Verify a vuln report's file/line/function claims against a real GitHub repo.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Verify a vulnerability report's concrete, checkable claims (file paths, `file.py:123` line citations, function names) against a real GitHub repo's current default-branch state. Does NOT judge whether the described vulnerability is real or exploitable -- it only checks whether the files/lines/functions cited actually exist, which is the exact 'AI slop' failure mode (hallucinated specifics) that makes up a real share of auto-generated vuln reports. A PLAUSIBLE verdict means the claims check out, not that the vulnerability is confirmed real.
A github.com/owner/name URL for the repo the report claims to be about
The vulnerability report text to check
This tool isn't marked read-only, so it may change something on the server or in an account you connected.
Verify a vulnerability report's concrete, checkable claims (file paths, `file.py:123` line citations, function names) against a real GitHub repo's current default-branch state. Does NOT judge whether the described vulnerability is real or exploitable -- it only checks whether the files/lines/functions cited actually exist, which is the exact 'AI slop' failure mode (hallucinated specifics) that makes up a real share of auto-generated vuln reports. A PLAUSIBLE verdict means the claims check out, not that the vulnerability is confirmed real.
| Argument | Type | Description |
|---|---|---|
| repo |
| string |
| A github.com/owner/name URL for the repo the report claims to be about |
| report* | string | The vulnerability report text to check |
{
"type": "object",
"required": [
"report",
"repo"
],
"properties": {
"repo": {
"type": "string",
"description": "A github.com/owner/name URL for the repo the report claims to be about"
},
"report": {
"type": "string",
"description": "The vulnerability report text to check"
}
}
}