# GhostFree MCP server

MCP server that scans your repo's dependencies for security vulnerabilities based on published CVEs.

## Links
- Registry page: https://www.getdrio.com/mcp/io-github-shane-js-ghostfree
- Repository: https://github.com/shane-js/ghostfree
- Website: https://github.com/shane-js/ghostfree#readme

## Install
- Command: `npx -y ghostfree`
- Auth: Auth required by registry metadata

## Setup notes
- Package: Npm ghostfree v0.2.0
- Package argument: --repo-path (required)
- Environment variable: GHOSTFREE_DIR
- Environment variable: GHOSTFREE_MIN_SEVERITY (default MEDIUM; choices CRITICAL, HIGH, MEDIUM, LOW)
- Environment variable: NVD_API_KEY (secret)
- The upstream registry signals required auth or secrets.

## Tools
Not captured

## Resources
Not captured

## Prompts
Not captured

## Metadata
- Owner: io.github.shane-js
- Version: 0.2.0
- Runtime: Npm
- Transports: STDIO
- License: Not captured
- Language: Not captured
- Stars: Not captured
- Updated: Apr 7, 2026
- Source: https://registry.modelcontextprotocol.io