---
bezeichner: "io.github.andrasfe/vulnicheck"
art: "mcp_server"
slug: "io-github-andrasfe-vulnicheck"
paketkoordinate: "oci:docker.io/andrasfe/vulnicheck:main"
status: "aktiv"
homepage: "https://github.com/andrasfe/vulnicheck"
erhebungsstand: "2026-10-10T01:17:01.464Z"
namensraum: "io.github.andrasfe"
registerseite: "https://tracevero.de/mcp/io-github-andrasfe-vulnicheck"
abgerufen_am: "2026-10-10"
zugangsdaten_erforderlich: false
ausfuehrungsort: "entfernt"
dateisystem_pfadargument: false
quelloffen_einsehbar: true
einsatzgebiet: "sicherheit"
roh_beschreibung: "HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis."
version: "0.1.0"
roh_umgebungsvariablen: "NVD_API_KEY, GITHUB_TOKEN, OPENAI_API_KEY, ANTHROPIC_API_KEY, MCP_PORT, CACHE_TTL, VULNICHECK_HTTP_ONLY"
roh_geheime_pflichtvariablen: ""
roh_transportarten: "streamable-http"
roh_pfadargumente: ""
roh_repository_url: "https://github.com/andrasfe/vulnicheck"
roh_paketquellen: "oci"
roh_geheime_pflichtkopfzeilen: ""
roh_pfad_umgebungsvariablen: ""
roh_remote_adressen: ""
roh_remote_hosts: ""
roh_statusmeldung: ""
roh_veroeffentlicht_am: "2025-09-19"
roh_aktualisiert_am: "2025-09-19"
roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json"
roh_bereitstellungsform: "paket"
roh_repository_quelle: "github"
roh_repository_unterordner: ""
roh_paketbezeichner: "docker.io/andrasfe/vulnicheck:main"
roh_paketversionen: ""
roh_laufzeithinweise: ""
roh_umgebungsformate: "number, string"
roh_umgebungsbeschreibungen: "ANTHROPIC_API_KEY=Anthropic API key for LLM-based risk assessment (alternative to OpenAI) · CACHE_TTL=Cache time-to-live in seconds for vulnerability data (default: 900) · GITHUB_TOKEN=GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour) · MCP_PORT=Port for MCP HTTP server (default: 3000) · NVD_API_KEY=API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds) · OPENAI_API_KEY=OpenAI API key for LLM-based risk assessment in MCP passthrough operations · VULNICHECK_HTTP_ONLY=Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)"
roh_symbolformate: ""
roh_verbindungswege: "{\"packages\":[{\"registryType\":\"oci\",\"identifier\":\"docker.io/andrasfe/vulnicheck:main\",\"transport\":\"streamable-http\",\"environment\":[{\"name\":\"NVD_API_KEY\",\"description\":\"API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds)\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"GITHUB_TOKEN\",\"description\":\"GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour)\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"OPENAI_API_KEY\",\"description\":\"OpenAI API key for LLM-based risk assessment in MCP passthrough operations\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"ANTHROPIC_API_KEY\",\"description\":\"Anthropic API key for LLM-based risk assessment (alternative to OpenAI)\",\"format\":\"string\",\"required\":false,\"secret\":true},{\"name\":\"MCP_PORT\",\"description\":\"Port for MCP HTTP server (default: 3000)\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"CACHE_TTL\",\"description\":\"Cache time-to-live in seconds for vulnerability data (default: 900)\",\"format\":\"number\",\"required\":false,\"secret\":false},{\"name\":\"VULNICHECK_HTTP_ONLY\",\"description\":\"Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)\",\"format\":\"string\",\"required\":false,\"secret\":false}],\"additional_arguments_declared\":false}],\"remotes\":[]}"
---

# io.github.andrasfe/vulnicheck

## Gemessene Werte

| Merkmal | Wert | Quelle | Erhoben am | Vertrauensgrad | Rohangabe |
| --- | --- | --- | --- | --- | --- |
| Pflicht-Geheimnisse deklariert | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: |
| Ausführungsort | entfernt | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: streamable-http |
| Pfadargument vorhanden | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: ; roh_pfad_umgebungsvariablen: |
| Repository-Adresse geführt | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/andrasfe/vulnicheck |
| Einsatzgebiet, aus der Anbieterbeschreibung abgeleitet | sicherheit | MCP-Register | 2026-08-26T16:45:01.514Z | abgeleitet | roh_beschreibung: HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis. |
| Beschreibung (Rohangabe) | HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft |  |
| Deklarierte Version | 0.1.0 | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Umgebungsvariablen (Rohangabe) | NVD_API_KEY, GITHUB_TOKEN, OPENAI_API_KEY, ANTHROPIC_API_KEY, MCP_PORT, CACHE_TTL, VULNICHECK_HTTP_ONLY | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Geheime Pflichtvariablen (Rohangabe) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Transportarten (Rohangabe) | streamable-http | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Pfadargumente (Rohangabe) |  | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Repository (Rohangabe) | https://github.com/andrasfe/vulnicheck | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Paketquellen (Rohangabe) | oci | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft |  |
| Geheime Pflichtkopfzeilen (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Pfad-Umgebungsvariablen (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote-Adressen (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Remote-Hosts (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Statusmeldung des Registers (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Im Register eingetragen am (Rohangabe) | 2025-09-19 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Im Register geändert am (Rohangabe) | 2025-09-19 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Schemafassung des Rohsatzes (Rohangabe) | https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Bereitstellungsform (Rohangabe) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository-Plattform (Rohangabe) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Repository-Unterordner (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Paketbezeichner (Rohangabe) | docker.io/andrasfe/vulnicheck:main | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Paketversionen (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Laufzeithinweise (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Formate der Umgebungsvariablen (Rohangabe) | number, string | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Beschreibungen der Umgebungsvariablen (Rohangabe) | ANTHROPIC_API_KEY=Anthropic API key for LLM-based risk assessment (alternative to OpenAI) · CACHE_TTL=Cache time-to-live in seconds for vulnerability data (default: 900) · GITHUB_TOKEN=GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour) · MCP_PORT=Port for MCP HTTP server (default: 3000) · NVD_API_KEY=API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds) · OPENAI_API_KEY=OpenAI API key for LLM-based risk assessment in MCP passthrough operations · VULNICHECK_HTTP_ONLY=Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect) | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Symbolformate (Rohangabe) |  | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft |  |
| Verbindungswege (Quellstruktur) | {"packages":[{"registryType":"oci","identifier":"docker.io/andrasfe/vulnicheck:main","transport":"streamable-http","environment":[{"name":"NVD_API_KEY","description":"API key for NIST National Vulnerability Database (increases rate limit from 5 to 50 requests per 30 seconds)","format":"string","required":false,"secret":true},{"name":"GITHUB_TOKEN","description":"GitHub token for Advisory Database access (increases rate limit to 5000 requests per hour)","format":"string","required":false,"secret":true},{"name":"OPENAI_API_KEY","description":"OpenAI API key for LLM-based risk assessment in MCP passthrough operations","format":"string","required":false,"secret":true},{"name":"ANTHROPIC_API_KEY","description":"Anthropic API key for LLM-based risk assessment (alternative to OpenAI)","format":"string","required":false,"secret":true},{"name":"MCP_PORT","description":"Port for MCP HTTP server (default: 3000)","format":"number","required":false,"secret":false},{"name":"CACHE_TTL","description":"Cache time-to-live in seconds for vulnerability data (default: 900)","format":"number","required":false,"secret":false},{"name":"VULNICHECK_HTTP_ONLY","description":"Enable HTTP-only mode with MCP client delegation (true/false, default: auto-detect)","format":"string","required":false,"secret":false}],"additional_arguments_declared":false}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft |  |

## Verweise

- Namensraum: [[namensraum/io-github-andrasfe|io.github.andrasfe]]

---

- Registerseite: <https://tracevero.de/mcp/io-github-andrasfe-vulnicheck>
- Abgerufen am: 2026-10-10
