reachvuln
Rank vulnerabilities by whether the vulnerable code path is reachable in your code.
What it does
reachvuln is an MCP server, a connector that lets an AI assistant use it as a tool. It is installed locally as a package and runs on your machine.
From the publisher's description, Electra Index matched it to one capability: security scanning. That makes it a candidate for tasks such as scan code for vulnerabilities or review pull requests.
Facts come from the Official MCP Registry, as declared by the publisher. Capabilities are matched automatically (low confidence). None of this is a test of the tool.
At a glance
How to connect
As declared in the Official MCP Registry · not tested by Electra IndexInstall packages
- NPM
@reneturcios/reachvulnv0.1.0 · runs locally (stdio) - DOCKER
ghcr.io/cloudcorprecords/reachvuln:0.1.0· runs locally (stdio)
MCP settings (Claude Desktop, Cursor and other MCP clients)
{
"mcpServers": {
"reachvuln": {
"command": "npx",
"args": [
"-y",
"@reneturcios/reachvuln"
]
}
}
}Tasks it helps with
Share of each task's required capabilities it covers| Scan code for vulnerabilities Security Scanning | 50% |
| Review pull requests Security Scanning | 50% |
Similar tools
Listed for the same task: scan code for vulnerabilities- diffpilotREMOTELOCALMCP server for PR code review, commit messages, changelogs, and secret detection
- MCP Code Review ServerREMOTELOCALCode review as an MCP server — structured reviews with OWASP security scanning
- StrixREMOTELOCALAI pentesting: run scans, triage vulnerabilities, review PRs, manage schedules and assets
- LazarettoREMOTELOCALFree lockfile malware check plus paid behavioral scan of packages, agent skills and MCP tools
- Radar Agent ToolsREMOTELOCALNo-key tools: web page to Markdown, WHOIS/DNS/SSL, Federal Register, clinical trials, odds, CVEs
- DraugrREMOTELOCALSecurity scanning for AI agents: SAST, SCA, secrets, IaC, DAST, ranked by real risk
Ready-made AI agents
- $20/mo · Prices & score →
- $18/mo · free plan · Prices & score →
- $24/mo · free plan · Prices & score →
- Tessl45$100/mo · free plan · Prices & score →
Facts & evidence
Each fact shows where it was seen and when.| Fact | Value | Evidence | Source | Last confirmed |
|---|---|---|---|---|
| Install package | @reneturcios/reachvuln, ghcr.io/cloudcorprecords/reachvuln:0.1.0 | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Package registries | npm, oci | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Local install (package) | yes | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Remote access (hosted) | no | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Repository | https://github.com/CloudCorpRecords/reachvuln | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Registry status | active | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| Version | 0.1.0 | DECLARED | SRC-001 Official MCP Registry | 1h ago |
| MCP server | yes | DECLARED | SRC-001 Official MCP Registry | 1h ago |
Change history
- NEW02 Nov 2026first seen in the index
Is this page accurate?
Flag it and our robot re-checks the official source. Reports never change a score.Is reachvuln still online?
Free alerts · no account▲ 0Do you publish reachvuln? Get it seen by people choosing a tool
For publishers · optionalLaunch Spotlight: 60 days of clearly labelled Sponsored visibility on the use-case pages where reachvuln already appears, plus the weekly Pulse. No click in 60 days? The next 60 days are free.
Sponsored placements never change a score or a rank.
Questions about reachvuln
How do I connect reachvuln?
Install the npm package @reneturcios/reachvuln. The exact settings are in "How to connect" above, as declared in the Official MCP Registry.
What can I use reachvuln for?
Based on its description, it is most relevant to: scan code for vulnerabilities, review pull requests.