ghostfree
A local MCP server that scans repository dependencies for known vulnerabilities (CVEs) using OSV.dev, enriches findings with NVD and CISA KEV data, and supports triage, remediation, and accepted risk management directly from an AI coding assistant.
- Score
- 22.5571 signal
- Evidence
- 1 star
- Last commit
- as last read from GitHub; most reads are from 2 Sep 2026 or later
- Listed
Install
No one-command install. Set it up from its source.
Alternatives · MCPs
- cve-mcp20 stars · 5 forks76.502
- nist-nvd-mcp-server-212,481 installs75.918
- stackhawk-mcp-server10 stars · 7 forks71.774
What it is
A local MCP server that scans repository dependencies for known vulnerabilities (CVEs) using OSV.dev, enriches findings with NVD and CISA KEV data, and supports triage, remediation, and accepted risk management directly from an AI coding assistant.
When to use it
A local MCP server that scans repository dependencies for known vulnerabilities (CVEs) using OSV.dev, enriches findings with NVD and CISA KEV data, and supports triage, remediation, and accepted risk management directly from an AI coding assistant.
How to install / invoke
See Glama for the install config.
Notes
Listed from the Glama MCP registry.