SafeDep Vet MCP

Traditional SCA tools drown you in CVE noise.

People who work with devsecops, security and policy as code and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Go.

VERIFIED ACTIVE

LAST COMMIT 2026-09-16 · ★ 1,105 · #38 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18

Apache-2.0 · Go servers · how we verify → /methodology

01 · Install SafeDep Vet MCP

before you install - you'll need

Set VET_DISABLE_TELEMETRY before connecting.

Docker

docker run -i --rm ghcr.io/safedep/vet:v1.19.1

Claude Desktop - add to config

{
  "mcpServers": {
    "safedep-vet": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "ghcr.io/safedep/vet:v1.19.1"
      ]
    }
  }
}

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as container (OCI image) - can be sandboxed away from your filesystem

license Apache-2.0 - declared in the repository

registry namespace io.github.safedep is GitHub-verified and matches the repo owner

03 · What SafeDep Vet MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v1.19.1 · 2026-09-16

Fix installation command for macOS & Linux · Merge pull request #774 from safedep/KunalSin9h-patch-2 · write postflight_steps in the Homebrew cask · write postflight_steps in the Homebrew cask

v1.19.0 · 2026-08-27

retry transient failures and time out cloud gRPC calls (#771) · add Neovim plugin scanner (lazy.nvim) (#766) · per-user endpoint scan script for MDM fleets (#772) · emit spec-compliant PURLs for distro ecosystems…

v1.18.2 · 2026-08-13

port vet to nx based release automation (#741) · compare hostname when matching npm trusted registry URLs (#760) · propagate GitHub organization scan errors (#757)

04 · Who maintains SafeDep Vet MCP

SafeDep Vet MCP is maintained by safedep. It's the only MCP server we track from this author; the repo dates to Dec 2022.

05 · Facts

repository: github.com/safedep/vet
website: https://safedep.io/
category: security - ranked #38 of 204 actively-maintained security servers as of 2026-09-18.
release cadence: 6 releases in the last 90 days (latest 2026-09-16)
registry: io.github.safedep/vet-mcp (active, first published 2025-11-26 · 26 versions)
packages: oci:ghcr.io/safedep/vet:v1.19.1

06 · SafeDep Vet MCP FAQ

What is SafeDep Vet MCP?

Traditional SCA tools drown you in CVE noise.

Is SafeDep Vet MCP still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-16 and it shipped 6 releases in the last 90 days. We re-verify nightly.

How do I install SafeDep Vet MCP?

Run `docker run -i --rm ghcr.io/safedep/vet:v1.19.1`. The README documents one environment variable (VET_DISABLE_TELEMETRY) to set first. Set VET_DISABLE_TELEMETRY before connecting. You can also paste the ready-made client config above.

07 · Alternatives to SafeDep Vet MCP

Alternatives to SafeDep Vet MCP

Maintained security servers if SafeDep Vet MCP isn't the fit.

Pairs well with

Servers that cover what SafeDep Vet MCP doesn't - only shown when the pairing reason fits the companion.

More security MCP servers · Code Sentinel · Sand Base · SAS Viya · Clearfront · Social GPT

More Go MCP servers · Samihalawa Whatsapp Go MCP · Sandbox API · Scaleway MCP server · Scrapfly MCP Server · Abnormal Security MCP · see all