1. Conduid
  2. Data
  3. Vulnify
MCP server · Data

Vulnify

Ask Vulnify before an AI agent acts. Check, record, and read policy decisions.

Unclaimed devtools
39Low

Scored 9 days ago · breakdown

About Vulnify

Vulnify is an MCP server published by mez-0 in the Data category: ask Vulnify before an AI agent acts. Check, record, and read policy decisions.

The repository has 38 stars and 1 forks, with the last commit 25 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

Claude Code
claude mcp add vulnify -- npx -y @vulnify/mcp
npx
npx -y @vulnify/mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (9)

----

Parameters not published.

database_overview()Totals, published-date range, last pipeline-run times.

Parameters not published.

exploits_for(cve_id)Concrete exploit artefacts (Nuclei / Exploit-DB / Metasploit) with source, stable id, url, and `exact`/`parsed` confidence.

Parameters not published.

get_cve(cve_id)Full hydrated CVE record — CVSS, KEV, EPSS, exploits, references, CWEs, affected products, plus an `artefacts` evidence list.

Parameters not published.

list_kev(since, limit)Recent CISA KEV entries, newest first.

Parameters not published.

list_vendors(query, limit)Vendor names with CVE / product counts and their NVD CPE slugs. Use it to disambiguate a vendor term before trusting an empty result.

Parameters not published.

references_for(cve_id, tag)Reference URLs with their tags, optionally filtered to one tag (e.g. `patch`, `exploit`).

Parameters not published.

search_cves(...)Filter by vendor / product / cwe / kev_only / min_cvss / min_epss / year. The `vendor` filter resolves four ways (vendor edge, product owner, product name, CPE vendor slug) — see [MCP.md](docs/MCP.md#how-the-vendor-filter-resolves).

Parameters not published.

search_cves_text(query, limit)FTS5 free-text search over title / summary / technical details. AND / OR / NOT / quoted phrases / `prefix*` all supported.

Parameters not published.

Ask AI

✦

Ask AI about Vulnify

Powered by Claude · Grounded in docs

I know everything about Vulnify. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

6 checks have not been run yet.

Questions

About Vulnify

How do I install Vulnify?

Run claude mcp add vulnify -- npx -y @vulnify/mcp, then add the server to your MCP client's configuration.

Is Vulnify safe to use with an AI agent?

Its trust score is 39 out of 100 (low). Conduid hasn't run static security checks on this repository yet, so review the source yourself before granting it credentials. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Vulnify still maintained?

Yes — the last commit was 25 days ago. The repository has 38 stars and 1 forks.