胎儿MCP
工具：
most_recent_not_vulnerable：查找没有已知漏洞的包的最新版本is_vulnerable：检查特定固定版本是否已知CVElookup：查找任何包或说明符的可用版本及其漏洞
安装
Fetter MCP服务器使用HTTP传输，不需要本地安装。只需在MCP客户端注册远程URL。
克劳德代码
claude mcp add --transport http fetter https://mcp.fetter.io/mcp法典
codex mcp add fetter --url https://mcp.fetter.io/mcp其他MCP客户端
对于任何其他兼容MCP的客户端，请使用HTTP传输提供以下远程服务器URL：
https://mcp.fetter.io/mcp代理使用
安装后，Fetter MCP工具在编码会话期间可供您的AI代理使用。代理可以在添加或审核依赖关系时自动调用它们；提示中不需要显式的工具调用。
示例提示
- “将请求的最新安全版本添加到requirements.txt”
- “我当前的依赖关系中是否存在任何已知的漏洞？”
- “没有CVE的枕头的最新版本是什么？”
- “在固定加密之前，请检查42.0.5是否易受攻击”
代理根据上下文选择合适的工具：
- 添加新包：
most_recent_not_vulnerable查找安全版本 - 正在验证特定的固定版本：
is_vulnerable寻求明确的答案 - 审核现有说明符：
lookup查看受影响的版本
most_recent_not_vulnerable
查找没有已知漏洞的包的最新版本。只提供包名称，服务器将搜索最新版本以获取安全版本。在将依赖关系固定到最新的干净版本时很有用。
参数
package_name--仅包名（无版本说明符），例如。"requests"
示例请求
{
"jsonrpc": "2.0",
"method": "tools/call",
"id": 2,
"params": {
"name": "most_recent_not_vulnerable",
"arguments": {
"name": "cryptography"
}
}
}示例响应：
{
"jsonrpc": "2.0",
"id": 2,
"result": {
"content": [],
"structuredContent": {
"package": "cryptography",
"version": "46.0.5",
"vulnerabilities": [],
"vulnerable": false
},
"isError": false
}
}is_vulnerable
检查特定软件包版本是否存在已知漏洞。需要精确的版本说明符。返回漏洞ID、摘要、CVSS评分、严重性评级和参考URL。
参数
dep_spec--精确版本说明符，例如。"requests==2.31.0"
示例请求
{
"jsonrpc": "2.0",
"method": "tools/call",
"id": 2,
"params": {
"name": "is_vulnerable",
"arguments": {
"name": "requests==2.19.1"
}
}
}示例响应：
{
"jsonrpc": "2.0",
"id": 2,
"result": {
"content": [],
"structuredContent": {
"package": "requests",
"version": "2.19.1",
"vulnerabilities": [
{
"cvss_score": 5.3,
"id": "GHSA-9hjg-9r4m-mvj7",
"severity": "(Medium):",
"summary": "Requests vulnerable to .netrc credentials leak via malicious URLs",
"url": "https://osv.dev/vulnerability/GHSA-9hjg-9r4m-mvj7"
},
{
"cvss_score": 5.6,
"id": "GHSA-9wx4-h78v-vm56",
"severity": "(Medium):",
"summary": "Requests Session object does not verify requests after making first request with verify=False",
"url": "https://osv.dev/vulnerability/GHSA-9wx4-h78v-vm56"
},
{
"cvss_score": 6.1,
"id": "GHSA-j8r2-6x86-q33q",
"severity": "(Medium):",
"summary": "Unintended leak of Proxy-Authorization header in requests",
"url": "https://osv.dev/vulnerability/GHSA-j8r2-6x86-q33q"
},
{
"cvss_score": 7.5,
"id": "GHSA-x84v-xcm2-53pg",
"severity": "(High):",
"summary": "Insufficiently Protected Credentials in Requests",
"url": "https://osv.dev/vulnerability/GHSA-x84v-xcm2-53pg"
},
{
"cvss_score": null,
"id": "PYSEC-2018-28",
"severity": null,
"summary": "",
"url": "https://osv.dev/vulnerability/PYSEC-2018-28"
},
{
"cvss_score": null,
"id": "PYSEC-2023-74",
"severity": null,
"summary": "",
"url": "https://osv.dev/vulnerability/PYSEC-2023-74"
}
],
"vulnerable": true
},
"isError": false
}
}lookup
按名称和可选版本说明符查找包，以查找可用的版本以及它们是否存在已知漏洞。支持以下说明符 "requests", "numpy>=2.0"，或 "flask==3.0.0".
参数
dep_specs--包名称或版本说明符cvss_threshold--过滤到此CVSS分数或以上的漏洞（0-10）max_observed_score--仅返回每个版本的最高CVSS分数，而不是所有单个漏洞count--限制检查的最新版本的数量retain_passing--在结果中包含没有已知漏洞的版本
示例请求
{
"jsonrpc": "2.0",
"method": "tools/call",
"id": 2,
"params": {
"name": "lookup",
"arguments": {
"name": "requests>=2.32.0",
"retain_passing": true
}
}
}示例响应：
{
"jsonrpc": "2.0",
"id": 2,
"result": {
"content": [],
"structuredContent": {
"package": "requests",
"versions": [
{
"version": "2.32.0",
"vulnerabilities": [
{
"cvss_score": 5.3,
"id": "GHSA-9hjg-9r4m-mvj7",
"severity": "(Medium):",
"summary": "Requests vulnerable to .netrc credentials leak via malicious URLs",
"url": "https://osv.dev/vulnerability/GHSA-9hjg-9r4m-mvj7"
}
],
"vulnerable": true
},
{
"version": "2.32.1",
"vulnerabilities": [
{
"cvss_score": 5.3,
"id": "GHSA-9hjg-9r4m-mvj7",
"severity": "(Medium):",
"summary": "Requests vulnerable to .netrc credentials leak via malicious URLs",
"url": "https://osv.dev/vulnerability/GHSA-9hjg-9r4m-mvj7"
}
],
"vulnerable": true
},
{
"version": "2.32.2",
"vulnerabilities": [
{
"cvss_score": 5.3,
"id": "GHSA-9hjg-9r4m-mvj7",
"severity": "(Medium):",
"summary": "Requests vulnerable to .netrc credentials leak via malicious URLs",
"url": "https://osv.dev/vulnerability/GHSA-9hjg-9r4m-mvj7"
}
],
"vulnerable": true
},
{
"version": "2.32.3",
"vulnerabilities": [
{
"cvss_score": 5.3,
"id": "GHSA-9hjg-9r4m-mvj7",
"severity": "(Medium):",
"summary": "Requests vulnerable to .netrc credentials leak via malicious URLs",
"url": "https://osv.dev/vulnerability/GHSA-9hjg-9r4m-mvj7"
}
],
"vulnerable": true
},
{
"version": "2.32.4",
"vulnerabilities": [],
"vulnerable": false
},
{
"version": "2.32.5",
"vulnerabilities": [],
"vulnerable": false
}
]
},
"isError": false
}
}