4da MCP Server vs Vulnfeed MCP
A side-by-side look at the 4da MCP Server and Vulnfeed MCP MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.
4
4da MCP ServerSecurity · Local subprocess (stdio)Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.43FairAuth: no auth requiredVerdict: choose 4da MCP Server for security work as a local process; choose Vulnfeed MCP for security as a local process. You can also run both side by side in one mcpServers block.
Which MCP server should you choose?
4Choose 4da MCP Server when
- You need dedicated capabilities in the Security domain.
- You prefer a local stdio subprocess transport.
- Its auth model fits you: No auth required.
Choose Vulnfeed MCP when
- You need dedicated capabilities in the Security domain.
- You prefer a local stdio subprocess transport.
- Its auth model fits you: API key required.
- You have the keys it needs:
VULNFEED_API_KEY. - You want tools like
scan_project, scan_lockfile, check_package.
Feature & specification comparison
Rows where the two servers differ are marked.
| Spec | 4 4da MCP Server | |
|---|---|---|
| Category | Security | Security |
| Quality signal | 43/100 · Fair | 57/100 · Good |
| Install command | Confirmed | Confirmed |
| Transport | Local subprocess (stdio) | Local subprocess (stdio) |
| Auth | No auth required | API key required |
| Pricing | Free | Freemium |
| Required env vars | None listed |
Tools & capabilities
4da MCP Server tools
No tool names declared yet. Check the project README from the listing page.
Vulnfeed MCP tools 10
scan_projectAuto-detect and scan all lockfiles in a directoryscan_lockfileScan a specific lockfilecheck_packageCheck a single package for vulnerabilitieslookup_cveDetailed CVE info with EPSS + fix versions (license key or x402)monitor_projectRegister for continuous monitoring (optional `webhook_url` for push alerts)check_alertsNew vulns since last scanset_webhookSet, rotate or remove a project's webhookupdate_depsUpdate snapshot after upgrading packageslist_monitoredSee all monitored projectsunmonitor_projectRemove from monitoring
Ready-to-paste client configs
Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.
4da MCP Server
{
"mcpServers": {
"4da-mcp-server-3": {
"command": "npx",
"args": [
"@4da/mcp-server"
]
}
}
}
Vulnfeed MCP
{
"mcpServers": {
"infai-tech-vulnfeed-mcp": {
"command": "uvx",
"args": [
"vulnfeed-mcp"
],
"env": {
"VULNFEED_API_KEY": "YOUR_VULNFEED_API_KEY_HERE"
}
}
}
}
Frequently asked questions
4da MCP Server is categorized under Security and uses a local stdio subprocess. Vulnfeed MCP belongs to Security and uses a local stdio subprocess. Pick 4da MCP Server for security work and Vulnfeed MCP for security.
Copy the mcpServers block from the config section on this page into your client's config (for example claude_desktop_config.json or ~/.cursor/mcp.json), then fully restart the client.
4da MCP Server is listed as free. Auth: no auth required. Vulnfeed MCP is listed as freemium — a free tier with paid plans. Auth: api key required. If a server needs environment variables such as API keys, define them under the env key in your client's MCP config.
Yes. MCP clients support multiple servers: add 4da-mcp-server-3 and infai-tech-vulnfeed-mcp as separate keys in the same mcpServers object, and your assistant will call tools from either one.
On AllMCPs, 4da MCP Server has a quality signal of 43/100 (Fair) with 0 views, 0 installs and 0 GitHub stars. Vulnfeed MCP has 57/100 (Good) with 3 views, 0 installs and 1 GitHub stars.
