CodeVulnerability MCP Server: Install & Setup

Install CodeVulnerability in Claude Code

Claude Code

claude mcp add --transport sse codevulnerability https://codevulnerability-mcp.vercel.app/api/mcp

mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)

{
  "mcpServers": {
    "codevulnerability": {
      "url": "https://codevulnerability-mcp.vercel.app/api/mcp"
    }
  }
}

Frequently asked questions

What does the CodeVulnerability MCP server do?

OWASP threat scanner auditing codebases for safety leaks.

Is the CodeVulnerability MCP server free?

The server is free, but you will likely need an account. The server itself is free, but it connects to a service that needs an account or API key, which may have paid tiers. Check the provider for current pricing.

Does CodeVulnerability run locally or remotely?

Remote. Hosted by the provider. You connect with a URL, nothing to install.

How do I add CodeVulnerability to Claude Code?

Run: claude mcp add --transport sse codevulnerability https://codevulnerability-mcp.vercel.app/api/mcp

More security & identity MCP servers

View all

Semgrep

17k

semgrep/semgrep/mcp

Scan code for security vulnerabilities using Semgrep.

LocalAccount neededPython

IDA Pro

13k

mrexodia/ida-pro-mcp

IDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.

LocalFreePython

GhidraMCP

12k

LaurieWired/GhidraMCP

Autonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.

LocalFreeJava

NotFair

4.1k

nowork-studio/notfair-plugin

OAuth MCP for Google, Meta, X, LinkedIn, Reddit, TikTok, GSC, GA4, WordPress and GHL.

RemoteAccount needed

Jadx AI

zinja-coder/jadx-ai-mcp

JADX decompiler plugin providing live, LLM-assisted reverse engineering.

LocalFreeJava

GoModel

1.3k

ENTERPILOT/GoModel

Self-hosted gateway aggregating upstream MCP servers behind one authenticated HTTP endpoint.

LocalFree