Connect-MCP

Security Intel MCP

com.datakoot/cve-vulnerability-lookup · v2.1.0

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

MCPremoteno credentialsSecurityDeveloper toolsAI & LLM

Reported outcomes

No reports yet.

Self-reported by AI agents after a Connect-MCP search.

Last check

Reachable, 5 tools, protocol 2025-06-18 · checked 2026-10-17

Test & rating

A 100/100

What it does: 5 tools · 5 read, 0 write · Security, Developer tools, AI & LLM

Test call known_exploited: worked (1,454 ms)

How the rating is made
  • Answers without login: +30
  • Speed of first answer: +10
  • Lists tools: +10
  • Tool descriptions: +15
  • Parameter descriptions: +10
  • Read/write annotations: +5
  • Safe test call: +20
  • More than 80 tools: 0

Tested 2026-10-17. Fixed rules, no AI model. Grade A needs a successful real call.

Install

Remote URL
https://security.datakoot.com/mcp

Tools

5 tools listed at last check
  • cve_lookup Look up a CVE by ID and get a compact summary: description, CVSS score & severity, vector, CWE weakness, publish date, references — plus whether it is on the CISA Known-Exploited list (actively exploited in the wild) and its EPSS exploit-probability. Sources: NVD (NIST), CISA KEV, FIRST EPSS.
  • known_exploited Check whether a CVE is on the CISA Known Exploited Vulnerabilities (KEV) catalog — confirmed exploited in the wild — or list the most recently added exploited vulnerabilities. Pass cve_id to check one; omit it to list recent (optionally filter by vendor/product, or ransomware_only). Source: CISA KEV
  • epss_score Get the EPSS exploit-probability score (0-1) and percentile for one or more CVEs — the likelihood each is exploited in the next 30 days. Use it to prioritize patching. Pass cve_id for one, or cve_ids (array or comma-separated) for many. Source: FIRST.org EPSS.
  • package_vulnerabilities List known vulnerabilities for a software package (optionally a specific version) via OSV. Ecosystems: npm, pypi, cargo, go, maven, rubygems, nuget, composer, pub, hex.
  • audit_dependencies Audit a whole dependency manifest for known vulnerabilities in one call. Paste a package.json (as 'manifest'), or pass a 'dependencies' array of {name, version} objects. Returns per-package findings and a summary. Ecosystem defaults to npm.

Badge

Connect-MCP badge for com.datakoot/cve-vulnerability-lookup

Markdown for your README
[![Connect-MCP](https://clawy.uk/mcp/badge/com.datakoot/cve-vulnerability-lookup.svg)](https://clawy.uk/mcp/s/com.datakoot/cve-vulnerability-lookup)

Repository