Confirmed vulnerabilities and exposure for IPs, domains and software versions (NVD, CISA KEV, EPSS)
Connect Runs on your machine
claude mcp add vulnerability-exposure-mcp -e SHODAN_API_KEY=<SHODAN_API_KEY> -e VIRUSTOTAL_API_KEY=<VIRUSTOTAL_API_KEY> -e ABUSEIPDB_API_KEY=<ABUSEIPDB_API_KEY> -e NVD_API_KEY=<NVD_API_KEY> -e GREYNOISE_API_KEY=<GREYNOISE_API_KEY> -- uvx vulnerability-exposure-mcp==1.2.1
{
"mcpServers": {
"vulnerability-exposure-mcp": {
"command": "uvx",
"args": [
"vulnerability-exposure-mcp==1.2.1"
],
"env": {
"SHODAN_API_KEY": "<SHODAN_API_KEY>",
"VIRUSTOTAL_API_KEY": "<VIRUSTOTAL_API_KEY>",
"ABUSEIPDB_API_KEY": "<ABUSEIPDB_API_KEY>",
"NVD_API_KEY": "<NVD_API_KEY>",
"GREYNOISE_API_KEY": "<GREYNOISE_API_KEY>"
}
}
}
}
{
"mcpServers": {
"vulnerability-exposure-mcp": {
"command": "uvx",
"args": [
"vulnerability-exposure-mcp==1.2.1"
],
"env": {
"SHODAN_API_KEY": "<SHODAN_API_KEY>",
"VIRUSTOTAL_API_KEY": "<VIRUSTOTAL_API_KEY>",
"ABUSEIPDB_API_KEY": "<ABUSEIPDB_API_KEY>",
"NVD_API_KEY": "<NVD_API_KEY>",
"GREYNOISE_API_KEY": "<GREYNOISE_API_KEY>"
}
}
}
}
{
"servers": {
"vulnerability-exposure-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"vulnerability-exposure-mcp==1.2.1"
],
"env": {
"SHODAN_API_KEY": "<SHODAN_API_KEY>",
"VIRUSTOTAL_API_KEY": "<VIRUSTOTAL_API_KEY>",
"ABUSEIPDB_API_KEY": "<ABUSEIPDB_API_KEY>",
"NVD_API_KEY": "<NVD_API_KEY>",
"GREYNOISE_API_KEY": "<GREYNOISE_API_KEY>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
SHODAN_API_KEYOptional, secret | Shodan key for service banners (optional: without it the free InternetDB is used) |
VIRUSTOTAL_API_KEYOptional, secret | VirusTotal key for IP and domain reputation (optional) |
ABUSEIPDB_API_KEYOptional, secret | AbuseIPDB key for IP abuse reports (optional) |
NVD_API_KEYOptional, secret | NVD key for a higher rate limit, so version checks run faster (optional) |
GREYNOISE_API_KEYOptional, secret | GreyNoise key for more scanner lookups (optional; work-email accounts only) |
Details
| Package | [email protected] (PYPI, stdio) |
| First published | 12 Nov 2026 |
| Last updated | 12 Nov 2026 |
| Registry name | io.github.MRFrazer25/vulnerability-exposure-mcp |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
