About Vulnify
Vulnify is an MCP server published by mez-0 in the Data category: ask Vulnify before an AI agent acts. Check, record, and read policy decisions.
The repository has 38 stars and 1 forks, with the last commit 25 days ago. Recent commit activity is the strongest signal that reported issues will get attention.
Install
claude mcp add vulnify -- npx -y @vulnify/mcpnpx -y @vulnify/mcpThis server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.
Tools (9)
----
Parameters not published.
database_overview()Totals, published-date range, last pipeline-run times.
Parameters not published.
exploits_for(cve_id)Concrete exploit artefacts (Nuclei / Exploit-DB / Metasploit) with source, stable id, url, and `exact`/`parsed` confidence.
Parameters not published.
get_cve(cve_id)Full hydrated CVE record — CVSS, KEV, EPSS, exploits, references, CWEs, affected products, plus an `artefacts` evidence list.
Parameters not published.
list_kev(since, limit)Recent CISA KEV entries, newest first.
Parameters not published.
list_vendors(query, limit)Vendor names with CVE / product counts and their NVD CPE slugs. Use it to disambiguate a vendor term before trusting an empty result.
Parameters not published.
references_for(cve_id, tag)Reference URLs with their tags, optionally filtered to one tag (e.g. `patch`, `exploit`).
Parameters not published.
search_cves(...)Filter by vendor / product / cwe / kev_only / min_cvss / min_epss / year. The `vendor` filter resolves four ways (vendor edge, product owner, product name, CPE vendor slug) — see [MCP.md](docs/MCP.md#how-the-vendor-filter-resolves).
Parameters not published.
search_cves_text(query, limit)FTS5 free-text search over title / summary / technical details. AND / OR / NOT / quoted phrases / `prefix*` all supported.
Parameters not published.
Ask AI
Ask AI about Vulnify
Powered by Claude · Grounded in docs
Security checks
6 checks have not been run yet.