Safedep MCP Server
Verifiedvet-mcp checks open source packages—like those suggested by AI coding tools—for vulnerabilities and malicious code. It supports npm and PyPI, and runs locally via Docker or as a standalone binary for fast, automated vetting.
Install
No auto-install command available for this server.
Check the GitHub repository for setup instructionsSafety Report
details
Authentication detected: env_api_key_py, oauth
details
No CORS-relevant transport detected (likely stdio)
details
Rate limiting detected: rate_limit_middleware
details
No known CVEs in dependencies
details
No known vulnerable dependencies detected
details
No dangerous code patterns detected
details
License: Apache-2.0
details
Last commit 6 days ago
Frequently Asked Questions
What is Safedep MCP Server?
vet-mcp checks open source packages—like those suggested by AI coding tools—for vulnerabilities and malicious code. It supports npm and PyPI, and runs locally via Docker or as a standalone binary for fast, automated vetting.
Is Safedep MCP Server safe to use?
Yes, Safedep MCP Server has passed our 8-point security audit and is rated Verified. All checks including authentication, dependency audit, and known CVE scan passed.
What are alternatives to Safedep MCP Server?
Similar MCP servers include GhidraMCP, Ida Pro MCP, Beelzebub. Each serves a similar purpose but may differ in features, language, and compatibility.
Similar MCP Servers
GhidraMCP
UntestedA Model Context Protocol server for Ghidra that enables LLMs to autonomously reverse engineer applications. Provides tools for decompiling binaries, renaming methods and data, and listing methods, classes, imports, and exports.
Ida Pro MCP
CautionMCP server for IDA Pro, allowing you to perform binary analysis with AI assistants. This plugin implement decompilation, disassembly and allows you to generate malware analysis reports automatically.
Beelzebub
VerifiedBeelzebub is a honeypot framework that lets you build honeypot tools using MCP. Its purpose is to detect prompt injection or malicious agent behavior. The underlying idea is to provide the agent with tools it would never use in its normal work.