Summary
Two tools, and a deliberate two-step: titles first, then the report you actually want.
Search returns titles rather than full text, which keeps a broad query from flooding the context — you pick one and fetch it. That makes it usable during a review, where the question is usually whether this class of bug has been written up before.
What it is
A small server over Solodit's vulnerability reports: search by keyword, then fetch a report whole.
What you get
- search takes keywords and returns the matching report titles
- get-by-title returns the full content of one report, by its exact title
- Runs over HTTP at POST /mcp, so it can serve more than one client
Requirements
Nothing to sign up for. Start it with npx and the @lyuboslavlyubenov/solodit-mcp package, or run the published Docker image on port 3000; clients point at http://localhost:3000/mcp. A local build with pnpm is the third path.
Setup effort
One command — npx @lyuboslavlyubenov/solodit-mcp