public evidence dossier

io.vulnify/mcp

Vulnify

Ask Vulnify before an AI agent acts. Check, record, and read policy decisions.

Latest visible observation: 2026-10-20T22:38:21.444Z

Run a preflight Open expert evidence

Identity

publisher identityVendor-official for vulnify (DNS-verified vulnify.io)

registry titleVulnify · observed 2026-10-10T21:53:28.274496Z

namespacedomain · observed 2026-10-10T21:53:28.274496Z

registry statusactive · observed 2026-10-10T21:53:28.274496Z

origin systemsgithub, hosted_endpoint, osv, registry · observed 2026-10-20T22:38:21.444Z

Distribution

repositoryhttps://github.com/vulnify/vulnify-mcp · observed 2026-10-11 17:39:45

npm packageUnknown · observed 2026-10-11 17:39:45

PyPI packageUnknown

hosted endpointhttps://mcp.vulnify.io/mcp · observed 2026-10-18T23:32:29.045Z

Maintenance and public findings

repository pushed2026-10-17T00:59:52Z · observed 2026-10-17T00:59:52Z

repository archivedNo · observed 2026-10-11 17:39:45

npm deprecatedUnknown · observed 2026-10-11 17:39:45

OSV package advisoryNone on record · observed 2026-10-11 17:39:45

Hosted liveness

last endpoint observationhealthy · observed 2026-10-18T23:32:29.045Z

reported MCP revisionunknown · observed 2026-10-20 07:54:39

Limits

This dossier reports public evidence. It is not a safety, code, permission, scope, runtime, or penetration-test verdict. Missing evidence remains unknown.