry, not tested here. What the server does, and on what terms, is set by its publisher; check its repository or website before giving it access to your accounts or files. How to add an MCP server to an assistant · Before you connect