Mcphub Nvim MCP Server
by ravitemerAn MCP client for Neovim that seamlessly integrates MCP servers into your editing workflow with an intuitive interface for managing, testing, and using MCP servers with your favorite chat plugins.
Mcphub Nvim is an open-source mcp server by ravitemer, written mainly in Lua, with 1,790 GitHub stars and the MIT license. Its code was last updated Jan 18, 2026.
Scan summary: scanned Nov 5, 2026 at commit 7cd5db3. No capabilities flagged by our checks. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
7cd5db3 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings.
Passed. This check ran and found nothing it flags.Static code scanpassPassed. This check ran and found nothing it flags.
Passed. This check ran and found nothing it flags.Secrets scanpassPassed. This check ran and found nothing it flags.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.Dependency audit62 known vulnerabilitieswarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Buildn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Boot & handshaken/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Network egressn/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Not applicable. This check does not apply to this kind of project, or it was not run in this scan.Reproducible (×3)n/aNot applicable. This check does not apply to this kind of project, or it was not run in this scan.
Findings (15)
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@vue/server-renderer@3.5.13: 1 known vulnerabilityGHSA-g2v6-rqmx-r4w6
doc/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dompurify@3.2.5: 22 known vulnerabilitiesGHSA-39q2-94rc-95cp, GHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4 +17 more
doc/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.lodash-es@4.17.21: 2 known vulnerabilitiesGHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
doc/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.nanoid@3.3.11: 3 known vulnerabilitiesGHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8, GHSA-xwg4-73v4-xw9w
doc/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.postcss@8.5.3: 4 known vulnerabilitiesGHSA-6g55-p6wh-862q, GHSA-fxqj-rqcc-2cmp, GHSA-qx2v-qp2m-jg93, GHSA-r28c-9q8g-f849
doc/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.preact@10.26.5: 1 known vulnerabilityGHSA-36hm-qxxp-pg3m
doc/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.rollup@4.40.1: 1 known vulnerabilityGHSA-mw96-cpmx-2vgc
doc/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 1 known vulnerabilityGHSA-68fv-2mgg-jv7q
doc/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@11.1.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
doc/package-lock.json - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.vite@5.4.18: 12 known vulnerabilitiesGHSA-4w7w-66w2-5vf9, GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-859w-5945-r5v3, GHSA-93m4-6634-74q7 +7 more
doc/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.21.5: 1 known vulnerabilityGHSA-67mh-4wv8-2f99
doc/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.katex@0.16.22: 1 known vulnerabilityGHSA-238p-pmpm-9mq7
doc/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.mdast-util-to-hast@13.2.0: 1 known vulnerabilityGHSA-4fh9-h7wg-q85m
doc/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.mermaid@11.6.0: 11 known vulnerabilitiesGHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6m6c-36f7-fhxh, GHSA-6x64-9x62-f2gx, GHSA-7rqq-prvp-x9jh +6 more
doc/package-lock.json - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Mcphub Nvim alternatives
View more →Similar mcp servers in Developer Tools, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Mcphub Nvim (this page) ravitemer | 1.8k | MIT | Jan 18, 2026 | Scanned, no flagged issues |
| MCP Use mcp-use | 11k | MIT | Oct 30, 2026 | Scanned, no flagged issues |
| MobileBuildMCP getsentry | 6.5k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Gemini Notebook MCP CLI jacob-bd | 6.4k | MIT | Oct 27, 2026 | Scanned, no flagged issues |
| Mcporter openclaw | 5.1k | MIT | Oct 27, 2026 | Scanned, no flagged issues |
| Flint Chart microsoft | 4.5k | MIT | Nov 1, 2026 | Scanned, no flagged issues |