Enterprise DNAEnterprise DNA
MMCP ServersDeveloperlow

infai-tech/vulnfeed-mcp

by Various

Dependency vulnerability monitoring MCP server — knows your lockfile, prioritizes by EPSS, recommends fix versions.

MCP

infai-tech/vulnfeed-mcp

Added 8 June 2026

#claude-code#dependency-scanning#epss#mcp-server#micropayments#python#security#vulnerability-scanner
Catalogue record, not a reviewed recommendation. This record can include automatically collected descriptions and setup details. Confirm important claims with the original source. Explore source-reviewed tools.

Overview

Vulnfeed MCP is a server that monitors dependency vulnerabilities by reading your lockfile. It prioritizes threats using EPSS scores and suggests fix versions. It integrates with MCP-compatible tools to surface actionable security data.

Best for

Best for
Developers who want automated, prioritized vulnerability alerts in their MCP workflow.

Use cases

  • Scan lockfiles for known vulnerabilities during CI/CD
  • Prioritize dependency fixes by EPSS exploit likelihood
  • Get recommended upgrade versions for vulnerable packages

How to use

Install

uvx vulnfeed-mcp

Tools exposed

  • scan_project
  • scan_lockfile
  • check_package
  • lookup_cve
  • monitor_project
  • check_alerts
  • update_deps
  • list_monitored
  • unmonitor_project

Clients listed in this record (not verified here)

Claude Desktop, Claude Code

Notes

0 stars on GitHub. Last updated 2026-05-28. Licensed MIT.

Pros

  • Uses EPSS scoring to focus on exploitable vulnerabilities
  • Directly suggests fix versions, reducing manual research
  • Lightweight Python server that works with MCP clients

Cons

  • No stars or community traction yet, maturity unclear
  • Requires MCP-compatible tooling to be useful
  • Limited to lockfile-based scanning, no runtime monitoring

Pairs with

Other entries in the index that connect to this one. Click through to see the chain.

Free 27-page guide

Get the free Developer’s Field Guide

A 27-page field guide to the AI coding workflow with Claude. Claude Code, MCP servers, the prompt patterns that work, and what to delegate. Free.

Enter your work email. We send it straight over, plus a few short notes worth knowing. Unsubscribe any time.

No spam. Unsubscribe any time.