Vulners MCP Server

Vulners MCP is a Model Context Protocol (MCP) server that provides seamless access to the Vulners vulnerability database through AI assistants like Claude Desktop. It enables security researchers and developers to query comprehensive vulnerability data, search for CVEs, analyze security bulletins, and audit software packages directly through natural language conversations.

Features

• AI Assistant Integration: Works natively with Claude Desktop and other MCP-compatible clients
• Dual Transport Support: Automatically detects and supports both stdio (for Claude Desktop) and HTTP transports
• Comprehensive Tools: 7 MCP tools for vulnerability research including:
  • Full-text Lucene search across 4M+ vulnerability bulletins
  • CVE and bulletin information retrieval
  • Software/package vulnerability auditing
  • CPE search and autocomplete
  • Linux package vulnerability auditing
• Flexible Deployment: Docker, local build, or PyPI installation
• Environment-based Configuration: Simple setup via environment variables

Table of Contents

• Requirements
• Obtaining Vulners API Key
• Quick Start with Claude Desktop
• Installation & Deployment
  • Docker with run script
  • Docker (manual)
  • Build & run locally
• Configuration / Environment Variables
• Usage & Endpoints
• Testing
• Available Tools
• Development & Contributing
• License

Requirements

• Python 3.9+
• Access to the Vulners API (valid API key and network connectivity)
• (For Docker) Docker engine

Obtaining Vulners API Key

Please, register at Vulners website. Go to the personal menu by clicking at your name at the right top corner. Follow "API KEYS" tab. Generate API key with scope "api" and use it with the library.

Quick Start with Claude Desktop

The easiest way to use Vulners MCP is through Claude Desktop:

1. Build the Docker Image

git clone https://github.com/vulnersCom/vulners-mcp.git
cd vulners-mcp
docker build -t vulners-mcp:latest .

2. Configure Claude Desktop

Add to your Claude Desktop configuration file:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
Linux: ~/.config/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "vulners": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "VULNERS_API_KEY=YOUR_API_KEY_HERE",
        "vulners-mcp:latest"
      ]
    }
  }
}

Replace YOUR_API_KEY_HERE with your actual Vulners API key.

3. Restart Claude Desktop

After saving the configuration, restart Claude Desktop. The Vulners MCP server will be available through the 🔌 icon.

4. Start Using

You can now ask Claude questions like:

• "Find recent vulnerabilities in Google Chrome"
• "Show me details for CVE-2025-53770"
• "What are recent exploted vulnerabilities in Citrix products"
• "Audit this software: cpe:2.3:a:google:chrome:138.0.7204.184:::::::*"
• "Audit ubuntu 22.04 packages 'openssl 3.0.2 amd64' and 'curl 7.81.0-1ubuntu1.14 amd64'"

Installation & Deployment

Docker with run script

For easy HTTP mode deployment, use the provided run script:

# Create .env file with your API key
echo "VULNERS_API_KEY=your_api_key_here" > .env

# Run the server
./run-docker.sh

The server will start in HTTP mode at http://0.0.0.0:8000/mcp

Docker (manual)

Run the MCP server in HTTP mode:

docker run -d \
  --name vulners-mcp-http \
  -e MCP_TRANSPORT_MODE="http" \
  -e VULNERS_BASE_URL="htt

... [View full README on GitHub](https://github.com/vulnersCom/vulners-mcp#readme)