Excession Labs: CVE intelligence and security research

Connect Remote server

claude mcp add --transport http site https://excessionlabs.ai/mcp

{
  "mcpServers": {
    "site": {
      "url": "https://excessionlabs.ai/mcp"
    }
  }
}

{
  "servers": {
    "site": {
      "type": "http",
      "url": "https://excessionlabs.ai/mcp"
    }
  }
}

Settings > Connectors > Add custom connector
URL: https://excessionlabs.ai/mcp

Tools 10 found in our last check

• search_site

  Search the public pages and research notes on excessionlabs.ai. Returns titles, URLs and one-line summaries.

• get_page

  Read one public page of excessionlabs.ai as Markdown. Use a path from search_site or llms.txt.

• how_to_contact

  Return the ways a person can contact Excession Labs: the request form, email, and the request_security_test tool for agents.

• request_security_test

  Send a request for a security test (web application, API, multi-tenant SaaS isolation or AI application) to Excession Labs on behalf of a person who asked for it. Needs an agent key (POST https://excessionlabs.ai/agent/auth, then Authorization: Bearer <key>). Excession Labs repl…

• cve_search

  Search the hosted Excession Labs CVE database. Choose recent modification, new publication, or known-exploitation priority. Software/version filters match source assertions; they do not evaluate whether an installation is affected.

• cve_get

  Read a CVE's descriptions, severity, affected software/version evidence, source references, KEV and EPSS. Large affected-software lists are paginated; inspect the returned cursor and completeness fields.

• cve_history

  Read normalized source revisions retained after hosted monitoring starts. Version claims can refer to shared affected_groups by group_id. Initial hosted observations establish a baseline; the initial snapshot is not a complete historical archive. Inspect returned coverage and pa…

• cve_status

  Read corpus counts, source coverage, collection errors, freshness and saved update checkpoints. A successful bounded query does not imply complete upstream coverage.

• cve_sources

  Read the hosted source catalog, attribution, update methods and coverage limits.

• cve_changes

  Read hosted changes after a saved sequence cursor. Process the page before resuming with next_after. This is a read-only feed; it does not create a notification subscription.

Details

More security servers See all

• BlackVeil DNS & Email Security Scanner

  DNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

• Forwardsmith buyer desk (read-only)

  Read-only desk for buyers and assistants: offer, prices, fit check, readiness scan, intake draft.

• MakeItSay

  Change the words in a screenshot or photo and keep the original font and layout.

• Kestrova Solidity Security Scan

  Free Slither scan of Solidity contracts for AI coding agents; optional paid report (1 USDC, x402).

• Paragon Boxing & BJJ Gear Advisor

  Read-only boxing and BJJ gear guidance, sizing, product comparison, rules and identity checks.

• Spurvik EU AI Act

  Live URL scan, AI Act risk check, 24-EU-language Art. 50 badge, HMAC receipts & approval gates.