P0: CVE, package and domain checks

Connect Remote server

claude mcp add --transport http cve-package-domain-security https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security

{
  "mcpServers": {
    "cve-package-domain-security": {
      "url": "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security"
    }
  }
}

{
  "servers": {
    "cve-package-domain-security": {
      "type": "http",
      "url": "https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security"
    }
  }
}

Settings > Connectors > Add custom connector
URL: https://x402-bazaar-rank.x402-bazaar-rank-worker.workers.dev/mcp/cve-package-domain-security

Tools 9 found in our last check

• vuln_cve

  Use when you need to triage a CVE: description, CVSS per publisher, dates, CWE, key references, affected products, CISA SSVC, FIRST EPSS with a 30-day series and CISA KEV status in one call. Returns the paid x402 request for your input (GET /vuln/cve, $0.005 per call; schema lin…

• vuln_kev_new

  Use when you track exploited vulnerabilities: CVEs CISA added to its Known Exploited Vulnerabilities catalog since a date (since=YYYY-MM-DD), newest first, with date added, due date, vendor, product. Returns the paid x402 request for your input (GET /vuln/kev/new, $0.003 per cal…

• package_risk

  Use when you need to vet a dependency before installing or shipping it: pass ecosystem (npm, PyPI, Go, crates.io, RubyGems, Maven, NuGet). Returns the paid x402 request for your input (GET /package/risk, $0.005 per call; schema linked). Call that URL with an x402 or MPP client t…

• software_eol

  Use when you need to know if a software version is still supported: pass product (python, nodejs, ubuntu, postgresql, ...) and version (3.8.10) for its release cycle, end-of-life date. Returns the paid x402 request for your input (GET /software/eol, $0.002 per call; schema linke…

• domain_report

  Use when you need one report on a domain: DNS records (A, AAAA, MX, NS, TXT, CAA) with SPF and DMARC parsed, RDAP registration for .com, .net and .org (registrar, dates, status, nameservers, DNSSEC). Returns the paid x402 request for your input (GET /domain/report, $0.005 per ca…

• domain_report_batch

  Use when you need to vet several domains at once (vendors, leads, lookalikes): up to 10 domains in one POST, each answered exactly like /domain/report. Returns the paid x402 request for your input (POST /domain/report/batch, $0.05 per call; schema linked). POST that JSON body to…

• ip_passport

  Use when you need to profile an IP address in one call: ASN, AS name and country of its announced range, whether it is a current Tor exit node, and whether it lies in a public cloud range. Returns the paid x402 request for your input (GET /ip/passport, $0.003 per call; schema li…

• check_infra

  Use when you need to check infrastructure in one call: any combination (at least one) of ip (ASN, Tor exit, cloud range), domain (status, TLS, robots), cve (CVSS, EPSS, CISA KEV). Returns the paid x402 request for your input (GET /check/infra, $0.015 per call; schema linked). Ca…

• site_snapshot

  Use when you need a health and content snapshot of your own website: HTTP status, final URL, TLS, server, robots.txt and sitemap, plus WordPress REST. Returns the paid x402 request for your input (GET /site/snapshot, $0.005 per call; schema linked). Call that URL with an x402 or…

Details

More security servers See all

• BlackVeil DNS & Email Security Scanner

  DNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.

• Forwardsmith buyer desk (read-only)

  Read-only desk for buyers and assistants: offer, prices, fit check, readiness scan, intake draft.

• MakeItSay

  Change the words in a screenshot or photo and keep the original font and layout.

• Kestrova Solidity Security Scan

  Free Slither scan of Solidity contracts for AI coding agents; optional paid report (1 USDC, x402).

• Paragon Boxing & BJJ Gear Advisor

  Read-only boxing and BJJ gear guidance, sizing, product comparison, rules and identity checks.

• Spurvik EU AI Act

  Live URL scan, AI Act risk check, 24-EU-language Art. 50 badge, HMAC receipts & approval gates.