Vuln Check MCP Server

The VulnCheck MCP Server connects AI assistants to VulnCheck vulnerability intelligence. Ask your AI tools about CVEs, exploits, advisories, and vulnerable packages - directly in your editor or terminal, using natural language.

People who need security tools inside Claude, Cursor, VS Code, or another MCP client. The project is written in Go.

VERIFIED ACTIVE

LAST COMMIT 2026-08-19 · ★ 8 · #137 OF 182 MAINTAINED SECURITY · VERIFIED 2026-08-25

MIT · Go servers · how we verify → /methodology

01 · Install Vuln Check

Docker

docker run -i --rm ghcr.io/vulncheck-oss/mcp:0.2.0

Claude Desktop - add to config

{
  "mcpServers": {
    "vulncheck-oss-mcp": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/vulncheck-oss/mcp:0.2.0"
      ]
    }
  }
}

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as container (OCI image) - can be sandboxed away from your filesystem

license MIT - declared in the repository

registry namespace io.github.vulncheck-oss is GitHub-verified and matches the repo owner

03 · What Vuln Check can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v0.2.0 · 2026-08-18

Stop routing exposure questions to search_cve (#49) (@alex-vulncheck) · Extract response byte-bounding into a reusable helper (#50) (@alex-vulncheck) · Add tools for Target, IP and Canary Intelligence (#51)…

v0.1.2 · 2026-08-05

Recover v4 advisory vendor queries that silently returned nothing (#46) (@robc-vulncheck)

v0.1.1 · 2026-07-31

pass tag ref to goreleaser (#27) (@maddawik) · strip v prefix in image version (#29) (@maddawik) · bump github.com/vulncheck-oss/sdk-go-v2/v2 from 2.1.22 to 2.1.23 (#31) (@dependabot[bot]) · bump golang from f23e8b2 to…

04 · Who maintains Vuln Check

VulnCheck is maintained by vulncheck-oss. It's the only MCP server we track from this author; the repo dates to Jun 2026.

05 · Facts

repository: github.com/vulncheck-oss/mcp
category: security - ranked #137 of 182 actively-maintained security servers as of 2026-08-25.
release cadence: 4 releases in the last 90 days (latest 2026-08-18)
registry: io.github.vulncheck-oss/mcp (active, first published 2026-06-11 · 4 versions)
packages: oci:ghcr.io/vulncheck-oss/mcp:0.2.0

06 · Vuln Check FAQ

What is Vuln Check?

Is Vuln Check still maintained?

Yes - as of 2026-08-25, its last commit was 2026-08-19 and it shipped 4 releases in the last 90 days. We re-verify nightly.

How do I install Vuln Check?

Run `docker run -i --rm ghcr.io/vulncheck-oss/mcp:0.2.0`. You can also paste the ready-made client config above.

07 · Alternatives to Vuln Check

Alternatives to Vuln Check

Maintained security servers if Vuln Check isn't the fit.

Pairs well with

Servers that cover what Vuln Check doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Cortex Gateway · Gateway Scan · Wundervault MCP · CIPP · HackTricks MCP Server

More Go MCP servers · Codex MCP Go · CNN Fear & Greed Index · Cloudcostsmcp · Agent Memory · Gopls MCP · see all