vulnicheck for VS Code
io.github.andrasfe/vulnicheck
HTTP MCP Server for comprehensive Python vulnerability scanning and security analysis.
client:VS Code
transport:stdio
runtime:oci
Install vulnicheck in VS Code
.vscode/mcp.json
{
"inputs": [
{
"type": "promptString",
"id": "nvd-api-key",
"description": "NVD_API_KEY",
"password": true
},
{
"type": "promptString",
"id": "github-token",
"description": "GITHUB_TOKEN",
"password": true
},
{
"type": "promptString",
"id": "openai-api-key",
"description": "OPENAI_API_KEY",
"password": true
},
{
"type": "promptString",
"id": "anthropic-api-key",
"description": "ANTHROPIC_API_KEY",
"password": true
},
{
"type": "promptString",
"id": "mcp-port",
"description": "MCP_PORT",
"password": true
},
{
"type": "promptString",
"id": "cache-ttl",
"description": "CACHE_TTL",
"password": true
},
{
"type": "promptString",
"id": "vulnicheck-http-only",
"description": "VULNICHECK_HTTP_ONLY",
"password": true
}
],
"servers": {
"vulnicheck": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"docker.io/andrasfe/vulnicheck:main"
],
"env": {
"NVD_API_KEY": "${input:nvd-api-key}",
"GITHUB_TOKEN": "${input:github-token}",
"OPENAI_API_KEY": "${input:openai-api-key}",
"ANTHROPIC_API_KEY": "${input:anthropic-api-key}",
"MCP_PORT": "${input:mcp-port}",
"CACHE_TTL": "${input:cache-ttl}",
"VULNICHECK_HTTP_ONLY": "${input:vulnicheck-http-only}"
}
}
}
}
VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs