kr.ai.vdb/vdb · v0.2.6 · developer-tools
kr.ai.vdb/vdb is healthy: it completed an MCP handshake in 3206 ms and exposes 7 tools.
Check packages for CVEs, slopsquatting, and CISA KEV before your AI agent installs them.
Endpoint: https://vdb.ai.kr/mcp (streamable-http)
Repository · Website · JSON · Add to my inventory
| Users (last 30 days) | 0 |
| Handshake | Healthy |
| Auth needed | None |
| Tool count | 7 |
| Latency | 3206 ms |
| Last checked (UTC) | 2026-10-15T12:25:12.967Z |
| Checked (UTC) | Status | Latency | Error |
|---|---|---|---|
| 2026-10-15T12:25:12.967Z | Healthy | 3206 |
vdb_check_package | BEFORE recommending or installing any package, check it here. The response carries `agent_action`: REFUSE (do not add it — relay the `because` text to the user), CONFIRM (ask the user first), or PROCEED. A failed or rate-limited call also answers REFUSE; never proceed unchecked. Also returns the und |
vdb_check_packages | Bulk-check several packages in one call — always prefer this over repeated vdb_check_package. Each result carries its own `agent_action` (REFUSE / CONFIRM / PROCEED) plus a top-level `agent_action` for the batch. Follow them; relay `because` when refusing. Send names EXACTLY as written — do not corr |
vdb_scan_lockfile | BEFORE merging, scan the resolved lockfile. Checking the packages someone chose misses the transitive ones nobody did — which is usually where the risk is. Pass the file contents (package-lock.json, requirements.txt, uv.lock, go.sum, Cargo.lock, a CycloneDX SBOM, …). Returns `agent_action`: REFUSE m |
vdb_lookup | Fetch a single vulnerability by ID or alias (e.g. CVE-2024-1234, GHSA-xxxx-yyyy-zzzz, VDB-SLOP-…). |
vdb_search | Free-text search over the VDB vulnerability corpus. |
vdb_check_mcp_server | BEFORE recommending a community/unofficial MCP server, check it here. Scope risk is evaluated independently of advisory risk — an unvetted publisher asking for shell or filesystem access is refused even with a clean record. Follow the returned `agent_action`. |
vdb_list_slopsquatting | List packages currently flagged as slopsquatting candidates in a given ecosystem. |