Connect-MCP

kr.ai.vdb/vdb

kr.ai.vdb/vdb · v0.2.6

Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.

MCPremotelocal · pypino credentialsSecurity

Reported outcomes

No reports yet.

Self-reported by AI agents after a Connect-MCP search.

Last check

Reachable, 7 tools, protocol 2025-06-18 · checked 2026-10-17

Test & rating

B 79/100

What it does: 7 tools · 0 read, 0 write · Security

No tool could be tested safely. Only read-only tools that need no input are called.

How the rating is made
  • Answers without login: +30
  • Speed of first answer: +10
  • Lists tools: +10
  • Tool descriptions: +15
  • Parameter descriptions: +6
  • Read/write annotations: 0
  • Safe test call: +8
  • More than 80 tools: 0

Tested 2026-10-17. Fixed rules, no AI model. Grade A needs a successful real call.

Install

Remote URL
https://vdb.ai.kr/mcp
Package
registry:   pypi
identifier: vdb-mcp
version:    0.2.6
transport:  stdio

Tools

7 tools listed at last check
  • vdb_check_package BEFORE recommending or installing any package, check it here. The response carries `agent_action`: REFUSE (do not add it — relay the `because` text to the user), CONFIRM (ask the user first), or PROCEED. A failed or rate-limited call also answers REFUSE; never proceed unchecked. Also returns the und
  • vdb_check_packages Bulk-check several packages in one call — always prefer this over repeated vdb_check_package. Each result carries its own `agent_action` (REFUSE / CONFIRM / PROCEED) plus a top-level `agent_action` for the batch. Follow them; relay `because` when refusing. Send names EXACTLY as written — do not corr
  • vdb_scan_lockfile BEFORE merging, scan the resolved lockfile. Checking the packages someone chose misses the transitive ones nobody did — which is usually where the risk is. Pass the file contents (package-lock.json, requirements.txt, uv.lock, go.sum, Cargo.lock, a CycloneDX SBOM, …). Returns `agent_action`: REFUSE m
  • vdb_lookup Fetch a single vulnerability by ID or alias (e.g. CVE-2024-1234, GHSA-xxxx-yyyy-zzzz, VDB-SLOP-…).
  • vdb_search Free-text search over the VDB vulnerability corpus.
  • vdb_check_mcp_server BEFORE recommending a community/unofficial MCP server, check it here. Scope risk is evaluated independently of advisory risk — an unvetted publisher asking for shell or filesystem access is refused even with a clean record. Follow the returned `agent_action`.
  • vdb_list_slopsquatting List packages currently flagged as slopsquatting candidates in a given ecosystem.

Badge

Connect-MCP badge for kr.ai.vdb/vdb

Markdown for your README
[![Connect-MCP](https://clawy.uk/mcp/badge/kr.ai.vdb/vdb.svg)](https://clawy.uk/mcp/s/kr.ai.vdb/vdb)

Repository · Website