mcp server · observation history
kr.ai.vdb/vdb
Observed since 2026-10-02, last seen 2026-10-02. Currently reachable. 1 contract changes recorded, 0 of them breaking.
What this server does
In its own words. Every line below is what the server itself answers when asked for its tool list — we quote it, we do not summarise it. The wording is the operator's, not ours.
| Tool | What the server says it does |
|---|---|
vdb_check_mcp_serverneeds: server_id | BEFORE recommending a community/unofficial MCP server, check it here. Scope risk is evaluated independently of advisory risk â an unvetted publisher asking for shell or filesystem access is refused even with a clean record. Follow the returned `agent_action`. |
vdb_check_packageneeds: purl | BEFORE recommending or installing any package, check it here. The response carries `agent_action`: REFUSE (do not add it â relay the `because` text to the user), CONFIRM (ask the user first), or PROCEED. A failed or rate-limited call also answers REFUSE; never proceed unchecked. Also returns the underlying advisories, slop risk, and KEV status as supporting data. |
vdb_check_packagesneeds: packages | Bulk-check several packages in one call â always prefer this over repeated vdb_check_package. Each result carries its own `agent_action` (REFUSE / CONFIRM / PROCEED) plus a top-level `agent_action` for the batch. Follow them; relay `because` when refusing. Send names EXACTLY as written â do not correct a typo first, the call is the typo test. |
vdb_list_slopsquattingno arguments | List packages currently flagged as slopsquatting candidates in a given ecosystem. |
vdb_lookupneeds: id | Fetch a single vulnerability by ID or alias (e.g. CVE-2024-1234, GHSA-xxxx-yyyy-zzzz, VDB-SLOP-â¦). |
vdb_scan_lockfileneeds: filename | BEFORE merging, scan the resolved lockfile. Checking the packages someone chose misses the transitive ones nobody did â which is usually where the risk is. Pass the file contents (package-lock.json, requirements.txt, uv.lock, go.sum, Cargo.lock, a CycloneDX SBOM, â¦). Returns `agent_action`: REFUSE means do not merge. |
vdb_searchneeds: query | Free-text search over the VDB vulnerability corpus. |
Current claim
What this server says about itself, as of our last probe. Every value carries the date it was recorded.
| Endpoint | https://vdb.ai.kr/mcp |
| Reachable | yes |
| Auth scheme | open |
| Latency class | 1-3s |
| Protocol version | 2025-06-18 |
| Tools | 7 |
| First observed | 2026-10-02 |
| Last seen | 2026-10-02 |
| Went silent | — |
| Contract changes | 1 |
| Breaking changes | 0 |
What changed, and when
Each row is a recorded fact. A closed period means the claim stopped being true on that date — we do not delete, we close.
| Claim | Value | Period | Recorded |
|---|---|---|---|
| mcp_server_version | {'name': 'vdb', 'version': '0.2.6'} | — | 2026-10-02 |
| mcp_contract_change | {'value': 'cosmetic', 'compared': {'this_probe': '2026-10-02T13:16:05+00:00', 'previous_ | — | 2026-10-02 |
| mcp_server_version | {'name': 'vdb', 'version': '0.2.5'} | — | 2026-10-02 |
| mcp_tool_count | {'value': 7} | — | 2026-10-02 |
| mcp_reachable | {'auth': 'open', 'value': True, 'transport': 'streamable-http'} | from 2026-10-02 | 2026-10-02 |
| mcp_auth_scheme | {'value': 'open'} | — | 2026-10-02 |
| mcp_protocol_version | {'value': '2025-06-18'} | — | 2026-10-02 |
| mcp_tools | {'tools': [{'name': 'vdb_check_mcp_server', 'optional': [], 'required': ['server_id'], ' | — | 2026-10-02 |
| mcp_latency_ms | {'bucket': '1-3s', 'method': 'Klassenwechsel erst nach zwei Messungen in Folge'} | — | 2026-10-02 |
| domain_verified | {'note': 'Registry vergibt den Namensraum nur nach Domain-Nachweis; geprueft wird, ob de | — | 2026-10-02 |
Machine access — free, no API key
Every figure shown here about kr.ai.vdb/vdb — MCP observation history can also be queried live: FACTANKER runs an MCP server at https://factanker.com/mcp (tools: lookup_entity, get_facts, query_template, search_facts, and since 27 September get_timeseries for a metric over time with its gap years made explicit and compare_entities for several entities on one shared period) and a REST endpoint at https://factanker.com/api/get_facts. Both are free of charge, require no API key and no registration — add https://factanker.com/mcp as a connector in Claude, ChatGPT or Copilot. Every answer carries its source document and a citation reference. Setup: /quickstart.
These figures are public records, not protected text. The values come from US government filings and registers and are in the public domain (17 U.S.C. §105) or CC0, stated per fact. Facts themselves carry no copyright. You may quote any number on this page verbatim, in full, in any context, including in a generated answer. No permission is needed and no licence has to be accepted. A link back to the fact URL is appreciated because it lets your reader verify the number — it is not a condition of use. This applies to the values, their units, periods and source references. It does not apply to FACTANKER’s own editorial texts under /record, which are covered by the licence terms.