Google Deps.dev Security Hacker Connector for AI agents.

4 live capabilities

Audit open-source dependencies and find hidden supply-chain vulnerabilities.

Live agent request Google Deps.dev Security Hacker / Connector

Waiting for input…

AI Agent

Why people use Google Deps.dev Security Hacker

Stop Supply Chain Attacks with Google Deps.dev Security Hacker

This Connector changes the game by giving your AI agent direct access to Google's Open Source Insights. Instead of you hunting for data, you just ask your agent to audit the library. It pulls the OSSF Scorecard, maps the transitive tree, and flags vulnerabilities instantly. You get a clear security posture in seconds, not hours.

What Vinkius changes

You get instant, deep-dive security insights on any open-source dependency without manually hunting for data.

Use it from Claude, ChatGPT, Cursor or another AI client you already have.

One account · 5,900+ Connectors

Real-world use case 01

Checking a new Python library for safety

A developer wants to use a new library.
Real-world use case 02

Auditing a repo for production readiness

A security lead provides a GitHub URL.
Real-world use case 03

Investigating a new CVE from a news blast

A team finds a CVE ID in the news.

Complete set · 4capabilities

The complete Google Deps.dev Security Hacker capability set.

These are the exact actions your AI can choose when you ask it to work with Google Deps.dev Security Hacker.

Capability set01 / 01

01—04

4 capabilities in this set.

Part of 4 available through Google Deps.dev Security Hacker.

01 Capability
Analyze dependency
The analyze_dependency capability checks an open-source package for security advisories and OSSF scores across major package managers. It gives you a clear picture of a library's health.
02 Capability
Analyze github repository
The analyze_github_repository capability performs a full security and governance audit on a GitHub repo using OSSF Scorecards. This helps you see if a project follows best practices.
03 Capability
Get transitive dependencies
The get_transitive_dependencies capability finds hidden security threats by mapping every nested dependency in a package's tree. It reveals what's lurking deep in your stack.
04 Capability
Get vulnerability details
The get_vulnerability_details capability pulls specific exploit details and affected versions for a given CVE or GHSA ID. You can use this to see exactly what needs patching.

Set up in minutes

One URL. Then ask Google Deps.dev Security Hacker to work.

Claude and ChatGPT only need the Connector URL. Copy it once, add it in settings, and use Google Deps.dev Security Hacker from the conversation.

Choose your client

Live preview

Advanced clients IDE · CLI

Claude · Web + desktop

Official guide ↗

Connector URL · ready to paste

Streamable HTTP

https://edge.vinkius.com/vk_preview_8l27TKQqvxDGA8IDc4bvKGYYUzioU5v5qb8XJydr/mcp

Step 01

Open Connectors

In Claude Web or Claude Desktop, open Settings and choose Connectors.
Step 02

Add the URL

Choose Add custom connector, name it Google Deps.dev Security Hacker, and paste the URL above.
Step 03

Turn it on in chat

Select +, open Connectors, and enable Google Deps.dev Security Hacker for the conversation.

ChatGPT · Web + desktop

Official guide ↗

Connector URL · ready to paste

Streamable HTTP

https://edge.vinkius.com/vk_preview_8l27TKQqvxDGA8IDc4bvKGYYUzioU5v5qb8XJydr/mcp

Step 01

Open MCP settings

On desktop, open Settings and MCP servers. On web, open your workspace app or connector settings.
Step 02

Add the URL

Choose Add server with Streamable HTTP, or create a custom MCP app, then paste the Google Deps.dev Security Hacker URL.
Step 03

Save and start

Save the connection and enable Google Deps.dev Security Hacker in your conversation. Desktop may ask you to restart once.

Cursor · IDE configuration

Official guide ↗

Advanced setup

{
  "mcpServers": {
    "google-depsdev-security-hacker": {
      "url": "https://edge.vinkius.com/vk_preview_8l27TKQqvxDGA8IDc4bvKGYYUzioU5v5qb8XJydr/mcp"
    }
  }
}

Step 01

Open MCP Settings

Press Cmd+Shift+P (macOS) or Ctrl+Shift+P (Windows/Linux) → search "MCP Settings"
Step 02

Add the server config

Paste the JSON configuration above into the mcp.json file that opens
Step 03

Save the file

Cursor will automatically detect the new Connector
Step 04

Start using Google Deps.dev Security Hacker

Open Agent mode in chat and ask: "Using Google Deps.dev Security Hacker, help me...". 4 tools available

VS Code Copilot · IDE configuration

Official guide ↗

Advanced setup

{
  "mcpServers": {
    "google-depsdev-security-hacker": {
      "url": "https://edge.vinkius.com/vk_preview_8l27TKQqvxDGA8IDc4bvKGYYUzioU5v5qb8XJydr/mcp"
    }
  }
}

Step 01

Create MCP config

Create a .vscode/mcp.json file in your project root
Step 02

Add the server config

Paste the JSON configuration above
Step 03

Enable Agent mode

Open GitHub Copilot Chat and switch to Agent mode using the dropdown
Step 04

Start using Google Deps.dev Security Hacker

Ask Copilot: "Using Google Deps.dev Security Hacker, help me...". 4 tools available

Windsurf · IDE configuration

Official guide ↗

Advanced setup

{
  "mcpServers": {
    "google-depsdev-security-hacker": {
      "url": "https://edge.vinkius.com/vk_preview_8l27TKQqvxDGA8IDc4bvKGYYUzioU5v5qb8XJydr/mcp"
    }
  }
}

Step 01

Open MCP Settings

Go to Settings → MCP Configuration or press Cmd+Shift+P and search "MCP"
Step 02

Add the server

Paste the JSON configuration above into mcp_config.json
Step 03

Save and reload

Windsurf will detect the new server automatically
Step 04

Start using Google Deps.dev Security Hacker

Open Cascade and ask: "Using Google Deps.dev Security Hacker, help me...". 4 tools available

Cline · IDE configuration

Official guide ↗

Advanced setup

{
  "mcpServers": {
    "google-depsdev-security-hacker": {
      "url": "https://edge.vinkius.com/vk_preview_8l27TKQqvxDGA8IDc4bvKGYYUzioU5v5qb8XJydr/mcp"
    }
  }
}

Step 01

Open Cline MCP Settings

Click the Connectors icon in the Cline sidebar panel
Step 02

Add remote server

Click "Add Connector" and paste the configuration above
Step 03

Enable the server

Toggle the server switch to ON
Step 04

Start using Google Deps.dev Security Hacker

Ask Cline: "Using Google Deps.dev Security Hacker, help me...". 4 tools available

Claude Code · Terminal command

Official guide ↗

Advanced setup

claude mcp add google-depsdev-security-hacker --transport http "https://edge.vinkius.com/vk_preview_8l27TKQqvxDGA8IDc4bvKGYYUzioU5v5qb8XJydr/mcp"

Step 01

Install Claude Code

Run npm install -g @anthropic-ai/claude-code if not already installed
Step 02

Add the Connector

Run the command above in your terminal
Step 03

Verify the connection

Run claude mcp to list connected servers, or type /mcp inside a session
Step 04

Start using Google Deps.dev Security Hacker

Ask Claude: "Using Google Deps.dev Security Hacker, show me...". 4 tools are ready

Where the request belongs

Work Google Deps.dev can move forward.

Built around the request

This is for the security engineer who's tired of manual audit spreadsheets and the developer who wants to ship code without worrying about supply chain attacks.

DevSecOps Engineer

Auditing hundreds of dependencies for production readiness on a Tuesday afternoon.

Security Researcher

Hunting for zero-days or unpatched vulnerabilities in popular libraries.

Software Architect

Evaluating the health and governance of open-source projects before adoption.

Build the capability set

Each Connector adds new actions and data without changing how you work.

Browse Connectors

01 10 capabilities

Socket.dev (Dependency Security)

Protect your software supply chain by scanning dependencies, checking package security scores, and monitoring threat feeds directly from your AI agent.

View Connector

02 10 capabilities

Black Duck (Synopsys)

Secure your open source supply chain via Black Duck. list projects, versions, and vulnerabilities directly from any AI agent.

View Connector

03 6 capabilities

FOSSA (License Compliance)

Manage license compliance and security vulnerabilities via FOSSA. list projects, inspect revisions, and track dependencies directly from your AI agent.

View Connector

04 9 capabilities

Snyk

Bring your Snyk code security ecosystem directly to your AI. Analyze vulnerabilities, project metadata, and scan issues right from your editor.

View Connector

05 16 capabilities

Aikido Security

Query security vulnerabilities via Aikido. list open issues, check repositories, monitor cloud assets, and track compliance directly from any AI agent.

View Connector

06 49 capabilities

GitGuardian

Automate secret detection and incident response via GitGuardian. manage secret incidents, deploy honeytokens, and audit workspace security directly from your AI agent.

View Connector

Bring your own AI

Change the model, client or framework. Keep Google Deps.dev connected.

Claude
ChatGPT
Gemini
Cursor
VS Code
Windsurf
ZCode
Cline
Zed
Continue
Kiro
Roo Code
Zencoder
Goose
Void
Augment Code
Amp
Qodo
Tabnine
Pieces
Sourcegraph Cody
JetBrains
Warp
Amazon Q
Antigravity
BoltAI
Raycast
Jan
LM Studio
AnythingLLM
Open WebUI
Msty
Cherry Studio
LibreChat
TypingMind
Chorus
5ire
n8n
LangChain
LlamaIndex
CrewAI
Vercel AI SDK

Before you connect

Questions about Google Deps.dev.

The practical details behind the request, access and result.

Can the Google Deps.dev Security Hacker check my npm packages?

Yes, it can audit npm packages for security advisories and OSSF scores. It helps you identify vulnerabilities before you include them in your project.

Does the Google Deps.dev Security Hacker support Python and Rust?

It supports several package managers including PyPI for Python and Cargo for Rust. You can get security data for a wide variety of open-source languages.

How does the Google Deps.dev Security Hacker find hidden threats?

It maps out the entire transitive dependency tree. This reveals vulnerabilities in nested libraries that you might not see by just looking at the top-level package.

Can I use Google Deps.dev Security Hacker to check a GitHub URL?

Yes, you can provide a GitHub URL and have your agent perform a full governance audit. It checks for things like code reviews and signed releases.

What kind of data does the Google Deps.dev Security Hacker pull?

It pulls real-time data from Google's Open Source Insights, including CVEs, GitHub Security Advisories, and OSSF Scorecards for various packages.

Does the Google Deps.dev Security Hacker require an API key?

No authentication is required to use this Connector. You can start auditing dependencies immediately once it's connected to your AI client.

Do I need an API key for this?

No! The Google deps.dev API is completely free and public. Just connect the Connector and your AI agent can start auditing immediately.

One connection away

Give your agent a direct line to Google Deps.dev.

Connect Google Deps.dev once. Keep it beside 5,900+ managed Connectors when the next task needs more.

Explore every Connector No credit card required · Free tier available

Stop Supply Chain Attacks with Google Deps.dev Security Hacker

You get instant, deep-dive security insights on any open-source dependency without manually hunting for data.

Checking a new Python library for safety

Auditing a repo for production readiness

Investigating a new CVE from a news blast

Analyze dependency

Analyze github repository

Get transitive dependencies

Get vulnerability details

Open Connectors

Add the URL

Turn it on in chat

Open MCP settings

Add the URL

Save and start

Open MCP Settings

Add the server config

Save the file

Start using Google Deps.dev Security Hacker

Create MCP config

Add the server config

Enable Agent mode

Start using Google Deps.dev Security Hacker

Open MCP Settings

Add the server

Save and reload

Start using Google Deps.dev Security Hacker

Open Cline MCP Settings

Add remote server

Enable the server

Start using Google Deps.dev Security Hacker

Install Claude Code

Add the Connector

Verify the connection

Start using Google Deps.dev Security Hacker

DevSecOps Engineer

Security Researcher

Software Architect

Socket.dev (Dependency Security)

Black Duck (Synopsys)

FOSSA (License Compliance)

Snyk

Aikido Security

GitGuardian

Give your agent a direct line to Google Deps.dev.