What is vet?
vet is a MCP server by safedep that locally check npm and PyPI packages, such as those suggested by AI coding tools, for vulnerabilities and malicious code. It is listed under Security and has 1,114 GitHub stars.
| Type | Mcp server |
|---|---|
| Author | safedep |
| Repository | safedep/vet |
| Popularity | 1,114 GitHub stars |
| Category | Security |
| Security | Low risk (88/100) |
| Rank | #171 of 4,418 MCP servers; #6 in Security |
| License | Apache-2.0 |
| Last commit | 2026-10-17 |
| Stars this week | +5 |
| Runs | Cloud service |
| Language | Go |
| Platforms | macOS, Windows, Linux |
Is vet safe to install?
vet scores 88/100 on the MCPMods security check: Low risk. Things to review: sends your data to a cloud service. It passed 5 of 6 checks.
MCP server results come from listing signals: who publishes it, where your data goes and what it can do. The code itself is not scanned yet.
| Check | Result |
|---|---|
| Published by the service itself | Pass |
| Sends your data to a cloud service | Review |
| No credentials mentioned | Pass |
| Read-only by description | Pass |
| No code execution | Pass |
| Source on GitHub | Pass |
How do I install vet?
- Find the launch command. The README says how the server starts (npx, uvx, docker or a remote URL) and which API keys it needs.
https://github.com/safedep/vet/blob/main/docs/mcp.md
- Add it to Claude Code. Replace the part after -- with the command from the README. Remote servers use --transport http with a URL.
claude mcp add vet -- <command from README> claude mcp add --transport http vet <server-url>
- Check it connected. This lists your MCP servers and their status.
claude mcp list
Or ask Claude to set it up
Paste this into Claude Code and it installs vet for you:
Add the "vet" MCP server from https://github.com/safedep/vet/blob/main/docs/mcp.md to Claude Code. Read its README for the launch command and any API keys I need, run claude mcp add, then check that it connects.