--- bezeichner: "io.github.shane-js/ghostfree" art: "mcp_server" slug: "io-github-shane-js-ghostfree" paketkoordinate: "npm:ghostfree" status: "aktiv" homepage: "https://github.com/shane-js/ghostfree#readme" erhebungsstand: "2026-10-10T01:17:01.464Z" namensraum: "io.github.shane-js" registerseite: "https://tracevero.com/mcp/io-github-shane-js-ghostfree" abgerufen_am: "2026-10-11" zugangsdaten_erforderlich: false ausfuehrungsort: "lokal" dateisystem_pfadargument: true quelloffen_einsehbar: true einsatzgebiet: "sicherheit" roh_beschreibung: "MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs." version: "0.2.0" roh_umgebungsvariablen: "GHOSTFREE_DIR, GHOSTFREE_MIN_SEVERITY, NVD_API_KEY" roh_geheime_pflichtvariablen: "" roh_transportarten: "stdio" roh_pfadargumente: "--repo-path" roh_repository_url: "https://github.com/shane-js/ghostfree" roh_paketquellen: "npm" roh_geheime_pflichtkopfzeilen: "" roh_pfad_umgebungsvariablen: "GHOSTFREE_DIR" roh_remote_adressen: "" roh_remote_hosts: "" roh_statusmeldung: "" roh_veroeffentlicht_am: "2026-04-07" roh_aktualisiert_am: "2026-04-07" roh_schemafassung: "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json" roh_bereitstellungsform: "paket" roh_repository_quelle: "github" roh_repository_unterordner: "" roh_paketbezeichner: "ghostfree" roh_paketversionen: "0.2.0" roh_laufzeithinweise: "npx" roh_umgebungsformate: "filepath, string" roh_umgebungsbeschreibungen: "GHOSTFREE_DIR=Override the directory where GhostFree stores its data files (accepted-risks.yml, config.yml). Defaults to .ghostfree/ in the scanned repository root. · GHOSTFREE_MIN_SEVERITY=Minimum CVE severity level to surface. One of: CRITICAL, HIGH, MEDIUM (default), LOW. · NVD_API_KEY=Optional NVD API key for higher rate limits when enriching CVE details. Free to request at https://nvd.nist.gov/developers/request-an-api-key." roh_symbolformate: "image/png" roh_verbindungswege: "{\"packages\":[{\"registryType\":\"npm\",\"identifier\":\"ghostfree\",\"version\":\"0.2.0\",\"runtimeHint\":\"npx\",\"transport\":\"stdio\",\"environment\":[{\"name\":\"GHOSTFREE_DIR\",\"description\":\"Override the directory where GhostFree stores its data files (accepted-risks.yml, config.yml). Defaults to .ghostfree/ in the scanned repository root.\",\"format\":\"filepath\",\"required\":false,\"secret\":false},{\"name\":\"GHOSTFREE_MIN_SEVERITY\",\"description\":\"Minimum CVE severity level to surface. One of: CRITICAL, HIGH, MEDIUM (default), LOW.\",\"format\":\"string\",\"required\":false,\"secret\":false},{\"name\":\"NVD_API_KEY\",\"description\":\"Optional NVD API key for higher rate limits when enriching CVE details. Free to request at https://nvd.nist.gov/developers/request-an-api-key.\",\"format\":\"string\",\"required\":false,\"secret\":true}],\"additional_arguments_declared\":true}],\"remotes\":[]}" --- # GhostFree ## Measured values | Property | Value | Source | Collected on | Level of trust | Raw declaration | | --- | --- | --- | --- | --- | --- | | Required secrets declared | false | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_geheime_pflichtvariablen: ; roh_geheime_pflichtkopfzeilen: | | Execution location | lokal | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_transportarten: stdio | | Path argument present | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_pfadargumente: --repo-path; roh_pfad_umgebungsvariablen: GHOSTFREE_DIR | | Repository URL listed | true | MCP-Register | 2026-08-06T13:57:41.838Z | abgeleitet | roh_repository_url: https://github.com/shane-js/ghostfree | | Field of use, derived from the vendor description | sicherheit | MCP-Register | 2026-08-26T16:45:01.514Z | abgeleitet | roh_beschreibung: MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs. | | Description (raw) | MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs. | MCP-Register | 2026-08-26T16:45:01.514Z | selbstauskunft | | | Declared version | 0.2.0 | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Environment variables (raw) | GHOSTFREE_DIR, GHOSTFREE_MIN_SEVERITY, NVD_API_KEY | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret variables (raw) | | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Transports (raw) | stdio | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Path arguments (raw) | --repo-path | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Repository (raw) | https://github.com/shane-js/ghostfree | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Package registries (raw) | npm | MCP-Register | 2026-08-06T13:57:41.838Z | selbstauskunft | | | Required secret headers (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Path environment variables (raw) | GHOSTFREE_DIR | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote URLs (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Remote hosts (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Registry status message (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | First listed in the registry (raw) | 2026-04-07 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Last changed in the registry (raw) | 2026-04-07 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Schema version of the raw record (raw) | https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Delivery form (raw) | paket | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository platform (raw) | github | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Repository subfolder (raw) | | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Package identifiers (raw) | ghostfree | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Package versions (raw) | 0.2.0 | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Runtime hints (raw) | npx | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable formats (raw) | filepath, string | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Environment variable descriptions (raw) | GHOSTFREE_DIR=Override the directory where GhostFree stores its data files (accepted-risks.yml, config.yml). Defaults to .ghostfree/ in the scanned repository root. · GHOSTFREE_MIN_SEVERITY=Minimum CVE severity level to surface. One of: CRITICAL, HIGH, MEDIUM (default), LOW. · NVD_API_KEY=Optional NVD API key for higher rate limits when enriching CVE details. Free to request at https://nvd.nist.gov/developers/request-an-api-key. | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Icon formats (raw) | image/png | MCP-Register | 2026-08-16T01:17:01.420Z | selbstauskunft | | | Connection paths (source structure) | {"packages":[{"registryType":"npm","identifier":"ghostfree","version":"0.2.0","runtimeHint":"npx","transport":"stdio","environment":[{"name":"GHOSTFREE_DIR","description":"Override the directory where GhostFree stores its data files (accepted-risks.yml, config.yml). Defaults to .ghostfree/ in the scanned repository root.","format":"filepath","required":false,"secret":false},{"name":"GHOSTFREE_MIN_SEVERITY","description":"Minimum CVE severity level to surface. One of: CRITICAL, HIGH, MEDIUM (default), LOW.","format":"string","required":false,"secret":false},{"name":"NVD_API_KEY","description":"Optional NVD API key for higher rate limits when enriching CVE details. Free to request at https://nvd.nist.gov/developers/request-an-api-key.","format":"string","required":false,"secret":true}],"additional_arguments_declared":true}],"remotes":[]} | MCP-Register | 2026-09-08T01:17:01.649Z | selbstauskunft | | ## Links - Namespace: [[namensraum/io-github-shane-js|io.github.shane-js]] --- - Registry page: - Retrieved on: 2026-10-11