io.github.andrasfe/vulnicheck✓

The full server descriptor as registered with IndusMCP.

{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
  "name": "io.github.andrasfe/vulnicheck",
  "description": "HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.",
  "repository": {
    "url": "https://github.com/andrasfe/vulnicheck",
    "source": "github"
  },
  "version": "0.1.0",
  "packages": [
    {
      "registryType": "oci",
      "identifier": "docker.io/andrasfe/vulnicheck:main",
      "transport": {
        "type": "streamable-http",
        "url": "http://localhost:3000/mcp"
      },
      "environmentVariables": [
        {
          "description": "API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds)",
          "format": "string",
          "isSecret": true,
          "name": "NVD_API_KEY"
        },
        {
          "description": "GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour)",
          "format": "string",
          "isSecret": true,
          "name": "GITHUB_TOKEN"
        },
        {
          "description": "OpenAI API key for LLM-based risk assessment in MCP passthrough operations",
          "format": "string",
          "isSecret": true,
          "name": "OPENAI_API_KEY"
        },
        {
          "description": "Anthropic API key for LLM-based risk assessment (alternative to OpenAI)",
          "format": "string",
          "isSecret": true,
          "name": "ANTHROPIC_API_KEY"
        },
        {
          "description": "Port for MCP HTTP server (default: 3000)",
          "format": "number",
          "name": "MCP_PORT"
        },
        {
          "description": "Cache time-to-live in seconds for vulnerability data (default: 900)",
          "format": "number",
          "name": "CACHE_TTL"
        },
        {
          "description": "Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)",
          "format": "string",
          "name": "VULNICHECK_HTTP_ONLY"
        }
      ]
    }
  ],
  "_meta": {
    "dev.indusmcp/source": "official-registry-mirror",
    "dev.indusmcp/synced": "2026-05-12"
  }
}