Debian Security Analyzer MCP Server
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"debsecan-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
> [!WARNING] > **This package has been renamed to [`debvulns`](https://pypi.org/project/debvulns/).** > `debsecan-mcp 0.1.5` is the final release under this name. Please update your dependency: > ``` > pip install debvulns > ``` # debsecan-mcp [](https://github.com/copyninja/debsecan-mcp/actions/workflows/ci.yml) [](https://codecov.io/gh/copyninja/debsecan-mcp) [](https://opencode.ai) A Model Context Protocol (MCP) server for Debian security vulnerability analysis. This server integrates with AI assistants (like Claude) to provide vulnerability scanning capabilities for Debian systems. ## Features - **List Vulnerabilities**: Scan all installed packages on your Debian system for known vulnerabilities - **CVE Research**: Get detailed information about specific CVEs including EPSS scores - **Automatic Suite Detection**: Automatically detects your Debian suite (bookworm, trixie, sid, etc.) - **EPSS Integration**: Enriches vulnerability data with Exploit Prediction Scoring System (EPSS) scores ## Installation ```bash pip install -e . ``` ## Usage ### Running the MCP Server ```bash debsecan-mcp ``` Or with a specific Debian suite: ```bash DEBSECAN_SUITE=bookworm debsecan-mcp ``` ### Command Line Options ```bash debsecan-mcp --help ``` Options: - `--transport {stdio,sse,streamable-http}` - Transport mode (default: stdio) - `--mount-path PATH` - Mount path for HTTP transports (default: /mcp) - `--host HOST` - Host to bind to for HTTP transport (default: 0.0.0.0) - `--port PORT` - Port to bind to for HTTP transport (default: 8000) ### Transport Modes #### STDIO Mode (Default) Used for direct integration with AI assistants like Claude Desktop or VSCode. ```bash debsecan-mcp --transport stdio ``` …
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.