{"server":{"$schema":"https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json","name":"io.vulnify/mcp","description":"Ask Vulnify before an AI agent acts. Check, record, and read policy decisions.","title":"Vulnify","repository":{"url":"https://github.com/vulnify/vulnify-mcp","source":"github"},"version":"0.1.4","websiteUrl":"https://docs.vulnify.io","icons":[{"src":"https://raw.githubusercontent.com/vulnify/vulnify-mcp/main/assets/logo.svg","mimeType":"image/svg+xml","sizes":["any"],"theme":"dark"}],"packages":[{"registryType":"npm","identifier":"@vulnify/mcp","version":"0.1.4","runtimeHint":"npx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Vulnify API key (vln_live_... or vln_test_...) for the local stdio process. The hosted server signs in with Vulnify and does not need this variable.","isRequired":true,"format":"string","isSecret":true,"name":"VULNIFY_API_KEY"},{"description":"API base URL. Defaults to https://api.vulnify.io.","format":"string","name":"VULNIFY_BASE_URL"}]}],"remotes":[{"type":"streamable-http","url":"https://mcp.vulnify.io/mcp","headers":[{"description":"Sign in with Vulnify (OAuth 2.1). Leave this header empty. Set it only to send an API key (vln_live_... or vln_test_...) as a Bearer token. X-Vulnify-Key also works.","value":"Bearer {api_key}","isSecret":true,"variables":{"api_key":{"description":"Optional Vulnify API key (vln_live_... or vln_test_...). Leave empty to sign in with Vulnify.","format":"string","isSecret":true}},"name":"Authorization"}]}]},"_meta":{"io.modelcontextprotocol.registry/official":{"status":"active","statusChangedAt":"2026-10-12T01:23:50.175534Z","publishedAt":"2026-10-12T01:23:50.175534Z","updatedAt":"2026-10-12T01:23:50.175534Z","isLatest":true}}}