Recent CVE + GHSA cache for AI agents auditing dependencies (npm/PyPI/Cargo/Maven/Go).
Connect Runs on your machine
claude mcp add cve-cache -e CVE_CACHE_URL=<CVE_CACHE_URL> -e CVE_CACHE_LOCAL_ONLY=<CVE_CACHE_LOCAL_ONLY> -- npx -y @weiseer/[email protected]
{
"mcpServers": {
"cve-cache": {
"command": "npx",
"args": [
"-y",
"@weiseer/[email protected]"
],
"env": {
"CVE_CACHE_URL": "<CVE_CACHE_URL>",
"CVE_CACHE_LOCAL_ONLY": "<CVE_CACHE_LOCAL_ONLY>"
}
}
}
}
{
"mcpServers": {
"cve-cache": {
"command": "npx",
"args": [
"-y",
"@weiseer/[email protected]"
],
"env": {
"CVE_CACHE_URL": "<CVE_CACHE_URL>",
"CVE_CACHE_LOCAL_ONLY": "<CVE_CACHE_LOCAL_ONLY>"
}
}
}
}
{
"servers": {
"cve-cache": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@weiseer/[email protected]"
],
"env": {
"CVE_CACHE_URL": "<CVE_CACHE_URL>",
"CVE_CACHE_LOCAL_ONLY": "<CVE_CACHE_LOCAL_ONLY>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
CVE_CACHE_URLOptional | Override remote snapshot URL |
CVE_CACHE_LOCAL_ONLYOptional | Skip remote fetch |
Details
| Package | @weiseer/[email protected] (NPM, stdio) |
| First published | 30 May 2026 |
| Last updated | 30 May 2026 |
| Registry name | io.github.weiseer/cve-cache |
More security servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
