NestDaddy

Security Intel MCP

com.datakoot/cve-vulnerability-lookup · v2.1.0

CVE lookups (NVD) and dependency-manifest audits (OSV) for AI agents. No API keys.

Connect Remote server

Terminal
claude mcp add --transport http cve-vulnerability-lookup https://security.datakoot.com/mcp
~/.cursor/mcp.json
{
  "mcpServers": {
    "cve-vulnerability-lookup": {
      "url": "https://security.datakoot.com/mcp"
    }
  }
}
.vscode/mcp.json
{
  "servers": {
    "cve-vulnerability-lookup": {
      "type": "http",
      "url": "https://security.datakoot.com/mcp"
    }
  }
}
Claude Desktop
Settings > Connectors > Add custom connector
URL: https://security.datakoot.com/mcp

Tools 5 found in our last check

  • cve_lookup

    Look up a CVE by ID and get a compact summary: description, CVSS score & severity, vector, CWE weakness, publish date, references — plus whether it is on the CISA Known-Exploited list (actively exploited in the wild) and its EPSS exploit-probability. Sources: NVD (NIST), CISA KE…

  • known_exploited

    Check whether a CVE is on the CISA Known Exploited Vulnerabilities (KEV) catalog — confirmed exploited in the wild — or list the most recently added exploited vulnerabilities. Pass cve_id to check one; omit it to list recent (optionally filter by vendor/product, or ransomware_on…

  • epss_score

    Get the EPSS exploit-probability score (0-1) and percentile for one or more CVEs — the likelihood each is exploited in the next 30 days. Use it to prioritize patching. Pass cve_id for one, or cve_ids (array or comma-separated) for many. Source: FIRST.org EPSS.

  • package_vulnerabilities

    List known vulnerabilities for a software package (optionally a specific version) via OSV. Ecosystems: npm, pypi, cargo, go, maven, rubygems, nuget, composer, pub, hex.

  • audit_dependencies

    Audit a whole dependency manifest for known vulnerabilities in one call. Paste a package.json (as 'manifest'), or pass a 'dependencies' array of {name, version} objects. Returns per-package findings and a summary. Ecosystem defaults to npm.

Details

Endpointhttps://security.datakoot.com/mcp (Streamable HTTP)
First published2 Sep 2026
Last updated2 Sep 2026
Registry namecom.datakoot/cve-vulnerability-lookup

More security servers See all

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.