Provides real-time Python package and vulnerability data to AI coding agents for informed dependency decisions.
Sponsored
About
Fetter offers a remote Model Context Protocol (MCP) server that empowers AI coding agents with real-time access to critical Python package vulnerability information. Built on the `fetter-rs` framework, it meticulously queries PyPI and OSV databases to surface known CVEs, CVSS scores, and identify safe versions. This invaluable data allows AI agents to proactively make secure and informed dependency choices as they write and manage code.
Key Features
Finds the most recent non-vulnerable version of a package (`most_recent_not_vulnerable`)
Surfaces CVEs, CVSS scores, and safe version recommendations
Provides real-time vulnerability data from PyPI and OSV
Looks up package versions, availability, and associated vulnerabilities (`lookup`)
Checks if a specific package version has known vulnerabilities (`is_vulnerable`)
1 GitHub stars
Use Cases
Identifying the latest safe version when adding new Python package dependencies
Validating specific pinned package versions for known vulnerabilities before deployment
Auditing existing project dependencies for security risks and recommended upgrades
