Vulnfeed MCP vs Depscope

In-depth architectural comparison of the Vulnfeed MCP and Depscope MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.

Which MCP Server Should You Choose?

Choose Vulnfeed MCP when:

• You need dedicated capabilities in the Security domain.
• You prefer local stdio subprocess transport architecture.
• Your security boundary fits: API Key required (Freemium).
• You have access to required keys: VULNFEED_API_KEY.
• Primary tools included: scan_project, scan_lockfile, check_package.

Explore Vulnfeed MCP Details

Choose Depscope when:

• You need dedicated capabilities in the Security domain.
• You prefer local stdio subprocess transport architecture.
• Your security boundary fits: No auth required (Free / Open Source).
• Primary tools included: check_malicious, check_typosquat, check_bulk.

Explore Depscope Details

Feature & Specification Comparison

Specification	Vulnfeed MCP infai-tech Security	Depscope cuttalo Security
Summary	Dependency vulnerability scanner with EPSS exploit probability scoring. Scans lockfiles (npm, pip, Go, Cargo, Ruby, Composer, Gradle, NuGet, Mix), prioritizes by real-world exploit likelihood, recommends fix versions. 9 MCP tools for scanning, monitoring, and alerting. Free tier + x402 micropayments. pip install vulnfeed-mcp	Package Intelligence for AI agents. 22 tools across 17 ecosystems (npm/pypi/cargo/go/maven/nuget/rubygems/composer/pub/hex/swift/cocoapods/cpan/hackage/cran/conda/homebrew) — check health, vulnerabilities (OSV + CISA KEV + EPSS), typosquats, malicious flags, alternatives, known bugs, breaking changes, stack compatibility and error-to-fix. 31k+ packages, 2.2k+ CVEs enriched. Zero auth, MIT. Remote URL https://mcp.depscope.dev/mcp or stdio npx depscope-mcp.

Tools & Capabilities Breakdown

Ready-to-Paste Client Configurations

Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).

{
  "mcpServers": {
    "infai-tech-vulnfeed-mcp": {
      "command": "uvx",
      "args": [
        "vulnfeed-mcp"
      ],
      "env": {
        "VULNFEED_API_KEY": "YOUR_VULNFEED_API_KEY_HERE"
      }
    }
  }
}

{
  "mcpServers": {
    "cuttalo-depscope": {
      "command": "npx",
      "args": [
        "-y",
        "depscope-mcp"
      ]
    }
  }
}

Related MCP Server Comparisons