VulnFeed

io.github.infai-tech/vulnfeed·v0.3.3·Security

Quality Score

/100

Dependency vulnerability scanner with EPSS scoring. 9 MCP tools. Free tier + x402.

Repository →

§00 Trust verdict · v1 advisory · method

UNVERIFIEDno verdict on file

Verdict not yet evaluated for this tool. The hybrid eval runs adversarial cases first; coverage rolls out as the corpus expands. Until a verdict is recorded, an agent should treat this tool as not-yet-cleared and fall back to its own checks. Method: hybrid eval, four-state verdict, honest limits.

§01 Install

Claude Desktop (uvx)

{
  "mcpServers": {
    "vulnfeed": {
      "command": "uvx",
      "args": [
        "vulnfeed-mcp"
      ],
      "env": {
        "VULNFEED_API_KEY": "<your-vulnfeed_api_key>"
      }
    }
  }
}

§02 Environment variables

VULNFEED_API_KEY

secret

Polar.sh license key for paid tier (optional — free tier works without it)

§03 MCP Quality Score · methodology

freshness

completeness

installability

documentation

stability

§04 Alternatives in Security

Helixar Security