Real-time Python package and vulnerability data for AI coding agents.
Maintain this server? Claim it
Call this server's tools from your browser. Nothing to install.
Requests go through mcptry because browsers can't call most MCP servers directly. Header values are sent to the server for that request only and are never stored or logged.
Tool list from our last check. Connect live to refresh it.
Check if a specific package version has known vulnerabilities. Requires an exact version specifier (e.g., 'requests==2.31.0').
The exact package name and version (e.g., "requests==2.31.0", "numpy==1.24.0").
This tool isn't marked read-only, so it may change something on the server or in an account you connected.
Check if a specific package version has known vulnerabilities. Requires an exact version specifier (e.g., 'requests==2.31.0').
| Argument | Type | Description |
|---|---|---|
| name* | string | The exact package name and version (e.g., "requests==2.31.0", "numpy==1.24.0"). |
{
"type": "object",
"title": "IsVulnerableArgs",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"name"
],
"properties": {
"name": {
"type": "string",
"description": "The exact package name and version (e.g., \"requests==2.31.0\", \"numpy==1.24.0\")."
}
}
}Look up a package by name and (optionally) version number to find which versions are available and/or have vulnerabilities.
| Argument | Type | Description |
|---|---|---|
| name* | string | The package name to look up (e.g., "requests", "numpy>=2.0", "flask==3.0.0"). Note that when an exact "==" version is specified, the `limit` and `retain_passing` parameters have no effect. |
| limit | integer | When the name is not an exact version, limit the number of recent versions to check. |
| cvss_filter | string | CVSS score filter: "all" to show all vulnerabilities, "max" to show only the maximum observed score, or a number (0.0-10.0) to filter by threshold |
| retain_passing | boolean | 'When the name is not an exact version, setting this to True will return refernces for all packages, include those with no vulnerabilities (default: false) |
{
"type": "object",
"title": "LookupArgs",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"name"
],
"properties": {
"name": {
"type": "string",
"description": "The package name to look up (e.g., \"requests\", \"numpy>=2.0\", \"flask==3.0.0\"). Note that when an exact \"==\" version is specified, the `limit` and `retain_passing` parameters have no effect."
},
"limit": {
"type": "integer",
"format": "uint",
"minimum": 0,
"nullable": true,
"description": "When the name is not an exact version, limit the number of recent versions to check."
},
"cvss_filter": {
"type": "string",
"default": null,
"nullable": true,
"description": "CVSS score filter: \"all\" to show all vulnerabilities, \"max\" to show only the\nmaximum observed score, or a number (0.0-10.0) to filter by threshold"
},
"retain_passing": {
"type": "boolean",
"nullable": true,
"description": "'When the name is not an exact version, setting this to True will return refernces for all packages, include those with no vulnerabilities (default: false)"
}
}
}Find the most recent version of a package that has no known vulnerabilities.
| Argument | Type | Description |
|---|---|---|
| name* | string | The package name to look up (e.g., "requests", "numpy", "flask"). |
{
"type": "object",
"title": "MostRecentNotVulnerableArgs",
"$schema": "https://json-schema.org/draft/2020-12/schema",
"required": [
"name"
],
"properties": {
"name": {
"type": "string",
"description": "The package name to look up (e.g., \"requests\", \"numpy\", \"flask\")."
}
}
}