Vulnerability Exposure for VS Code

io.github.mrfrazer25/vulnerability-exposure-mcp

Confirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CISA KEV, EPSS)

client:VS Code transport:stdio runtime:pypi

Install Vulnerability Exposure in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "shodan-api-key",
      "description": "SHODAN_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "virustotal-api-key",
      "description": "VIRUSTOTAL_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "abuseipdb-api-key",
      "description": "ABUSEIPDB_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "nvd-api-key",
      "description": "NVD_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "greynoise-api-key",
      "description": "GREYNOISE_API_KEY",
      "password": true
    }
  ],
  "servers": {
    "vulnerability-exposure-mcp": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "vulnerability-exposure-mcp"
      ],
      "env": {
        "SHODAN_API_KEY": "${input:shodan-api-key}",
        "VIRUSTOTAL_API_KEY": "${input:virustotal-api-key}",
        "ABUSEIPDB_API_KEY": "${input:abuseipdb-api-key}",
        "NVD_API_KEY": "${input:nvd-api-key}",
        "GREYNOISE_API_KEY": "${input:greynoise-api-key}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

Vulnerability Exposure in other clients

Vulnerability Exposure MCP server