What is the best alternative to Vulnfeed MCP?

The top-rated alternatives to Vulnfeed MCP in the Security category include Osv Ui, Sast MCP Server, Depscope. These servers offer complementary or alternative capabilities depending on your deployment stack and authentication requirements.

How do Vulnfeed MCP alternatives differ in installation and runtime?

Vulnfeed MCP and its alternatives vary by runtime requirement (Node.js/npx, Python/uvx, Docker, or remote HTTP/SSE endpoints). Check the specification comparison table above to verify command requirements before installing.

Are alternatives to Vulnfeed MCP free and open source?

Most MCP servers listed on AllMCPs are open source tools under MIT or Apache licenses that you can self-host or run locally with Claude Desktop, Cursor, VS Code, or Windsurf.

How do I side-by-side compare Vulnfeed MCP with a specific alternative?

Click the "Compare side-by-side →" button on any alternative card to see an in-depth comparison matrix covering feature lists, stars, npm downloads, install configurations, and schema specifications.

Security• MCP Alternatives Guide

Best Alternatives to Vulnfeed MCP

Looking for an alternative to Vulnfeed MCP? Whether you need a different runtime environment, custom authentication support, or alternative API integrations in the Security ecosystem, we have cataloged and compared the top alternative MCP servers below.

Browse all Security servers →View Vulnfeed MCP Specs →

Target Reference Server

Vulnfeed MCP Overview

VulnFeed is an MCP server for scanning project dependencies and identifying known vulnerabilities. It queries OSV.dev, enriches findings with EPSS scores, filters low-priority results by default, and recommends remediation versions. Use it for one-off dependency checks or ongoing project monitoring.

Primary Use Cases for Vulnfeed MCP:

Server Name	Runtime	Auth	Pricing	GitHub Stars	Downloads	Action
Vulnfeed MCP (Target)	uvx	API key	Freemium	1	—	Current
Osv Ui	npx	No auth required	Free	4	—	Compare →
Sast MCP Server	uvx	API key	Free	3	—	Compare →
Depscope	npx	No auth required	Free	1	—	Compare →
Agent Bom	uvx	No auth required	Free	31	—	Compare →
Mobb Vibe Shield MCP	npx	API key	Bring your own API key (usage-based cost)	69	—	Compare →
Agentward	uvx	No auth required	Free	19	—	Compare →
MCP Security Audit	—	No auth required	Free	57	—	Compare →
Vet	—	API key	Free	1,106	—	Compare →
Shield	npx	No auth required	Free	11	—	Compare →
Osv MCP	—	No auth required	Free	42	—	Compare →
MCP Shodan	npx	API key	Bring your own API key (usage-based cost)	171	—	Compare →
Pentest Tools.com CLI & MCP Server	uvx	API key	Bring your own API key (usage-based cost)	3	—	Compare →

Detailed Evaluation of Vulnfeed MCP Alternatives

Osv Ui

Runtime: npx

Scans supported project manifests for OSV vulnerabilities, opens a review dashboard, and applies confirmed dependency fixes.

Key Features:

Multi-ecosystem manifest scanning

Live OSV.dev vulnerability lookups

Local browser dashboard for human review

3 0 4

Compare side-by-side

Sast MCP Server

Runtime: uvx

MCP server for multi-scanner code, dependency, secret, IaC, container, and runtime security analysis.

Key Features:

Unified output from 11 SAST, SCA, DAST, secret, and IaC scanners

Parallel multi-scanner scans with deduplication

SARIF, SBOM, VEX, compliance, and executive report exports

2 0 3

Compare side-by-side

Depscope

Runtime: npx

Checks package existence, supply-chain risk, vulnerabilities, compatibility, upgrades, and project dependencies through MCP.

Key Features:

Package existence and typosquat detection

Malware, vulnerability, and trust-signal checks

Dependency batch and project scanning

4 0 1

Compare side-by-side

Agent Bom

Runtime: uvx

Open-source AI supply chain security scanner and control plane with 77 MCP tools and multi-ecosystem compliance enforcement.

Key Features:

Auto-discovers 20 MCP clients and supports 15 package ecosystems

Detects CVEs using OSV, NVD, EPSS, and CISA KEV databases

Maps blast radius from vulnerabilities to exposed credentials and tools

2 0 31

Compare side-by-side

Mobb Vibe Shield MCP

Runtime: npx

Automates security vulnerability remediation by analyzing SAST reports or scanning repos, providing fix recommendations via MCP.

Key Features:

Supports SAST tools: Checkmarx, CodeQL, Fortify, Snyk

Two modes: Scan (runs SAST scan) and Analyze (uses existing SAST report)

Generates automated code fixes for detected vulnerabilities

2 0 69

Compare side-by-side

Agentward

Runtime: uvx

Enforces YAML permissions on agent tool calls, inspects sensitive data and tool chains, and records audit trails.

Key Features:

YAML policy enforcement

PII and PHI classification

Dangerous tool-chain detection

4 0 19

Compare side-by-side

MCP Security Audit

Runtime not confirmed

Audits npm dependencies against the remote registry and reports severity, CVE, CVSS, and upgrade information.

Key Features:

Remote npm registry security checks

Critical-to-low severity reporting

CVE, CVSS, CWE, and advisory references

4 0 57

Compare side-by-side

Vet

Runtime not confirmed

Locally vets npm and PyPI packages for known vulnerabilities and malicious code through an MCP interface.

Key Features:

npm package vetting

PyPI package vetting

Vulnerability checks

3 0 1,106

Compare side-by-side

Shield

Runtime: npx

Local MCP proxy that blocks risky agent actions, scans tool traffic, pins catalogs, and supports approvals and audit logs.

Key Features:

Pre-execution MCP call guardrails

TOFU tool-catalog pinning

Tool description and result scanning

4 0 11

Compare side-by-side

Osv MCP

Runtime not confirmed

Query OSV for package, commit, batch, and vulnerability-ID security data through MCP tools.

Key Features:

Query package versions or commits

Accept package URLs for lookups

Batch query multiple packages or commits

3 0 42

Compare side-by-side

MCP Shodan

Runtime: npx

Queries Shodan for IP, DNS, device, CPE, and vulnerability intelligence through MCP tools.

Key Features:

IP reconnaissance with service and location details

Shodan device search

Forward and reverse DNS lookups

3 0 171

Compare side-by-side

Pentest Tools.com CLI & MCP Server

Runtime: uvx

MCP server for running Pentest-Tools.com scans, managing findings, and generating security reports.

Key Features:

Website Scanner integration

Subdomain Finder integration

Network Scanner integration

2 0 3

Compare side-by-side

Best Alternatives to Vulnfeed MCP

Vulnfeed MCP Overview

Specification Matrix: Vulnfeed MCP vs Alternatives

Detailed Evaluation of Vulnfeed MCP Alternatives

Osv Ui

Sast MCP Server

Depscope

Agent Bom

Mobb Vibe Shield MCP

Agentward

MCP Security Audit

Vet

Shield

Osv MCP

MCP Shodan

Pentest Tools.com CLI & MCP Server

Frequently Asked Questions: Vulnfeed MCP Alternatives