MCP server for Vulnify: MCP clients such as Claude and Cursor check an agent action and get ALLOW, REVIEW or BLOCK. Hosted at mcp.vulnify.io with OAuth, or run locally over stdio.
Setup
Choose your client, copy the config, then fill in any required environment variables.
Local
claude mcp add vulnify --env VULNIFY_API_KEY='<VULNIFY_API_KEY>' -- npx -y @vulnify/mcp~/.codex/config.toml
[mcp_servers.vulnify]
command = "npx"
args = ["-y", "@vulnify/mcp"]
env = { VULNIFY_API_KEY = "<VULNIFY_API_KEY>" }
# codex mcp add vulnify --env VULNIFY_API_KEY='<VULNIFY_API_KEY>' -- npx -y @vulnify/mcp~/.cursor/mcp.json
{
"mcpServers": {
"vulnify": {
"command": "npx",
"args": [
"-y",
"@vulnify/mcp"
],
"env": {
"VULNIFY_API_KEY": "<VULNIFY_API_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"vulnify": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@vulnify/mcp"
],
"env": {
"VULNIFY_API_KEY": "<VULNIFY_API_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"vulnify": {
"command": "npx",
"args": [
"-y",
"@vulnify/mcp"
],
"env": {
"VULNIFY_API_KEY": "<VULNIFY_API_KEY>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"vulnify": {
"command": "npx",
"args": [
"-y",
"@vulnify/mcp"
],
"env": {
"VULNIFY_API_KEY": "<VULNIFY_API_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"vulnify": {
"command": "npx",
"args": [
"-y",
"@vulnify/mcp"
],
"env": {
"VULNIFY_API_KEY": "<VULNIFY_API_KEY>"
}
}
}
}Remote
claude mcp add --transport http vulnify https://mcp.vulnify.io/mcp --header 'Authorization: Bearer <API_KEY>'~/.codex/config.toml
[mcp_servers.vulnify]
url = "https://mcp.vulnify.io/mcp"
bearer_token_env_var = "VULNIFY_API_KEY"
# codex mcp add vulnify --url https://mcp.vulnify.io/mcp --bearer-token-env-var VULNIFY_API_KEY
# export VULNIFY_API_KEY=<API_KEY>~/.cursor/mcp.json
{
"mcpServers": {
"vulnify": {
"url": "https://mcp.vulnify.io/mcp",
"headers": {
"Authorization": "Bearer <API_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"vulnify": {
"type": "http",
"url": "https://mcp.vulnify.io/mcp",
"headers": {
"Authorization": "Bearer <API_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"vulnify": {
"httpUrl": "https://mcp.vulnify.io/mcp",
"headers": {
"Authorization": "Bearer <API_KEY>"
}
}
}
}claude_desktop_config.json · Customize › Connectors › Add custom connector
{
"mcpServers": {
"vulnify": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://mcp.vulnify.io/mcp",
"--header",
"Authorization:${AUTH_HEADER}"
],
"env": {
"AUTH_HEADER": "Bearer <API_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"vulnify": {
"url": "https://mcp.vulnify.io/mcp",
"headers": {
"Authorization": "Bearer <API_KEY>"
}
}
}
}Environment variables
VULNIFY_API_KEY
Replace the placeholders with your own credentials and keep them out of version control.