What is vulnfeed-mcp?
vulnfeed-mcp is a MCP server by infai-tech that scans dependency lockfiles for vulnerabilities, prioritizes them by EPSS exploit probability and recommends fix versions, with monitoring and alerting. It is listed under Security and has no public popularity data yet.
| Type | Mcp server |
|---|---|
| Author | infai-tech |
| Repository | infai-tech/vulnfeed-mcp |
| Popularity | no public popularity data yet |
| Category | Security |
| Security | Low risk (96/100) |
| Rank | #4,294 of 4,418 MCP servers; #241 in Security |
| Runs | Locally |
| Language | Python |
| Platforms | macOS, Windows, Linux |
Is vulnfeed-mcp safe to install?
vulnfeed-mcp scores 96/100 on the MCPMods security check: Low risk. No checks raised a concern. It passed 5 of 6 checks.
MCP server results come from listing signals: who publishes it, where your data goes and what it can do. The code itself is not scanned yet.
| Check | Result |
|---|---|
| Community-built server | Note |
| Runs on your machine only | Pass |
| No credentials mentioned | Pass |
| Read-only by description | Pass |
| No code execution | Pass |
| Source on GitHub | Pass |
How do I install vulnfeed-mcp?
- Find the launch command. The README says how the server starts (npx, uvx, docker or a remote URL) and which API keys it needs.
https://github.com/infai-tech/vulnfeed-mcp
- Add it to Claude Code. Replace the part after -- with the command from the README. Remote servers use --transport http with a URL.
claude mcp add vulnfeed-mcp -- <command from README> claude mcp add --transport http vulnfeed-mcp <server-url>
- Check it connected. This lists your MCP servers and their status.
claude mcp list
Or ask Claude to set it up
Paste this into Claude Code and it installs vulnfeed-mcp for you:
Add the "vulnfeed-mcp" MCP server from https://github.com/infai-tech/vulnfeed-mcp to Claude Code. Read its README for the launch command and any API keys I need, run claude mcp add, then check that it connects.