Vinkius

Security Hacker MCP. Audit open-source code and hunt supply chain threats instantly.

Google Deps.dev Security Hacker turns your AI client into a specialized DevSecOps auditor. It instantly scans open-source packages and full GitHub repositories for deep supply-chain vulnerabilities, known CVEs, and governance gaps across npm, PyPI, Maven, and more. You get to hunt down hidden threats that basic scanners miss.

Security Hacker MCP is compatible with Claude Claude
Security Hacker MCP is compatible with ChatGPT ChatGPT
Security Hacker MCP is compatible with Cursor Cursor
Security Hacker MCP is compatible with Gemini Gemini
Security Hacker MCP is compatible with Windsurf Windsurf
Security Hacker MCP is compatible with VS Code VS Code
Security Hacker MCP is compatible with JetBrains JetBrains
Security Hacker MCP is compatible with Vercel Vercel
See Vinkius in Action

Give Claude and any AI agent real-world access

Audit single dependencies

Check any open-source package across major ecosystems (npm, PyPI, etc.) for known security flaws and adherence to governance standards.

Map hidden supply chain risks

Trace the full dependency tree of a package to find indirect or deep-level vulnerabilities that aren't immediately obvious.

Scan repository health

Run comprehensive security and governance audits on an entire GitHub repository, checking for best practices like code reviews and fuzzing.

Look up vulnerability details

Retrieve specific technical information about a given CVE or GitHub Security Advisory ID so you know exactly what's compromised.

Waiting for input…

AI Agent
Security Hacker

What AI agents can do with Google Deps.dev Security Hacker MCP with 4 Tools

These tools let your AI client perform specialized security checks on dependencies, entire repositories, and specific vulnerabilities across multiple programming languages.

Make your AI actually useful.

Add this MCP to Claude, Cursor, or Windsurf and your AI stops guessing. It gets real tools to look things up, take action, and handle the stuff you keep doing by hand.

Start using Google Deps.dev Security Hacker MCP

Analyze Dependency

Checks a specific open-source package across multiple systems (npm, pypi, etc.) for security flaws and governance scores.

Analyze Github Repository

Runs a full audit of a GitHub repository to assess its overall development security...

Get Transitive Dependencies

Maps the complete dependency tree for a package, finding hidden or indirect...

Get Vulnerability Details

Retrieves specific technical details about any known vulnerability using its CVE or...

Security and governance baked right in.

Pick your AI client below to get set up. Just create a Vinkius account, subscribe, and you're instantly up and running. We handle the entire backend infrastructure, delivering out-of-the-box support for HTTPS Streamable, SSE, and OAuth2—zero messy routing required.

Security Hacker MCP is compatible with Claude

Claude AI

1

Open Claude Settings

Go to claude.ai, click your profile icon, then navigate to Customize → Connectors.

2

Add Custom Connector

Click the "+" button and select Add custom connector. Paste your Vinkius endpoint URL:

https://edge.vinkius.com/[YOUR_TOKEN_HERE]/mcp

Replace [YOUR_TOKEN_HERE] with your token from cloud.vinkius.com. For OAuth-protected servers, expand Advanced settings to add credentials.

3

Start a conversation

Open a new chat. The Security Hacker integration is available immediately — no restart needed.

Choose How to Get Started

Build a custom MCP for your own tools, or connect a ready-made integration from our catalog.

Build Your Own

Turn any API into an MCP. Import a spec, define Agent Skills, or deploy with MCPFusion.

  • Import from OpenAPI, Swagger, or YAML specs
  • Create Agent Skills with progressive disclosure
  • Deploy to edge with MCPFusion framework
  • Built in DLP, auth, and compliance on each call
  • Real time usage dashboard and cost metering
  • Publish to catalog or keep private
Start building

Make Your AI Do More

Start with Google Deps.dev Security Hacker, then connect any of our 5,200+ other servers whenever your AI needs more. One click, no limits.

  • Use this MCP plus 5,200+ others, all in one place
  • Add new capabilities to your AI anytime you want
  • Connections are secured and governed automatically
  • Track usage and costs across all your servers
  • Works with Claude, ChatGPT, Cursor, and more
  • New servers added to the catalog weekly
Security Hacker MCP server cover

Independent Platform Disclaimer: Vinkius is an independent platform and is not affiliated with, endorsed by, sponsored by, verified by, or otherwise authorized by Google Deps.dev. All third-party trademarks, logos, and brand names are the property of their respective owners. Their use on this website is strictly for informational purposes to identify service compatibility and interoperability.

VINKIUS CLOUD

Cloud Hosted

Managed infra

V8 Isolated

Sandboxed per request

Zero-Trust Proxy

No stored credentials

DLP Enforced

Policy on each call

GDPR Compliant

EU data residency

Token Compression

~60% cost reduction

Your data is protected. See how we built it.

The headache of auditing open source libraries.

Today, checking one library means opening GitHub, finding its release history, cross-referencing a dozen vulnerability databases, and then running local dependency audits just to find the transitive dependencies. It's a massive copy/paste job that takes hours and relies on you remembering which tool checked what.

With this MCP, you simply ask your agent to audit the package or repository. It handles the complexity of tracking every single layer—from the top-level dependency all the way down into its deepest dependencies—and delivers a clear report in seconds.

Get full visibility with Google Deps.dev Security Hacker

You stop manually gathering scores and reports from disparate sources. You never have to worry about forgetting which specific package version caused a vulnerability; the MCP checks that context for you.

The difference is moving from reactive, painful investigation to proactive, instant assurance. Your AI agent gives you expert-level security analysis on demand.

What Security Hacker MCP does for your AI

This MCP connects your agent directly to Google's Open Source Insights (deps.dev). It lets you perform serious security audits on any open-source code, making your AI client a true DevSecOps auditor. Instead of running multiple command-line tools or cross-referencing documentation pages for vulnerabilities, your agent handles the entire process in chat.

Need to check if an old version of Express is safe? Just ask. Need to know every single dependency that package relies on, including the ones you never knew existed? The agent maps the whole tree. You can even paste a GitHub URL and get a full governance score based on industry best practices.

Vinkius hosts this MCP so your AI client can access all of these checks from one place. It's what developers actually need when they're worried about supply chain attacks.

Built · Hosted · Managed by Vinkius Security Hacker MCP - Audit Open Source Code
Server ID 019eb8c8-e09f-70bc-aaad-612d4d684aad
Vinkius Inspector
Compliance Grade F
Score 3.6/100
Vinkius Inspector Badge — Score 3.6/100

Frequently asked questions about Security Hacker MCP

How does Google Deps.dev Security Hacker check dependencies? +

It connects directly to the deps.dev API and supports major package managers like npm, PyPI, Cargo, Maven, and NuGet for comprehensive coverage.

Can I use analyze_github_repository with private repos? +

The MCP requires a publicly accessible GitHub URL to run the OSSF Scorecard audit. It analyzes public governance practices only.

Does get_transitive_dependencies find everything? +

It maps and scans the entire dependency graph, finding indirect components that could contain hidden security threats or unpatched vulnerabilities.

What is an OSSF Scorecard? +

The OSSF Scorecard is a metric used to rate how well a repository enforces development best practices like code review and branch protection.

Is this better than running local vulnerability scanners? +

Yes. While local tools are good, the Security Hacker MCP provides immediate, centralized analysis across multiple ecosystems without needing to install anything or manage complex environments yourself.