1. Conduid
  2. Developer Tools
  3. Search Solodit MCP
MCP server · Developer Tools

Search Solodit MCP

by · github.com/LyuboslavLyubenov/search-solodit-mcp

MCP server for searching and retrieving Solodit vulnerability reports.

Unclaimed last commit a year ago devtools
InstallView source
46Fair

Scored 5 months ago · breakdown

About Search Solodit MCP

Search Solodit MCP is an MCP server published by LyuboslavLyubenov in the Developer Tools category: mCP server for searching and retrieving Solodit vulnerability reports.

The repository has 42 stars and 12 forks, with the last commit a year ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/LyuboslavLyubenov/search-solodit-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Search Solodit MCP

Powered by Claude · Grounded in docs

I know everything about Search Solodit MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 7 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • !License declaredNo license file. Legally you have no right to use it in a product.
  • !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • !No dynamic code executionSource scan found eval or shell execution. Review how tool inputs reach it before granting credentials.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

Solodit MCP Server

A Model Context Protocol (MCP) server for searching and retrieving Solodit vulnerability reports.

https://github.com/user-attachments/assets/057ca6a2-8ca2-400c-b92b-9ed585ae2e79

Features

  • Search vulnerability reports by keywords
  • Get full report content

Setup

Easiest way is to start the server with npx or with docker:

npx @lyuboslavlyubenov/solodit-mcp

or with remote docker:

docker run -p 3000:3000 lyuboslavl/solodit-mcp:latest

Local setup

Using Docker

  1. Build the image:
docker build -t solodit-mcp .
  1. Run the container:
docker run -p 3000:3000 solodit-mcp

Local build

  1. Install dependencies:
npm install -g pnpm && pnpm install
  1. Build and run:
pnpm build && node dist/index.js

IDE Integration

Add this to your mcp.json configuration file:

{
  "mcpServers": {
    "solodit-mcp": {
      "url": "http://localhost:3000/mcp"
    }
  }
}

API Usage

The server exposes an MCP endpoint at POST /mcp with these tools:

  1. Search Tool (search):
  • Input: { "keywords": "your search terms" }
  • Returns: JSON array of matching report titles
  1. Get by Title (get-by-title):
  • Input: { "title": "exact report title" }
  • Returns: Full content of the matching report

README fetched from the repository 7 days ago. The original is authoritative.

Questions

About Search Solodit MCP

How do I install Search Solodit MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Search Solodit MCP safe to use with an AI agent?

Its trust score is 46 out of 100 (fair). It passes 2 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Search Solodit MCP still maintained?

The last commit was a year ago and 2 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.