LocalFree

GhostFree MCP server

shane-js/ghostfree

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

1 GitHub stars86 npm downloads / month
Source code

Install GhostFree in Claude Code

Claude Code
claude mcp add ghostfree -- npx -y ghostfree
mcp.json (Claude Desktop, Cursor, VS Code, Windsurf)
{
  "mcpServers": {
    "ghostfree": {
      "command": "npx",
      "args": [
        "-y",
        "ghostfree"
      ]
    }
  }
}

Frequently asked questions

What does the GhostFree MCP server do?

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

Is the GhostFree MCP server free?

Yes, most likely. Open source and no paid account or API key is mentioned in the listing. Check the provider for current pricing.

Does GhostFree run locally or remotely?

Local. Runs on your machine (stdio). You install it with npx, uvx, Docker or from source.

How do I add GhostFree to Claude Code?

Run: claude mcp add ghostfree -- npx -y ghostfree

More security & identity MCP servers

View all

GhostPaw Souls

1

GhostPawJS/souls

Local cognitive identity engine with traits, behavioral evidence, and revision history.

LocalFree

Gadriel AI Security Harness

1901

Gadriel-ai/gadriel-copilot-plugin

AI Security Harness: SAST, secrets, deps, containers, config & OWASP LLM. Scans locally.

LocalFree

JFSecure

1

theone55/jfs

Let AI agents use secrets without seeing them: masked output, every use approved in JFSecure.

LocalFree

First Epss

1

cyanheads/first-epss-mcp-server

Look up FIRST EPSS scores and daily history, find CVEs by threshold, and prioritize them with CVSS.

Local + RemoteFree

Keymaster

1

AInoAKARI/keymaster-mcp

Read-only runtime secret retrieval from HashiCorp Vault via Keymaster for autonomous AI agents.

LocalAccount needed

Evals

1

cyanheads/evals-mcp-server

Author verifiable eval records through a draft→review→revise→submit loop with enforced graders.

LocalFree