MCP Hub › Developer Tools › GhostFree

GhostFree MCP server

by shane-js · io.github.shane-js/ghostfree

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

🛠 Developer Toolsnpmv0.2.0
Open in MCP HubGitHub repository ↗Website ↗

How to install GhostFree

npm

claude mcp add ghostfree -- npx -y [email protected]

Or add it to your MCP config (Claude Desktop, Cursor, VS Code):

{
  "mcpServers": {
    "ghostfree": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Environment variables:
GHOSTFREE_DIR – Override the directory where GhostFree stores its data files (accepted-risks.yml, config.yml). Defaults to .ghostfree/ in the scanned repository root.
GHOSTFREE_MIN_SEVERITY – Minimum CVE severity level to surface. One of: CRITICAL, HIGH, MEDIUM (default), LOW.
NVD_API_KEY – Optional NVD API key for higher rate limits when enriching CVE details. Free to request at https://nvd.nist.gov/developers/request-an-api-key.

Replace placeholders in <angle brackets> with your own values. Review what a server can access before you enable it.

Details

Version
0.2.0
Published
2026-04-07
Updated
2026-04-07
Namespace
io.github.shane-js
Source
shane-js/ghostfree

Similar developer tools servers