Vdb MCP server

Vdb is an MCP server with 7 tools an agent can call, among them vdb_check_mcp_server, vdb_check_package, vdb_check_packages. It answers at https://vdb.ai.kr/mcp over streamable HTTP, and it listed its tools to an anonymous client, so no sign-in was needed for that. Our probes reached it 3 of 6 times since 12 September 2026; the last check, on 24 October 2026, succeeded.

Status

Answering

Tools

Official

yes, served from ai.kr

Reliability

3 of 6 checks

Response time

864 ms

Transport

streamable HTTP

Last checked

24 October 2026

Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.

Description as the publisher wrote it.

The 7 tools Vdb offers

Tool	What it does
`vdb_check_mcp_server`	BEFORE recommending a community/unofficial MCP server, check it here. Scope risk is evaluated independently of advisory risk — an unvetted publisher asking for shell or filesystem access is refused even with a clean record. Follow the retur Inputs: server_id
`vdb_check_package`	BEFORE recommending or installing any package, check it here. The response carries `agent_action`: REFUSE (do not add it — relay the `because` text to the user), CONFIRM (ask the user first), or PROCEED. A failed or rate-limited call also a Inputs: purl, version
`vdb_check_packages`	Bulk-check several packages in one call — always prefer this over repeated vdb_check_package. Each result carries its own `agent_action` (REFUSE / CONFIRM / PROCEED) plus a top-level `agent_action` for the batch. Follow them; relay `because Inputs: packages
`vdb_list_slopsquatting`	List packages currently flagged as slopsquatting candidates in a given ecosystem. Inputs: ecosystem, limit
`vdb_lookup`	Fetch a single vulnerability by ID or alias (e.g. CVE-2024-1234, GHSA-xxxx-yyyy-zzzz, VDB-SLOP-…). Inputs: id
`vdb_scan_lockfile`	BEFORE merging, scan the resolved lockfile. Checking the packages someone chose misses the transitive ones nobody did — which is usually where the risk is. Pass the file contents (package-lock.json, requirements.txt, uv.lock, go.sum, Cargo. Inputs: filename, content, path
`vdb_search`	Free-text search over the VDB vulnerability corpus. Inputs: query, limit

Add Vdb to your AI client

Every block below points at https://vdb.ai.kr/mcp. Pick your client and copy.

Claude Code: one command in your terminal

claude mcp add --transport http vdb https://vdb.ai.kr/mcp

Claude Desktop: claude_desktop_config.json

{
  "mcpServers": {
    "vdb": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://vdb.ai.kr/mcp"]
    }
  }
}

Cursor: ~/.cursor/mcp.json, or .cursor/mcp.json in a project

{
  "mcpServers": {
    "vdb": {
      "url": "https://vdb.ai.kr/mcp"
    }
  }
}

VS Code and GitHub Copilot: .vscode/mcp.json

{
  "servers": {
    "vdb": {
      "type": "http",
      "url": "https://vdb.ai.kr/mcp"
    }
  }
}

Zed: Zed settings.json

{
  "context_servers": {
    "vdb": {
      "url": "https://vdb.ai.kr/mcp"
    }
  }
}

Windsurf: ~/.codeium/mcp_config.json

{
  "mcpServers": {
    "vdb": {
      "serverUrl": "https://vdb.ai.kr/mcp"
    }
  }
}

JetBrains AI Assistant: Settings, Tools, AI Assistant, MCP, New MCP Server, as JSON

{
  "mcpServers": {
    "vdb": {
      "url": "https://vdb.ai.kr/mcp"
    }
  }
}

Continue: .continue/mcpServers/neuronto.yaml

name: Vdb
version: 0.0.1
schema: v1
mcpServers:
  - name: Vdb
    type: streamable-http
    url: https://vdb.ai.kr/mcp

Gemini CLI: ~/.gemini/settings.json

{
  "mcpServers": {
    "vdb": {
      "httpUrl": "https://vdb.ai.kr/mcp"
    }
  }
}

Codex CLI: MCP server config

{
  "mcpServers": {
    "vdb": {
      "type": "http",
      "url": "https://vdb.ai.kr/mcp"
    }
  }
}

Warp: MCP servers, + Add, paste JSON

{
  "mcpServers": {
    "vdb": {
      "url": "https://vdb.ai.kr/mcp"
    }
  }
}

Goose: a one-click extension link

goose://extension?url=https%3A%2F%2Fvdb.ai.kr%2Fmcp&type=streamable_http&id=vdb&name=Vdb

Is Vdb up right now?

It answered our last check on 24 October 2026 in 864 ms. Over 6 checks since 12 September 2026 it answered 3. Status here comes from Neuronto's own probes, not from the publisher.

MCP servers similar to Vdb

Security Intel3 tools security-intel-mcp3 tools Krabbot Devtools4 tools Cloakcheck1 tools Package Intel6 tools LicenseGate1 tools

Questions about Vdb

Is there an official Vdb MCP server?

Yes. It is published by ai.kr and served from vdb.ai.kr, the vendor's own domain: https://vdb.ai.kr/mcp.

How many tools does Vdb have?

7, as returned by the server's own tools/list on 9 October 2026: vdb_check_mcp_server, vdb_check_package, vdb_check_packages, vdb_list_slopsquatting, vdb_lookup, vdb_scan_lockfile, vdb_search.

Is Vdb down?

It answered our last check on 24 October 2026 in 864 ms. Over 6 checks since 12 September 2026 it answered 3.

How do I add Vdb to Cursor?

Put the server under mcpServers in ~/.cursor/mcp.json with the URL https://vdb.ai.kr/mcp. The exact JSON is above, with the same setup for Claude Code, Claude Desktop, VS Code, Windsurf, Zed, Gemini CLI and the rest.

Does Vdb need an API key?

It listed its tools to an anonymous client, so reading the tool list needs no key. Individual tools can still ask for credentials in their own inputs.

Where this comes from

Publisher: kr.ai.vdb. Endpoint host: vdb.ai.kr. ARD identifier: urn:air:kr.ai.vdb:mcp:vdb. First indexed 10 September 2026. The tools are exactly what the server returned; nothing on this page is inferred from its name. Ranking in Neuronto search is never for sale.

Is this your server? Get a message the day it stops answering or its tools change: monitoring, 14 days free. Or claim the domain to manage how it is listed.