Purify Security Feeds for VS Code

io.github.eason4kim-rocket/purify-feeds-mcp

Query CISA KEV / EPSS vulnerability feeds with full per-record provenance and auditable versions

client:VS Code transport:stdio runtime:oci

Install Purify Security Feeds in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "purify-api-key",
      "description": "PURIFY_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "purify-api-url",
      "description": "PURIFY_API_URL",
      "password": true
    }
  ],
  "servers": {
    "purify-feeds-mcp": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/eason4kim-rocket/purify-feeds-mcp:1.0.1"
      ],
      "env": {
        "PURIFY_API_KEY": "${input:purify-api-key}",
        "PURIFY_API_URL": "${input:purify-api-url}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

Purify Security Feeds in other clients

Purify Security Feeds MCP server