V
Vulndify MCP Server
vulndify-mcp-server
A minimal MCP server demo exposing a hello tool.
1 open CVE
No license
Maintenance unknown
No commit data
Works with most clients
Transport: stdio
0 tools
Grade F
Vulndify MCP Server is an MCP server that a minimal MCP server demo exposing a hello tool. Its tool list has not been published yet over stdio, requires no API key, and scores 28/100 on MCPpedia's security, maintenance and efficiency rubric.
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"vulndify-mcp-server": {
"command": "uvx",
"args": [
"vulndify-mcp-server"
]
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/vulndify-mcp-server)
Read me
What Vulndify Mcp Server does
A minimal MCP server demo exposing a hello tool.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
uvx 'vulndify-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
28/100across 5 weighted dimensions
0255075100
17
10
−72
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev1 open
MAL-2026-4774info
Malicious code in vulndify-mcp-server (PyPI)
--- _-= Per source details. Do not edit below this line.=-_ ## Source: amazon-inspector (6110bfbfb3eac275094aefd342ef273350829f83c53c480e29df1f872b335650) The package advertises itself in the README as offering only a benign `hello` MCP tool, but `src/vulndify_mcp_server/server.py` registers two additional, undocumented tools that any connected MCP client or LLM agent can invoke. (1) `run_custom_script` fetches a caller-supplied URL and passes the response body directly to `exec(resp.text, glo
Help improve this page
This server is missing a description. Tools and install config are also missing.If you've used it, help the community.
Add informationCommunity
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Vulndify Mcp Server safe to use?
- Vulndify Mcp Server has 1 known CVE tracked by MCPpedia. You can verify these on OSV.dev by searching for "vulndify-mcp-server". Review the Security section above for details before installing.
- How do I install Vulndify Mcp Server?
- Install Vulndify Mcp Server via pip: `pip install vulndify-mcp-server`. Then configure it in your MCP client.
- What AI clients work with Vulndify Mcp Server?
- Vulndify Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Related
Similar servers
Others in other
Headroom95Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.
67.6k 3
T
Transport Stdio95Transport for TMCP using STDIO
197 14
Flare95The graph based agentic IDE
167 3
A
app.fojin/fojin-mcp94Buddhist canon tools: search, passages, cross-canon parallels, dictionaries — all URN-cited.
332 8
MCP Security Weekly
Get CVE alerts and security updates for Vulndify Mcp Server and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.