# vu1nz

> These figures are automated measurements with timestamps. They are not a review, rating, grade, or recommendation.

Vulnerability intel (vu1nz.com)

- Status: Up
- Checks passed: 11 of 22
- Uptime: Not measured
- Latency: 328 ms
- Tools: 12
- Last probe: 2026-11-12T11:46:33.631Z
- Publisher: profullstack.com (https://mcpheartbeat.com/p/com.profullstack)
- Endpoint: https://vu1nz.com/api/mcp
- Transport: streamable-http

## Tools

Showing 12.

- **check_license**: Look up the vu1nz subscription status for a GitHub org. Bootstraps a 14-day free trial on first call. Returns ok, status (trialing/active/past_due/cancelled/exe
- **create_webhook**: Add a webhook endpoint (public https URL). Returns the endpoint and its signing secret (shown once). Needs an API key.
- **delete_webhook**: Remove one of your webhook endpoints by id. Needs an API key.
- **get_blog_post**: Full content of a vu1nz blog post by slug.
- **list_advisories**: vu1nz-published security advisories with date, severity, and summary.
- **list_blog_posts**: All vu1nz blog posts: supply-chain analysis, release notes, security research. Returns slug, title, date, tags, summary, and URL.
- **list_checks**: The catalog of CI/CD security checks vu1nz runs, each mapped to a CWE. Use to explain to a user what vu1nz would catch on their PRs.
- **list_webhooks**: List your vu1nz webhook endpoints and the event types vu1nz emits (scan.completed, scan.failed). Needs an API key.
- **scan_repo**: Run vu1nz's 6 deterministic CI/CD security checks against any public GitHub repository's workflow files. Returns findings with severity, file, line, CWE, and re
- **test_webhook**: Send a webhook.test event to one of your endpoints now and report the result. Needs an API key.
- **threat_feed**: Recent malicious packages caught in the wild across npm, pip, cargo, rubygems. Sourced from OSV.dev with a curated fallback list (Shai-Hulud, Polyfill.io, ctx,
- **webhook_deliveries**: Recent webhook deliveries (status, attempts, last HTTP status), optionally for one endpoint. Needs an API key.

## Links

- HTML: https://mcpheartbeat.com/s/com.profullstack/vu1nz
- Markdown: https://mcpheartbeat.com/s/com.profullstack/vu1nz.md
- MCP: https://mcpheartbeat.com/mcp
- API: https://mcpheartbeat.com/api/v1/servers
- Tools API: https://mcpheartbeat.com/api/v1/tools
- Server API: https://mcpheartbeat.com/api/v1/health?server=com.profullstack%2Fvu1nz