kr.ai.vdb/vdb

up checked 2026-11-11T04:38:11.039Z

Unclaimed · Unverified

Publisher-provided description

Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.

Summary by lookupd

Checks packages and MCP servers for known vulnerabilities, slopsquatting candidates, and CISA KEV entries before installation.

Install

Claude Code, remote (streamable-http)

claude mcp add --transport http vdb https://vdb.ai.kr/mcp

Claude Code, pypi package (stdio)

claude mcp add vdb -- uvx vdb-mcp

Codex, remote (streamable-http)

codex mcp add vdb --url https://vdb.ai.kr/mcp

Codex, pypi package (stdio)

codex mcp add vdb -- uvx vdb-mcp

Cursor, remote (streamable-http) → .cursor/mcp.json

{
  "mcpServers": {
    "vdb": {
      "url": "https://vdb.ai.kr/mcp"
    }
  }
}

Cursor, pypi package (stdio) → .cursor/mcp.json

{
  "mcpServers": {
    "vdb": {
      "command": "uvx",
      "args": [
        "vdb-mcp"
      ]
    }
  }
}

Other clients: docs. Or tell your agent: Set up lookupd for me: read https://lookupd.com/agent.md and follow it.

Publisher-provided text

vdb_check_package BEFORE recommending or installing any package, check it here. The response carries `agent_action`: REFUSE (do not add it — relay the `because` text to the user)
vdb_check_packages Bulk-check several packages in one call — always prefer this over repeated vdb_check_package. Each result carries its own `agent_action` (REFUSE / CONFIRM / PRO
vdb_scan_lockfile BEFORE merging, scan the resolved lockfile. Checking the packages someone chose misses the transitive ones nobody did — which is usually where the risk is. Pass
vdb_lookup Fetch a single vulnerability by ID or alias (e.g. CVE-2024-1234, GHSA-xxxx-yyyy-zzzz, VDB-SLOP-…).
vdb_search Free-text search over the VDB vulnerability corpus.
vdb_check_mcp_server BEFORE recommending a community/unofficial MCP server, check it here. Scope risk is evaluated independently of advisory risk — an unvetted publisher asking for
vdb_list_slopsquatting List packages currently flagged as slopsquatting candidates in a given ecosystem.

Shows this live status and links here; updates hourly.

[![lookupd status](https://lookupd.com/badge/kr.ai.vdb/vdb.svg)](https://lookupd.com/servers/kr.ai.vdb/vdb)