vu1nz

com.profullstack/vu1nzVersion 1.0.0

Vulnerability intel (vu1nz.com)

Status

Responds398 msNov 14, 2026, 14:11 UTCAnswered our handshake without sign-in.

Registry data may be out of date

We could not refresh it, so this page shows the last copy.

Last checked: Nov 14, 2026, 14:11 UTC
Latency: 398 ms
Remotes responding: 1 of 1
Sign-in: No sign-in
Hosting: Hosted outside the EU (detected)
Registry data as of: Nov 14, 2026, 21:12 UTC

Data from the official MCP Registry, checked by run.zero. How we check

Connect

Streamable HTTP

https://vu1nz.com/api/mcpResponds398 msNov 14, 2026, 14:11 UTC

No sign-in

Claude Code

claude mcp add --transport http vu1nz https://vu1nz.com/api/mcp

Claude Desktop and claude.ai

1
2
3

Settings > Connectors > Add custom connector
Name: vu1nz
Remote MCP server URL: https://vu1nz.com/api/mcp

Cursor

{
  "mcpServers": {
    "vu1nz": {
      "url": "https://vu1nz.com/api/mcp"
    }
  }
}

VS Code

code --add-mcp '{"name":"vu1nz","type":"http","url":"https://vu1nz.com/api/mcp"}'

Built your own server? run.zero hosts MCP servers on European infrastructure.

Host your own MCP server on run.zero

Tools

12 tools

Tools of vu1nz
	Description		Read-only	Idempotent	Open world
`check_license`Look up the vu1nz subscription status for a GitHub org. Bootstraps a 14-day free trial on first call. Returns ok, status (trialing/active/past_due/cancelled/exempt), days remaining, license_key, and upgrade URL.	Look up the vu1nz subscription status for a GitHub org. Bootstraps a 14-day free trial on first call. Returns ok, status (trialing/active/past_due/cancelled/exempt), days remaining, license_key, and upgrade URL.	No	No	Yes	No
`create_webhook`Add a webhook endpoint (public https URL). Returns the endpoint and its signing secret (shown once). Needs an API key.	Add a webhook endpoint (public https URL). Returns the endpoint and its signing secret (shown once). Needs an API key.	No	No	Not declared	No
`delete_webhook`Remove one of your webhook endpoints by id. Needs an API key.	Remove one of your webhook endpoints by id. Needs an API key.	Yes	No	Yes	No
`get_blog_post`Full content of a vu1nz blog post by slug.	Full content of a vu1nz blog post by slug.	No	Yes	Yes	No
`list_advisories`vu1nz-published security advisories with date, severity, and summary.	vu1nz-published security advisories with date, severity, and summary.	No	Yes	Yes	No
`list_blog_posts`All vu1nz blog posts: supply-chain analysis, release notes, security research. Returns slug, title, date, tags, summary, and URL.	All vu1nz blog posts: supply-chain analysis, release notes, security research. Returns slug, title, date, tags, summary, and URL.	No	Yes	Yes	No
`list_checks`The catalog of CI/CD security checks vu1nz runs, each mapped to a CWE. Use to explain to a user what vu1nz would catch on their PRs.	The catalog of CI/CD security checks vu1nz runs, each mapped to a CWE. Use to explain to a user what vu1nz would catch on their PRs.	No	Yes	Yes	No
`list_webhooks`List your vu1nz webhook endpoints and the event types vu1nz emits (scan.completed, scan.failed). Needs an API key.	List your vu1nz webhook endpoints and the event types vu1nz emits (scan.completed, scan.failed). Needs an API key.	No	Yes	Yes	No
`scan_repo`Run vu1nz's 6 deterministic CI/CD security checks against any public GitHub repository's workflow files. Returns findings with severity, file, line, CWE, and recommendation.	Run vu1nz's 6 deterministic CI/CD security checks against any public GitHub repository's workflow files. Returns findings with severity, file, line, CWE, and recommendation.	No	Yes	Yes	Yes
`test_webhook`Send a webhook.test event to one of your endpoints now and report the result. Needs an API key.	Send a webhook.test event to one of your endpoints now and report the result. Needs an API key.	No	No	Not declared	Yes
`threat_feed`Recent malicious packages caught in the wild across npm, pip, cargo, rubygems. Sourced from OSV.dev with a curated fallback list (Shai-Hulud, Polyfill.io, ctx, ua-parser-js, etc.).	Recent malicious packages caught in the wild across npm, pip, cargo, rubygems. Sourced from OSV.dev with a curated fallback list (Shai-Hulud, Polyfill.io, ctx, ua-parser-js, etc.).	No	Yes	Yes	Yes
`webhook_deliveries`Recent webhook deliveries (status, attempts, last HTTP status), optionally for one endpoint. Needs an API key.	Recent webhook deliveries (status, attempts, last HTTP status), optionally for one endpoint. Needs an API key.	No	Yes	Yes	No

Details

Registry status: Active
Published: Nov 11, 2026
Updated: Nov 11, 2026
Website: https://vu1nz.com/⁠ (opens in a new tab)
Repository: Not given
Categories (suggested): Security Developer toolsSuggested categories are assigned automatically from the registry text and may be wrong. Verified operators can correct them.
GDPR: Not declared

Are you the operator? Claim this listing