CVE Checker for Node Modules

CVE Checker for Node Modules

Enables checking npm packages for known security vulnerabilities using the OSV API before installation. Supports both single package checks and bulk vulnerability scanning for multiple packages at once.

Category
Visit Server

README

MCP Server with CVE Checker for Node Modules

This Model Context Protocol (MCP) server provides tools for checking Common Vulnerabilities and Exposures (CVEs) in npm packages before installation, along with weather information tools.

Features

CVE Checking Tools

  • check_package_cves: Check a single npm package for known vulnerabilities
  • check_packages_bulk_cves: Check multiple npm packages at once before installation

CVE Checking

The server uses the OSV (Open Source Vulnerabilities) API to check npm packages for known security vulnerabilities. This helps you make informed decisions before installing packages.

Usage Examples

Check a single package:

{
	"tool": "check_package_cves",
	"arguments": {
		"packageName": "express",
		"version": "4.17.1"
	}
}

Check multiple packages at once:

{
	"tool": "check_packages_bulk_cves",
	"arguments": {
		"packages": [
			{ "name": "express", "version": "4.17.1" },
			{ "name": "lodash", "version": "4.17.20" },
			{ "name": "axios" }
		]
	}
}

Building and Running

  1. Install dependencies:
npm install
  1. Build the project:
npm run build
  1. Run the MCP server:
node build/index.js

Usage

Add to .vscode/mcp.json to configure the MCP server in your development environment.

{
	"servers": {
		"cve-checker-mcp": {
			"type": "stdio",
			"command": "node",
			"args": ["./build/index.js"]
		}
	},
	"inputs": []
}

Integration

This MCP server can be integrated with any MCP-compatible client to provide CVE checking capabilities before installing npm packages.

Recommended Servers

playwright-mcp

playwright-mcp

A Model Context Protocol server that enables LLMs to interact with web pages through structured accessibility snapshots without requiring vision models or screenshots.

Official
Featured
TypeScript
Magic Component Platform (MCP)

Magic Component Platform (MCP)

An AI-powered tool that generates modern UI components from natural language descriptions, integrating with popular IDEs to streamline UI development workflow.

Official
Featured
Local
TypeScript
Audiense Insights MCP Server

Audiense Insights MCP Server

Enables interaction with Audiense Insights accounts via the Model Context Protocol, facilitating the extraction and analysis of marketing insights and audience data including demographics, behavior, and influencer engagement.

Official
Featured
Local
TypeScript
VeyraX MCP

VeyraX MCP

Single MCP tool to connect all your favorite tools: Gmail, Calendar and 40 more.

Official
Featured
Local
graphlit-mcp-server

graphlit-mcp-server

The Model Context Protocol (MCP) Server enables integration between MCP clients and the Graphlit service. Ingest anything from Slack to Gmail to podcast feeds, in addition to web crawling, into a Graphlit project - and then retrieve relevant contents from the MCP client.

Official
Featured
TypeScript
Kagi MCP Server

Kagi MCP Server

An MCP server that integrates Kagi search capabilities with Claude AI, enabling Claude to perform real-time web searches when answering questions that require up-to-date information.

Official
Featured
Python
E2B

E2B

Using MCP to run code via e2b.

Official
Featured
Neon Database

Neon Database

MCP server for interacting with Neon Management API and databases

Official
Featured
Exa Search

Exa Search

A Model Context Protocol (MCP) server lets AI assistants like Claude use the Exa AI Search API for web searches. This setup allows AI models to get real-time web information in a safe and controlled way.

Official
Featured
Qdrant Server

Qdrant Server

This repository is an example of how to create a MCP server for Qdrant, a vector search engine.

Official
Featured