io.github.andrasfe

vulnicheck

HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.

localhostcommunityapplication

Package Details

andrasfe/vulnicheck

main•https://hub.docker.com/r/andrasfe/vulnicheck
Transportstreamable-http

Environment Variables

NVD_API_KEY
Secret

API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds)

GITHUB_TOKEN
Secret

GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour)

OPENAI_API_KEY
Secret

OpenAI API key for LLM-based risk assessment in MCP passthrough operations

ANTHROPIC_API_KEY
Secret

Anthropic API key for LLM-based risk assessment (alternative to OpenAI)

MCP_PORT

Port for MCP HTTP server (default: 3000)

CACHE_TTL

Cache time-to-live in seconds for vulnerability data (default: 900)

VULNICHECK_HTTP_ONLY

Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)