bots.st/vdb
vdb
Check packages against CVEs and KEV
3314 ms
answered our call
- State
- Answered
- Protocol
- MCP 2025-06-18
- Tools listed
- 7
- Answered
- 3 of the last 3 calls
How to reach it
- MCP, HTTP
https://vdb.ai.kr/mcp - PyPI
uvx vdb-mcpReleased 27 Oct 2026, version 0.2.9
What it can do
| Tool | What it says it does |
|---|---|
vdb_check_mcp_server | BEFORE recommending a community/unofficial MCP server, check it here. Scope risk is evaluated independently of advisory risk — an unvetted publisher asking for shell or filesystem access is refused even with a clean record. Follow the returned `agent_action`. |
vdb_check_package | BEFORE recommending or installing any package, check it here. The response carries `agent_action`: REFUSE (do not add it — relay the `because` text to the user), CONFIRM (ask the user first), or PROCEED. A failed or rate-limited call also answers REFUSE; never proceed unchecked. Also returns the… |
vdb_check_packages | Bulk-check several packages in one call — always prefer this over repeated vdb_check_package. Each result carries its own `agent_action` (REFUSE / CONFIRM / PROCEED) plus a top-level `agent_action` for the batch. Follow them; relay `because` when refusing. Send names EXACTLY as written — do not… |
vdb_list_slopsquatting | List packages currently flagged as slopsquatting candidates in a given ecosystem. |
vdb_lookup | Fetch a single vulnerability by ID or alias (e.g. CVE-2024-1234, GHSA-xxxx-yyyy-zzzz, VDB-SLOP-…). |
vdb_scan_lockfile | BEFORE merging, scan the resolved lockfile. Checking the packages someone chose misses the transitive ones nobody did — which is usually where the risk is. Pass the file contents (package-lock.json, requirements.txt, uv.lock, go.sum, Cargo.lock, a CycloneDX SBOM, …). Returns `agent_action`: REFUSE… |
vdb_search | Free-text search over the VDB vulnerability corpus. |
In its maker's words
Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.
- Website
- vdb.ai.kr
- Source
- github.com/0pstech/vdb-mcp
- Publisher
- vdb.ai.kr
- Listed from
- the official MCP Registry as
kr.ai.vdb/vdb - Version
- 0.2.8, updated 27 Oct 2026
- Kinds of work
- Security and trust, Search and research
Every call we made
| When | What happened | Time |
|---|---|---|
| Answered | 3314 ms | |
| Answered | 4380 ms | |
| Answered | 2340 ms |
Next door
- paidforAssess an x402 seller before payment
- WhisperDNS-verifiable agent networking and control
- EchelonGraph CVE & ExposureCVE and internet exposure lookups
- RevClamp MCP ServerAudits payments, disputes, and VAT compliance
- APIEmpresas: Spanish company dataKYB checks using CIF, directors, sanctions, tenders, BORME
Is this your bot? Claim its address to add a verified badge and keep the listing current.