VulX Watch

Name: VulX Watch
Author: vulx

Independent security review for AI-built apps. Watch a GitHub repo. Never a patch.

该来源不提供完整文件导出（国内平台多为平台内托管），仅存元数据与原链

接入信息

传输形态: http
鉴权方式: 鉴权未知
端点: https://watch--vulx.run.tools

鉴权方式未标注，请核对官方文档后再接入——不要直接使用以下片段

{
  "mcpServers": {
    "VulX Watch": {
      "url": "https://watch--vulx.run.tools"
    }
  }
}

能力清单

工具	说明
watch_repo	Put a GitHub repository under continuous VulX security watch: VulX reads the committed code for secrets, vulnerable or hallucinated dependencies and injection risks, then re-checks it on a schedule and emails the account owner when something needs attention. Call this when the user asks for a repo to be watched, monitored or security-checked. It starts a real scan against the user's weekly allowance, so do not call it speculatively or more than once for the same repository. Calling it again on a repository already being watched is not a no-op: it starts another scan and spends another of that allowance, which is also how a user asks for an immediate re-check after pushing a fix. It returns a plain-language status — never a patch, a diff or code to apply.
security_status	Read what VulX has already found in a GitHub repository under continuous security watch. VulX re-checks a watched repo a few times a week and re-reads the code when it changes; this returns the findings from its most recent completed review — what is currently open, when it last looked, and what it could not check. It answers only for the user's own repositories, and having nothing to report is never the same as an all-clear. Read-only: it costs nothing, starts no scan, and is safe to call whenever the user asks whether their app is safe, what is wrong with it, or whether anything changed. It never returns a patch or code to apply.
list_repos	List the GitHub repositories this VulX account has under continuous security watch, with when each was last reviewed. Call this when the user asks what is being watched, which repositories are connected, or before answering a question that needs to know which repository they mean. It answers only for the user's own account, takes no arguments, and is read-only: it starts no scan and costs nothing. It reports what is being watched, not whether anything is wrong — use security_status for findings.

纠错与举报（发现条目失效、署名有误或涉及侵权？）

提交举报 / 纠错

侵权举报经核验成立后，我们会即时下线该条目并删除已存的内容副本。