ai.vulx/watch

Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.

GitHub

No known CVEs

MIT license

Maintained

Last commit 74d ago

Works with most clients

Transport: http

0 tools

Grade F

MCPpedia last refreshed this data 21h ago

Edit this pageView history

ai.vulx/watch is an MCP server that independent security review for AI-built apps. Watch a GitHub repo. Never a patch. Its tool list has not been published yet over http, requires no API key, and scores 32/100 on MCPpedia's security, maintenance and efficiency rubric.

Other

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp

Add as a custom connector

In Claude Desktop, open Customize → Connectors.
Click + Add, then Add custom connector.
Enter a name and this server URL: https://mcp.vulx.ai/mcp
Connect and sign in when prompted.

Remote servers are added as connectors, not in claude_desktop_config.json, which is for local servers.

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/ai-vulx-watch)](https://mcppedia.org/s/ai-vulx-watch)

Read me

What ai.vulx/watch does

Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

32/100across 5 weighted dimensions

How we score →

0255075100

−68

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is ai.vulx/watch safe to use?: ai.vulx/watch has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install ai.vulx/watch?: ai.vulx/watch is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint (https://mcp.vulx.ai/mcp) instead of running it locally.
What AI clients work with ai.vulx/watch?: ai.vulx/watch is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is ai.vulx/watch actively maintained?: ai.vulx/watch is recently maintained - last commit was 74 days ago.

Similar servers

Others in other

View all →

io.github.vshulcz/deja-vu95

deja-vu: local memory over the session histories of forty-three coding agents.

1.5k 6

MCP Wordpress Remote95

MCP WordPress Remote proxy server

188 10

Argo95

专门为 agent 打造的 agent 搜索工具，具备多语言搜索能力，覆盖中文/英文/学术/代码/购物/金融/新闻/百科。

260 1

Football Docs94

Searchable football data provider documentation for AI coding agents. Like Context7 for football data.

228 8

MCP Security Weekly

Get CVE alerts and security updates for ai.vulx/watch and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Install

Install VulX Watch from the Cursor Marketplace, or clone this repo into ~/.cursor/plugins/local and restart Cursor.

Complete the VulX sign-in prompt.

Ask: Watch my repo owner/name with VulX. Then: What did VulX find?

If OAuth does not finish inside Cursor, add the same URL as a custom connector: https://mcp.vulx.ai/mcp. Human page: https://vulx.ai/connect

Frequently Asked Questions

Is ai.vulx/watch safe to use?

ai.vulx/watch has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install ai.vulx/watch?

ai.vulx/watch is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint (https://mcp.vulx.ai/mcp) instead of running it locally.

What AI clients work with ai.vulx/watch?

ai.vulx/watch is compatible with claude-desktop, cursor, claude-code. It uses http transport.

Is ai.vulx/watch actively maintained?

ai.vulx/watch is recently maintained - last commit was 74 days ago.

VulX Watch for Cursor

Adds the VulX Watch connector to Cursor: independent security review for AI-built apps. The agent can watch a GitHub repo and ask what the last reading found.

VulX does not write a patch or open a PR.

What you get

MCP server at https://mcp.vulx.ai/mcp
A skill so the agent knows when to call Watch
Commands: watch-repo, security-status

You still need a VulX account. Sign-in happens when Cursor talks to the connector. Free while we build it.

Install

Install VulX Watch from the Cursor Marketplace, or clone this repo into ~/.cursor/plugins/local and restart Cursor.
Complete the VulX sign-in prompt.
Ask: Watch my repo owner/name with VulX. Then: What did VulX find?

If OAuth does not finish inside Cursor, add the same URL as a custom connector: https://mcp.vulx.ai/mcp. Human page: https://vulx.ai/connect

What it will not do

Patch your app or open a merge-ready PR
Log in to your running site or database
Give a 0–100 score or a “safe to ship”
Treat a quiet week as an all-clear

It reads committed source. It writes only its own brief (AGENTS.md and CLAUDE.md) when brief delivery is on.

License

MIT